$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa File: 891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa (raw, json) Hash identifier: +X8vd0oMwqkCpAXui9EAigXJqCtcRiUbeTvLFEY/Zp0= Subject key identifier: 34:FE:29:95:89:DB:A7:9B:D3:C0:56:C3:AD:49:F2:BD:28:5B:F7:B5 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584EA79525ABBE9601F2B735E900 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21949 IP address blocks: 199.45.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:25:ab:be:96:01:f2:b7:35:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3b1bfa4d-3e2e-4cc7-bb2e-a6820c59de3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:2f:c9:b0:1c:64:10:04:e4:6a:b5:45:fc: 67:22:f3:cf:67:f3:a1:08:d9:ea:16:63:b3:12:92: ed:f2:b0:0a:ae:62:29:83:c3:fc:8d:31:30:f7:e3: 47:20:b3:0c:1a:9d:13:2d:12:8a:5c:42:c0:32:e5: 92:e8:a5:78:47:43:32:71:0f:7b:b2:8a:4d:c2:5a: 0b:df:5b:0b:06:e8:9c:03:2d:9c:9e:60:85:2a:46: 72:38:82:e8:a5:e7:b0:ed:05:43:db:d0:84:ee:ee: 65:49:36:2a:0b:f2:38:9c:85:17:81:3b:0f:fd:17: 8a:78:8f:7a:f4:f9:e0:e5:ce:a0:f2:3c:0c:b4:0f: 2d:4f:97:d5:aa:81:b3:54:7c:79:20:14:00:55:43: 64:b8:d3:81:8d:1e:8f:50:61:5e:75:35:72:ea:b0: 82:ec:66:6e:af:cf:53:5b:fe:6a:12:6c:93:d8:6d: 74:91:c5:ac:94:cb:9a:9f:ee:11:38:7e:80:e5:b7: 38:2b:b1:bc:ee:41:37:c6:a1:65:cb:ab:61:8d:83: 6e:d8:a4:5d:54:ba:2f:35:e5:54:12:ea:77:d9:bb: 30:ba:c9:11:90:da:5e:b3:ff:d1:a9:5a:12:55:f7: 47:4d:18:30:df:c3:89:3b:fe:40:97:0d:03:bd:ab: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FE:29:95:89:DB:A7:9B:D3:C0:56:C3:AD:49:F2:BD:28:5B:F7:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.45.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ba:33:8f:6e:3a:f1:2e:5e:82:03:f4:79:3a:02:1c:d0:1f: 0d:73:f4:f6:3e:77:5a:4c:8a:79:53:66:b0:e3:2f:eb:ab:2f: ca:cc:94:64:13:e4:d0:37:18:fe:27:4c:36:0a:82:b9:e3:f0: 0e:be:16:f7:49:b6:eb:cc:21:d1:59:03:e5:8c:e2:c2:58:43: 82:3c:92:61:e7:dc:0e:b5:fe:05:0d:d1:85:65:e0:6b:ba:76: 52:8f:ab:d8:98:c4:cf:92:e3:80:0b:7c:a7:ab:31:b0:66:f1: b0:5c:73:94:6d:b8:a3:b3:4c:04:be:23:21:2e:55:a0:cc:13: c5:18:3d:a2:b1:08:65:ba:95:96:39:b8:9e:97:7f:8e:ac:fc: d9:4e:5d:82:a3:34:bc:7f:b9:be:bd:c7:54:cd:da:aa:41:e5: 8a:dc:f4:30:a3:b2:24:4c:81:41:76:23:39:2f:25:de:c7:7e: 4d:36:3b:0f:0b:47:9f:c7:c8:1b:d3:37:7f:bd:d7:a6:72:e3: 83:5b:06:2f:fd:6d:24:23:92:81:5b:99:32:dc:d0:df:01:f5: 3a:d6:e5:4e:6e:c6:01:e3:e9:a8:24:30:bd:58:90:12:02:98: 3e:95:40:e5:19:06:d1:0c:d4:e7:d0:7f:c1:a9:4c:53:43:a8: 60:ad:fb:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlSWrvpYB8rc16QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2IxYmZhNGQtM2UyZS00Y2M3LWJiMmUtYTY4MjBjNTlkZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc4vybAcZBAE5Gq1RfxnIvPPZ/OhCNnqFmOz EpLt8rAKrmIpg8P8jTEw9+NHILMMGp0TLRKKXELAMuWS6KV4R0MycQ97sopNwloL 31sLBuicAy2cnmCFKkZyOILopeew7QVD29CE7u5lSTYqC/I4nIUXgTsP/ReKeI96 9Png5c6g8jwMtA8tT5fVqoGzVHx5IBQAVUNkuNOBjR6PUGFedTVy6rCC7GZur89T W/5qEmyT2G10kcWslMuan+4ROH6A5bc4K7G87kE3xqFly6thjYNu2KRdVLovNeVU Eup32bswuskRkNpes//RqVoSVfdHTRgw38OJO/5Alw0DvavoBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT+KZWJ26eb08BWw61J8r0oW/e1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvODkxNzAwYzEtYjNmNi0z MDk5LTlmNWYtNzhiYTBiMjdkMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH66M49uOvEuXoID9Hk6AhzQHw1z9PY+d1pMinlTZrDjL+urL8rMlGQT 5NA3GP4nTDYKgrnj8A6+FvdJtuvMIdFZA+WM4sJYQ4I8kmHn3A61/gUN0YVl4Gu6 dlKPq9iYxM+S44ALfKerMbBm8bBcc5RtuKOzTAS+IyEuVaDME8UYPaKxCGW6lZY5 uJ6Xf46s/NlOXYKjNLx/ub69x1TN2qpB5Yrc9DCjsiRMgUF2IzkvJd7Hfk02Ow8L R5/HyBvTN3+916Zy44NbBi/9bSQjkoFbmTLc0N8B9TrW5U5uxgHj6agkML1YkBIC mD6VQOUZBtEM1OfQf8GpTFNDqGCt+3g= -----END CERTIFICATE-----Generated at Mon Sep 21 16:46:01 2026 by rpki-client