$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa File: 6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa (raw, json) Hash identifier: e9ABsZ+ddHzchxC0TF5PYwBz0D2uKL+HQil6UVAEzkc= Subject key identifier: 76:02:75:90:C1:43:77:59:50:C9:F3:73:FE:28:AC:36:86:D8:D5:EB Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F119CF80CD8C0BEB779C32300 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 21949 IP address blocks: 209.195.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f8:0c:d8:c0:be:b7:79:c3:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=569bd527-42f6-41ec-802e-60227e12270d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c0:b7:e4:2b:ed:34:31:ad:96:7c:48:af:64: 81:f9:2d:c8:cd:72:0f:1d:b6:57:1f:cf:ce:ec:21: 54:a7:cc:40:97:4b:d2:3d:ee:8f:ec:b5:2a:07:a4: bc:29:3f:a3:6c:42:dc:e7:7a:69:1a:79:e4:b5:6e: 4b:79:61:a1:b6:31:78:79:c0:54:08:34:15:78:cb: 49:dd:cc:32:15:17:31:cb:fd:86:4c:de:b5:29:93: 58:9e:9f:7c:bc:af:ec:27:ee:1a:89:2f:99:e6:b3: d2:25:18:e4:5d:65:30:12:c6:99:74:21:69:bd:d7: 83:53:34:ae:26:f2:5a:f9:1d:f6:a7:ff:57:7c:14: b3:38:86:f5:eb:40:62:14:23:78:0e:1f:4e:c6:d8: b1:34:59:8a:fc:76:97:26:d0:9a:43:8b:4f:d8:69: 17:2f:b5:ec:6c:2f:6b:b5:e3:23:cb:16:d0:4d:84: ea:e3:9b:b3:8c:58:e0:9e:b5:fd:8f:df:28:46:8c: 34:06:cb:c1:a6:69:8e:96:c0:45:78:70:7f:5d:a4: ad:6c:cc:f6:37:bd:f9:c9:f4:aa:c5:25:ba:5c:55: 43:93:ee:df:97:5f:07:72:99:f5:ce:5b:45:db:89: 18:85:6c:51:6a:cf:69:43:18:e8:f4:8f:29:fd:25: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:02:75:90:C1:43:77:59:50:C9:F3:73:FE:28:AC:36:86:D8:D5:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 209.195.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:83:32:08:25:02:3c:cb:7c:9a:5e:92:56:f3:fe:eb:40:34: 51:8b:bd:b6:cb:ae:7a:b2:d4:b5:86:2d:a7:fa:5f:9e:3a:9b: 1b:a2:3c:75:b1:31:52:60:50:02:e6:c0:60:e3:b9:20:f3:96: a5:c3:a7:f9:7b:45:b7:57:35:12:f1:48:d1:a5:39:fc:36:7e: a9:cf:47:2c:6b:a4:44:fc:c9:7d:fe:e2:04:9e:5b:d9:64:91: d3:15:e0:21:d1:97:8f:9c:00:1d:bc:68:5e:5e:a4:78:4f:7c: d3:4b:57:82:35:31:cb:2f:e2:c6:4c:17:54:21:cf:27:dd:80: 6e:ed:e8:c0:d5:ce:d1:d4:1a:93:57:8e:5d:fc:17:73:16:1f: 73:76:50:13:27:ba:5f:c8:3d:15:ef:4a:e4:dd:03:60:a4:bc: 55:cb:16:41:a6:50:7b:00:31:fe:46:03:10:6f:0f:ea:e5:9c: b4:23:a2:87:1e:9a:02:dc:f9:74:b9:bb:38:0f:96:db:f0:6a: 88:56:d4:0f:25:ed:71:f7:36:9c:9d:1b:ac:f7:6f:40:95:7b: d9:23:67:b6:b5:b2:ad:b2:f9:cd:17:80:e9:f2:cf:64:3d:5b: e9:2a:bb:63:ed:57:ce:9d:f7:bd:1f:68:28:07:3b:28:fc:90: aa:41:0b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPgM2MC+t3nDIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NTY5YmQ1MjctNDJmNi00MWVjLTgwMmUtNjAyMjdlMTIyNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38C35CvtNDGtlnxIr2SB+S3IzXIPHbZXH8/O 7CFUp8xAl0vSPe6P7LUqB6S8KT+jbELc53ppGnnktW5LeWGhtjF4ecBUCDQVeMtJ 3cwyFRcxy/2GTN61KZNYnp98vK/sJ+4aiS+Z5rPSJRjkXWUwEsaZdCFpvdeDUzSu JvJa+R32p/9XfBSzOIb160BiFCN4Dh9OxtixNFmK/HaXJtCaQ4tP2GkXL7XsbC9r teMjyxbQTYTq45uzjFjgnrX9j98oRow0BsvBpmmOlsBFeHB/XaStbMz2N735yfSq xSW6XFVDk+7fl18Hcpn1zltF24kYhWxRas9pQxjo9I8p/SXo1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYCdZDBQ3dZUMnzc/4orDaG2NXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNmVmOTFjNjQtNWEyYS0z MWMxLTgwNTAtYjcyYWUyZGNkNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0cP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyDMgglAjzLfJpeklbz/utANFGLvbbLrnqy1LWGLaf6X546mxuiPHWx MVJgUALmwGDjuSDzlqXDp/l7RbdXNRLxSNGlOfw2fqnPRyxrpET8yX3+4gSeW9lk kdMV4CHRl4+cAB28aF5epHhPfNNLV4I1Mcsv4sZMF1QhzyfdgG7t6MDVztHUGpNX jl38F3MWH3N2UBMnul/IPRXvSuTdA2CkvFXLFkGmUHsAMf5GAxBvD+rlnLQjooce mgLc+XS5uzgPltvwaohW1A8l7XH3NpydG6z3b0CVe9kjZ7a1sq2y+c0XgOnyz2Q9 W+kqu2PtV86d970faCgHOyj8kKpBC4k= -----END CERTIFICATE-----Generated at Sun Sep 20 23:14:23 2026 by rpki-client