$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa File: 1c8cfd90-1e45-3ca8-865a-284e8261e043.roa (raw, json) Hash identifier: NTiBgNqDzMJsWJq/gp8t3eW4+F69CYmzpNox0vfga6Q= Subject key identifier: 58:6C:58:16:07:39:97:4B:9D:7E:76:85:58:B2:BB:63:33:6C:8B:A4 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F20F7BAB8183031E95D068870 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 21949 IP address blocks: 199.68.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ba:b8:18:30:31:e9:5d:06:88:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=afc4e3f8-0ebe-47d3-bbb1-c7b2a706edda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a7:93:fe:71:9d:17:ec:66:bd:bc:60:95:ac: b4:ba:2c:5a:6a:31:fc:38:91:d3:22:e3:b3:be:92: 85:a6:70:0b:8c:a9:5e:a5:65:0b:47:08:28:ab:d0: 09:e1:f4:8a:48:f8:fa:20:76:69:a7:72:ac:8e:05: 39:3a:72:55:4c:54:eb:fe:97:8a:60:9c:35:4e:1f: 63:85:aa:92:0e:62:02:ce:e8:23:f5:13:3b:31:1d: ad:cc:ce:05:be:d0:76:42:a1:97:56:85:74:96:9a: d0:8b:0f:45:ba:10:81:fd:5d:65:d7:a8:8a:b8:43: 0d:a0:e4:fe:d0:b7:1f:9c:66:19:a9:9e:9a:25:a0: 31:3f:12:a8:d5:a4:46:72:1c:3d:53:a2:01:ec:f7: 4e:6d:f7:48:dc:ea:34:fe:da:14:57:06:d2:8e:29: 2c:47:32:f9:fd:9a:b8:f6:a7:89:a9:e5:66:11:98: 13:9f:5b:f2:2c:5a:f2:48:84:74:bb:6b:14:88:d1: c3:2b:3b:f7:87:3d:80:6b:d5:aa:9a:5d:bc:e5:c0: 26:2a:e3:57:f8:df:4b:f1:6d:e5:0c:ba:75:1e:cf: b6:44:f7:94:fc:c8:86:c3:5e:f4:17:aa:6c:59:10: 73:c6:f5:bf:d8:69:7f:d1:32:34:9d:b0:07:e7:e8: 8e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:58:16:07:39:97:4B:9D:7E:76:85:58:B2:BB:63:33:6C:8B:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.68.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9d:13:eb:1c:fb:f4:7b:8d:13:db:fa:d8:71:0f:49:23:5a: 81:0d:bf:06:96:3a:8a:72:0a:c2:fe:5b:10:6d:f9:a4:aa:64: 4f:ec:1d:4c:00:75:6b:16:f5:6b:a5:c2:93:57:d9:d2:4b:5d: 4b:bc:51:30:c1:cf:63:a8:2c:5d:46:64:ee:2c:c5:5a:72:df: 96:63:9f:e6:c3:46:6b:ee:df:78:f6:da:8a:2a:ae:a6:dc:1b: 75:71:53:6c:fa:4a:fd:0a:88:49:57:65:3b:3d:2f:77:40:3f: ef:f9:a3:cb:04:b1:3c:c2:1a:e7:21:96:18:45:09:8e:4b:0e: 97:ba:dc:06:fb:4f:24:d8:fd:fe:12:3d:a7:5e:df:ec:0d:ed: c5:33:d6:d5:37:1e:1f:0c:d4:e7:7b:c2:a9:50:3e:d4:72:10: d7:ff:d7:ac:67:57:5f:06:77:c8:24:7a:22:38:77:10:ef:2d: 8f:8b:13:49:bd:18:74:35:bc:e0:36:34:4d:bf:62:16:8d:ce: 7d:a4:35:89:02:a6:9c:5e:2c:21:4e:23:c0:38:5e:45:64:b4: 6b:9f:21:f3:8c:60:92:2b:ac:92:e0:e5:14:1e:eb:e9:66:dd: c3:0a:8e:17:a6:8f:47:b6:f9:41:62:a7:b8:31:d8:13:bc:c0: 15:91:3a:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97q4GDAx6V0GiHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YWZjNGUzZjgtMGViZS00N2QzLWJiYjEtYzdiMmE3MDZlZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqeT/nGdF+xmvbxglay0uixaajH8OJHTIuOz vpKFpnALjKlepWULRwgoq9AJ4fSKSPj6IHZpp3KsjgU5OnJVTFTr/peKYJw1Th9j haqSDmICzugj9RM7MR2tzM4FvtB2QqGXVoV0lprQiw9FuhCB/V1l16iKuEMNoOT+ 0LcfnGYZqZ6aJaAxPxKo1aRGchw9U6IB7PdObfdI3Oo0/toUVwbSjiksRzL5/Zq4 9qeJqeVmEZgTn1vyLFrySIR0u2sUiNHDKzv3hz2Aa9Wqml285cAmKuNX+N9L8W3l DLp1Hs+2RPeU/MiGw170F6psWRBzxvW/2Gl/0TI0nbAH5+iOxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhsWBYHOZdLnX52hViyu2MzbIukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMWM4Y2ZkOTAtMWU0NS0z Y2E4LTg2NWEtMjg0ZTgyNjFlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+dE+sc+/R7jRPb+thxD0kjWoENvwaWOopyCsL+WxBt+aSqZE/sHUwA dWsW9WulwpNX2dJLXUu8UTDBz2OoLF1GZO4sxVpy35Zjn+bDRmvu33j22ooqrqbc G3VxU2z6Sv0KiElXZTs9L3dAP+/5o8sEsTzCGuchlhhFCY5LDpe63Ab7TyTY/f4S Pade3+wN7cUz1tU3Hh8M1Od7wqlQPtRyENf/16xnV18Gd8gkeiI4dxDvLY+LE0m9 GHQ1vOA2NE2/YhaNzn2kNYkCppxeLCFOI8A4XkVktGufIfOMYJIrrJLg5RQe6+lm 3cMKjhemj0e2+UFip7gx2BO8wBWROrw= -----END CERTIFICATE-----Generated at Sun Sep 20 23:14:22 2026 by rpki-client