$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa File: 7effcafc-decd-3160-8a47-fac0462e8a13.roa (raw, json) Hash identifier: +GuMhXx/9LsPJ/0frNU/ZrQJ/5WTJTqfuFWnBi9R2lQ= Subject key identifier: 17:1E:3C:6D:D0:45:4D:18:8F:C8:AD:2A:D4:5E:F6:75:4A:3F:46:80 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F20F7BAF3C57FC77B0DCF4900 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 21949 IP address blocks: 66.207.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ba:f3:c5:7f:c7:7b:0d:cf:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=5459abf3-a16e-4b6f-8271-883ebc0d52ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f1:88:e8:e9:6f:c1:51:c0:fb:28:e6:a8:c6: 50:68:34:9f:20:32:65:2c:bf:d9:f5:dd:91:fd:a3: 63:08:6d:56:e5:bf:d3:b0:95:ab:84:0c:fb:7d:f7: e4:fe:9a:8c:84:c8:dc:b8:83:70:71:11:de:02:9f: 49:9b:7c:32:38:2a:24:4b:20:35:75:ee:92:f5:21: 62:54:d9:31:47:fd:ac:8e:3e:b1:2a:aa:4b:a6:87: d6:a9:ef:01:e4:f3:79:67:35:40:2d:12:24:db:7d: f0:e7:1a:dc:ee:2c:57:d0:ca:ac:ba:eb:d5:24:14: 13:fc:d1:4c:6f:2f:21:f3:35:63:36:24:d2:28:99: 52:9f:41:07:cd:2c:fe:24:21:9d:a9:3f:29:3d:b1: 95:3f:01:d5:82:4a:ab:e1:5d:9c:4a:0c:ea:e8:5f: 73:f7:bd:5e:c7:c3:e0:3c:c7:aa:73:c3:21:09:55: 19:90:a7:0e:2e:00:c7:b1:e5:16:85:75:93:21:3d: b8:86:03:8c:44:3b:49:10:77:a1:61:6d:7c:f4:1d: 97:16:20:7d:f6:64:45:43:c0:35:f0:96:83:7c:c5: eb:63:ed:97:a5:56:77:60:01:65:b9:3e:11:ae:be: e1:71:30:49:ed:7f:81:e1:b7:96:e3:fa:0b:b5:dc: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1E:3C:6D:D0:45:4D:18:8F:C8:AD:2A:D4:5E:F6:75:4A:3F:46:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 66.207.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:41:24:4a:17:1c:9b:1e:a6:35:a9:57:e4:19:be:2a:ea:88: 79:a0:ea:7d:b6:60:53:41:08:de:74:fd:2b:b2:34:25:41:a8: 77:6b:97:bc:1a:75:87:cc:99:2c:5c:a1:65:59:86:af:a6:49: a3:63:79:80:3e:51:8a:01:7b:d0:c9:ac:b9:48:11:31:59:9c: 12:06:d9:7c:af:ed:3f:fa:5a:ea:3e:9c:f8:75:8d:d3:bd:1e: e7:9e:60:12:43:bb:a4:4c:d4:9a:53:87:ca:47:e6:17:6c:ef: aa:89:a3:a7:37:27:8d:b1:f8:fb:02:11:58:46:80:3a:03:8b: aa:4e:ef:26:83:27:84:93:0e:9d:88:e9:a9:09:9c:40:0d:29: b0:c8:eb:ff:cf:3e:d5:b8:df:19:7d:93:bf:d7:31:aa:33:2c: d8:65:c6:f5:b8:a1:31:44:d7:af:19:bf:a7:83:2f:1a:e2:c5: 25:3a:7d:8d:02:08:1d:b5:d7:df:5e:4b:68:17:2f:b1:f7:cc: 16:64:b9:26:c0:3e:e4:d2:6c:d8:e8:eb:58:f6:f6:26:2c:44: 49:6b:63:18:8b:75:9f:7c:86:1a:65:ad:22:a7:ca:8c:26:1f: 23:28:a2:ee:3e:26:51:a0:55:4f:69:c5:a2:fd:b9:80:0c:b4: b7:2d:0e:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97rzxX/Hew3PSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTQ1OWFiZjMtYTE2ZS00YjZmLTgyNzEtODgzZWJjMGQ1MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvGI6OlvwVHA+yjmqMZQaDSfIDJlLL/Z9d2R /aNjCG1W5b/TsJWrhAz7fffk/pqMhMjcuINwcRHeAp9Jm3wyOCokSyA1de6S9SFi VNkxR/2sjj6xKqpLpofWqe8B5PN5ZzVALRIk233w5xrc7ixX0MqsuuvVJBQT/NFM by8h8zVjNiTSKJlSn0EHzSz+JCGdqT8pPbGVPwHVgkqr4V2cSgzq6F9z971ex8Pg PMeqc8MhCVUZkKcOLgDHseUWhXWTIT24hgOMRDtJEHehYW189B2XFiB99mRFQ8A1 8JaDfMXrY+2XpVZ3YAFluT4Rrr7hcTBJ7X+B4beW4/oLtdy4rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcePG3QRU0Yj8itKtRe9nVKP0aAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvN2VmZmNhZmMtZGVjZC0z MTYwLThhNDctZmFjMDQ2MmU4YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQs/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9BJEoXHJsepjWpV+QZvirqiHmg6n22YFNBCN50/SuyNCVBqHdrl7wa dYfMmSxcoWVZhq+mSaNjeYA+UYoBe9DJrLlIETFZnBIG2Xyv7T/6Wuo+nPh1jdO9 HueeYBJDu6RM1JpTh8pH5hds76qJo6c3J42x+PsCEVhGgDoDi6pO7yaDJ4STDp2I 6akJnEANKbDI6//PPtW43xl9k7/XMaozLNhlxvW4oTFE168Zv6eDLxrixSU6fY0C CB21199eS2gXL7H3zBZkuSbAPuTSbNjo61j29iYsRElrYxiLdZ98hhplrSKnyowm HyMoou4+JlGgVU9pxaL9uYAMtLctDmw= -----END CERTIFICATE-----Generated at Sun Sep 20 23:13:24 2026 by rpki-client