$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7942bb08-5508-3ac1-9c25-6405883086d5.roa File: 7942bb08-5508-3ac1-9c25-6405883086d5.roa (raw, json) Hash identifier: ZgjcgzvYQpH5Y/i90M4p8yePEsKQ5mdWlrlDV3xpO28= Subject key identifier: 7F:64:D2:8D:65:91:49:69:95:88:CF:E4:E3:CF:F2:B0:CF:79:28:A5 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584EF87CE19AA057AAE810E53880 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7942bb08-5508-3ac1-9c25-6405883086d5.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 21949 IP address blocks: 138.28.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:e1:9a:a0:57:aa:e8:10:e5:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=33ffcd9d-30fb-40d7-b40c-8be7ebdac667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:e9:73:c4:45:80:d7:64:d0:35:ca:10:36: cf:e6:3a:ea:43:a6:f8:f4:0e:c3:e1:d9:6b:71:1b: 7c:6f:4d:4a:a0:0f:12:de:3d:69:d8:45:8c:91:75: f2:0c:36:76:bf:fa:6d:bd:91:c3:fe:54:32:44:db: 14:81:f2:74:0a:31:29:bd:e3:ab:04:c0:39:a1:07: 51:3b:79:e1:be:e9:9a:1a:91:77:70:a7:78:41:ea: 18:42:00:65:0a:5a:4c:49:59:56:4d:85:e1:a5:03: ba:ce:f2:e6:8e:37:f0:ac:60:29:d3:f6:ff:de:31: 21:2d:8d:f7:5d:8d:cc:a3:dc:b9:72:ef:31:da:83: 33:19:2f:e2:e9:66:37:70:ee:f1:9d:55:3b:43:f4: be:21:5e:bd:4d:84:1d:7e:1c:e5:3d:d8:0f:fc:6d: 3e:81:88:12:e1:4d:b1:19:0b:1b:ed:ff:bd:b9:6e: b6:31:63:f1:cc:e9:d2:4a:1e:ed:c9:37:e4:e8:90: 5f:50:64:bd:c8:99:fe:18:aa:3a:8f:44:03:c7:ad: 84:07:d3:15:32:a9:b5:af:ea:47:93:10:1c:01:6e: 94:98:0b:4b:c3:15:20:ee:2c:94:c9:d5:b1:ad:12: 92:9c:a9:90:3c:6e:90:6e:3d:7d:5b:67:23:e1:22: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:64:D2:8D:65:91:49:69:95:88:CF:E4:E3:CF:F2:B0:CF:79:28:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7942bb08-5508-3ac1-9c25-6405883086d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 138.28.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:de:d8:5a:b2:06:83:59:64:27:09:fe:c3:f4:1c:4c:20:09: be:84:bc:8b:2c:d6:76:5b:59:04:8b:ea:a9:d7:b8:0a:1d:3e: fe:84:82:1d:8e:3f:c0:c9:2b:fd:10:ff:52:12:07:1a:1f:e0: 8a:65:4c:94:2a:aa:9c:21:83:2c:f3:2a:a2:0a:18:18:32:ce: a7:63:89:bb:f8:96:e9:66:2e:08:3d:71:2f:cf:da:82:50:2e: 33:4d:0b:46:04:d0:1a:4a:f2:1b:b6:c4:b0:93:17:40:89:bf: d1:0c:21:10:68:9c:3e:cb:49:4b:65:9a:5a:51:d1:ae:55:d3: 91:90:b9:3d:38:29:19:ac:ef:94:38:19:cd:14:01:42:b4:02: 69:1c:2c:73:7a:40:e8:72:fd:1e:af:a3:11:fb:98:28:ab:ed: 4b:d2:7e:94:fc:b8:2a:a6:b0:98:68:9b:9f:e3:92:da:cd:69: e9:1a:ad:f2:7b:99:ac:dc:20:4c:da:66:0e:0f:ab:a5:c6:78: 74:9b:29:29:a8:c9:e8:a9:94:73:6c:0c:2a:93:7b:b4:48:a1: 7c:bd:f0:a4:8b:91:da:78:40:ea:88:61:a7:6f:ab:3c:f3:91: 6b:24:df:e9:ec:54:12:ce:1b:8c:23:98:bb:9e:39:26:a4:43: 23:05:cc:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fOGaoFeq6BDlOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk MzNmZmNkOWQtMzBmYi00MGQ3LWI0MGMtOGJlN2ViZGFjNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrbpc8RFgNdk0DXKEDbP5jrqQ6b49A7D4dlr cRt8b01KoA8S3j1p2EWMkXXyDDZ2v/ptvZHD/lQyRNsUgfJ0CjEpveOrBMA5oQdR O3nhvumaGpF3cKd4QeoYQgBlClpMSVlWTYXhpQO6zvLmjjfwrGAp0/b/3jEhLY33 XY3Mo9y5cu8x2oMzGS/i6WY3cO7xnVU7Q/S+IV69TYQdfhzlPdgP/G0+gYgS4U2x GQsb7f+9uW62MWPxzOnSSh7tyTfk6JBfUGS9yJn+GKo6j0QDx62EB9MVMqm1r+pH kxAcAW6UmAtLwxUg7iyUydWxrRKSnKmQPG6Qbj19W2cj4SLw6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9k0o1lkUlplYjP5OPP8rDPeSilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNzk0MmJiMDgtNTUwOC0z YWMxLTljMjUtNjQwNTg4MzA4NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFihzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGje2FqyBoNZZCcJ/sP0HEwgCb6EvIss1nZbWQSL6qnXuAodPv6Egh2O P8DJK/0Q/1ISBxof4IplTJQqqpwhgyzzKqIKGBgyzqdjibv4lulmLgg9cS/P2oJQ LjNNC0YE0BpK8hu2xLCTF0CJv9EMIRBonD7LSUtlmlpR0a5V05GQuT04KRms75Q4 Gc0UAUK0AmkcLHN6QOhy/R6voxH7mCir7UvSfpT8uCqmsJhom5/jktrNaekarfJ7 mazcIEzaZg4Pq6XGeHSbKSmoyeiplHNsDCqTe7RIoXy98KSLkdp4QOqIYadvqzzz kWsk3+nsVBLOG4wjmLueOSakQyMFzN4= -----END CERTIFICATE-----Generated at Sat Oct 3 11:07:01 2026 by rpki-client