$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa File: 55c10b42-1e3f-391a-803f-94a6efd0d529.roa (raw, json) Hash identifier: PEUUVXuG6OROnK9nib0E25V11gOngFsre+4dHhx7K5c= Subject key identifier: F9:3B:41:20:56:12:C9:D4:03:C0:05:99:30:F8:C5:44:C6:DD:0C:0C Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F3A17CE9EB1BC7222D8AE0400 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 21949 IP address blocks: 173.243.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:ce:9e:b1:bc:72:22:d8:ae:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=ffe6909f-0335-4667-8e76-929dbbd0be54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:da:e4:0c:2a:5f:51:65:01:94:b3:8f:ff: 53:a4:89:c1:dc:20:07:84:7f:69:bf:3d:b0:69:19: 51:70:6f:d1:e5:f8:2b:91:f6:30:1d:ac:21:99:8d: 38:5f:24:6f:28:bb:7a:2c:4f:e9:c9:54:41:95:5a: f4:e1:1f:da:49:42:f9:fd:0d:d1:0f:01:01:e2:e2: 81:94:cc:42:eb:a5:f1:7a:4c:35:77:a9:4b:7e:45: 5a:e1:bb:0d:df:89:5c:ac:09:2f:18:b2:bb:51:51: f3:12:55:bb:ef:44:a8:bb:6b:e7:37:72:c0:97:d7: 23:f2:c3:91:ac:e5:54:46:ab:18:6e:8e:fc:78:57: 9b:bf:a3:82:a1:96:b3:5e:39:fe:88:17:24:f4:69: 65:c1:f1:40:96:e4:a7:2d:3f:6e:c1:78:81:2e:ef: 9d:fd:48:f7:99:0e:78:49:80:1a:f8:65:cc:d9:57: d6:cb:41:44:df:47:75:ad:c0:08:8d:95:93:2d:5b: ba:46:5d:32:1b:7e:f5:16:08:d9:d1:d2:7a:fe:b0: 38:a1:42:ea:e5:cf:55:e4:37:7b:05:9c:73:2f:b1: 53:2c:99:54:2e:95:2a:09:09:f8:b5:47:10:05:6f: 93:c6:b4:24:77:9a:3b:a5:af:c4:5c:57:d1:3d:93: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3B:41:20:56:12:C9:D4:03:C0:05:99:30:F8:C5:44:C6:DD:0C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 173.243.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d9:1c:ed:c0:c0:20:03:ac:e3:e4:03:14:99:41:a0:17:1a: 6e:19:12:27:63:e0:c8:aa:ef:6e:a7:e6:f4:99:bd:c8:d4:d2: c9:86:d8:93:c1:f7:da:68:cf:92:21:61:10:b9:44:66:cb:03: f3:c9:9f:55:3e:b4:7f:e6:66:a6:79:d3:61:04:b0:64:05:9b: 69:7a:77:47:3b:c8:ae:48:81:72:8c:b1:d9:98:e5:08:0d:13: c7:7e:d1:03:2d:8a:c0:e1:a5:86:04:f3:ea:c4:4f:f0:a5:25: 0c:82:83:52:f7:47:24:91:62:1a:93:1f:1c:4a:7f:45:1e:51: 06:3e:b4:4a:80:cd:6a:2b:02:8f:ff:18:26:e6:f8:d3:9b:6c: 55:eb:58:da:ee:7a:fa:ee:d0:f5:86:ad:7e:f3:e9:3a:30:ee: ba:c5:64:47:42:33:53:66:cd:c4:f8:8b:1f:fa:b1:99:5b:be: 57:fc:33:a8:1e:39:16:63:a9:85:cb:91:96:2d:56:01:b7:64: 38:6e:97:7b:f1:16:a1:a7:5c:8d:a0:a7:e8:e7:fb:1c:68:9f: 71:a4:9f:4a:c3:71:0a:d2:f6:b8:10:ec:0e:0a:48:02:2f:ee: ad:1d:5b:c4:f9:6c:4a:45:3e:b5:b6:16:f6:64:c6:b1:1f:85: 12:9a:2f:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F86esbxyItiuBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZmZlNjkwOWYtMDMzNS00NjY3LThlNzYtOTI5ZGJiZDBiZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ7a5AwqX1FlAZSzj/9TpInB3CAHhH9pvz2w aRlRcG/R5fgrkfYwHawhmY04XyRvKLt6LE/pyVRBlVr04R/aSUL5/Q3RDwEB4uKB lMxC66Xxekw1d6lLfkVa4bsN34lcrAkvGLK7UVHzElW770Sou2vnN3LAl9cj8sOR rOVURqsYbo78eFebv6OCoZazXjn+iBck9GllwfFAluSnLT9uwXiBLu+d/Uj3mQ54 SYAa+GXM2VfWy0FE30d1rcAIjZWTLVu6Rl0yG371FgjZ0dJ6/rA4oULq5c9V5Dd7 BZxzL7FTLJlULpUqCQn4tUcQBW+TxrQkd5o7pa/EXFfRPZN6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPk7QSBWEsnUA8AFmTD4xUTG3QwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNTVjMTBiNDItMWUzZi0z OTFhLTgwM2YtOTRhNmVmZDBkNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnZHO3AwCADrOPkAxSZQaAXGm4ZEidj4Miq726n5vSZvcjU0smG2JPB 99poz5IhYRC5RGbLA/PJn1U+tH/mZqZ502EEsGQFm2l6d0c7yK5IgXKMsdmY5QgN E8d+0QMtisDhpYYE8+rET/ClJQyCg1L3RySRYhqTHxxKf0UeUQY+tEqAzWorAo// GCbm+NObbFXrWNruevru0PWGrX7z6Tow7rrFZEdCM1NmzcT4ix/6sZlbvlf8M6ge ORZjqYXLkZYtVgG3ZDhul3vxFqGnXI2gp+jn+xxon3Gkn0rDcQrS9rgQ7A4KSAIv 7q0dW8T5bEpFPrW2FvZkxrEfhRKaL7k= -----END CERTIFICATE-----Generated at Mon Sep 21 11:07:31 2026 by rpki-client