$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa File: aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa (raw, json) Hash identifier: 3fJVubrKXYUAmIB2J/RE8v4DJ+IqlAbcomfmg1bnX00= Subject key identifier: A4:FE:F3:98:FD:62:46:A1:15:45:48:00:8C:38:0B:47:E8:2A:A4:94 Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Certificate serial: 010D0C9F4328584F4973D0CB427C491779874720 Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399103 IP address blocks: 192.240.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d0:cb:42:7c:49:17:79:87:47:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9cefcad2-c909-4cc3-a2d8-70cf20060535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:80:40:29:11:86:a8:ee:67:09:6c:10:97:74: 1f:62:d6:cf:77:36:a5:81:55:fb:8d:f1:22:41:68: b7:23:39:38:3e:96:86:85:90:78:dc:31:29:d3:b9: f4:c9:41:f2:91:9d:cb:74:0d:82:c8:08:f1:82:a3: 9c:7e:90:73:12:4f:9b:41:82:ef:a9:65:70:cd:ef: b6:be:20:b5:7e:12:c6:4c:c3:ad:f8:39:17:70:9d: 31:aa:f1:ae:41:6f:62:5f:98:ac:6e:cc:68:f7:bc: 97:8b:05:d8:32:8a:d6:68:39:5f:25:44:b0:b9:81: d0:55:17:01:2a:a6:65:a5:19:f5:bc:13:cd:ff:4a: 3d:53:73:ea:0c:7e:11:38:d5:c7:58:c4:bf:01:90: b1:b5:0c:a8:ac:50:a8:ca:4b:31:c2:eb:24:75:0f: 02:ac:ed:08:29:8e:83:79:f5:d5:ad:f5:f1:32:21: ac:66:1a:4b:3c:0b:0f:02:24:cf:6d:de:51:a6:71: 37:f6:ea:5e:6a:c1:56:89:08:e3:b0:ba:a6:ba:28: 5b:cd:e0:2f:ef:db:c9:c0:d7:a3:eb:1b:ed:d0:65: 6f:78:d2:1c:46:9f:3e:d9:e1:38:28:2e:af:6f:9d: 47:48:57:db:bf:07:e2:77:84:0e:69:cc:49:a3:20: b7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FE:F3:98:FD:62:46:A1:15:45:48:00:8C:38:0B:47:E8:2A:A4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl X509v3 Authority Key Identifier: keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer sbgp-ipAddrBlock: critical IPv4: 192.240.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:89:7b:f3:7f:58:b6:27:3b:c4:c2:34:fc:ed:3b:6e:20:c2: 63:94:c8:4f:53:01:c1:9d:44:76:e2:2d:ef:ed:8d:34:ec:e4: 91:c4:49:7f:da:63:47:40:07:44:8e:b7:2b:fc:ea:aa:17:c8: c8:24:4d:e3:91:93:5c:8a:45:31:f1:7f:96:1e:26:ed:77:c3: b1:58:c1:ad:ff:08:c2:21:1a:b5:e5:35:d4:22:5e:32:e1:05: 1f:7a:2c:29:d9:c7:b8:90:76:5d:1b:0f:ea:d2:af:0c:24:09: 0c:5e:5b:09:a5:26:6b:a8:f6:d4:ea:f3:01:1f:9f:b0:3a:05: ab:03:92:b8:86:32:7a:ee:bd:2e:72:11:15:4b:d9:b4:4a:64: 77:c8:47:2d:f6:fa:4c:b8:d9:ba:dc:5f:b6:b0:2a:7f:90:12: bc:03:7e:52:be:cc:16:89:1f:12:ca:08:f0:38:2b:9c:45:83: 37:8e:76:23:d0:21:c8:2e:81:9b:b4:15:07:e6:ea:09:25:9a: 44:b2:df:28:f3:d7:cc:85:fb:57:98:9e:c2:46:17:62:75:89: 16:6f:3f:66:37:e5:04:1c:1a:91:4e:36:9d:e6:23:74:50:4c: b3:e8:90:eb:0a:c3:a8:31:03:78:39:f8:e4:18:08:4b:95:c8: b6:4c:2c:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9DLQnxJF3mHRyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl MmMxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWNlZmNhZDItYzkwOS00Y2MzLWEyZDgtNzBjZjIwMDYwNTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IBAKRGGqO5nCWwQl3QfYtbPdzalgVX7jfEi QWi3Izk4PpaGhZB43DEp07n0yUHykZ3LdA2CyAjxgqOcfpBzEk+bQYLvqWVwze+2 viC1fhLGTMOt+DkXcJ0xqvGuQW9iX5isbsxo97yXiwXYMorWaDlfJUSwuYHQVRcB KqZlpRn1vBPN/0o9U3PqDH4RONXHWMS/AZCxtQyorFCoyksxwuskdQ8CrO0IKY6D efXVrfXxMiGsZhpLPAsPAiTPbd5RpnE39upeasFWiQjjsLqmuihbzeAv79vJwNej 6xvt0GVveNIcRp8+2eE4KC6vb51HSFfbvwfid4QOacxJoyC3hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT+85j9YkahFUVIAIw4C0foKqSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2 ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvYWE1ZGJhZjctOWYzNC0z YTVhLWFiZmItMzQ0NzExYzY2ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2 NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3 MDI2MGUyYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSJe/N/WLYnO8TCNPztO24gwmOUyE9TAcGdRHbiLe/tjTTs5JHESX/a Y0dAB0SOtyv86qoXyMgkTeORk1yKRTHxf5YeJu13w7FYwa3/CMIhGrXlNdQiXjLh BR96LCnZx7iQdl0bD+rSrwwkCQxeWwmlJmuo9tTq8wEfn7A6BasDkriGMnruvS5y ERVL2bRKZHfIRy32+ky42brcX7awKn+QErwDflK+zBaJHxLKCPA4K5xFgzeOdiPQ IcgugZu0FQfm6gklmkSy3yjz18yF+1eYnsJGF2J1iRZvP2Y35QQcGpFONp3mI3RQ TLPokOsKw6gxA3g5+OQYCEuVyLZMLIc= -----END CERTIFICATE-----Generated at Sun Sep 27 01:32:42 2026 by rpki-client