$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa File: 8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa (raw, json) Hash identifier: si3ZCtT0lYjoiSPDotDAvRaYaB5YAONPdsQMkDB64BM= Subject key identifier: 52:A7:B5:CB:B2:67:51:93:6C:72:B4:6B:04:69:5F:5D:F9:C1:DD:A6 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F3A17CE911E1D828FB3AD9980 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 21949 IP address blocks: 173.243.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:ce:91:1e:1d:82:8f:b3:ad:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=1c7d497c-ce4a-4b4a-9866-83eb679919a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:71:03:ce:46:c2:4a:8b:77:02:77:d4:f9: c9:dd:aa:2a:a4:71:1f:ee:91:b8:d2:85:0b:97:37: d4:22:f3:7d:da:92:fa:4a:f0:82:af:74:8d:8c:5a: 9b:c3:7c:e4:ee:61:4a:5d:73:f0:3a:c6:99:e8:c3: 95:45:bf:bb:95:63:47:65:1f:4d:a8:f2:d7:14:af: 60:c4:7a:b7:31:21:a0:26:32:3c:9e:a5:3b:35:42: e1:a1:2f:83:66:dc:91:a1:02:89:89:57:9f:c9:2a: 6f:6e:cb:4a:f8:28:7c:34:39:7f:16:2d:27:39:79: 7e:b4:da:2c:45:ad:44:ff:c7:da:d8:48:37:d1:bb: ea:1b:be:ba:c1:44:e9:29:ac:c9:f8:bd:b9:ef:07: 2e:4a:32:03:6b:50:d0:42:3a:e8:f9:d5:28:70:3b: 25:d6:54:32:fa:a8:dc:f0:cd:36:73:9c:0c:f4:41: f9:6c:5b:bd:d0:3d:ab:f3:94:74:c9:01:85:c0:06: 34:4a:e4:e9:65:7b:90:45:3b:67:0a:31:bc:ef:64: e3:90:d5:84:cb:e8:8e:27:0c:da:5a:c2:d8:c9:3c: 74:ae:28:39:9e:10:74:63:f0:8b:7d:db:b4:83:33: 4d:82:b2:a2:a2:37:a5:fb:06:b1:6d:b7:9c:6a:3a: db:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A7:B5:CB:B2:67:51:93:6C:72:B4:6B:04:69:5F:5D:F9:C1:DD:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 173.243.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:74:74:37:33:85:9f:af:bb:70:d9:e3:2a:de:e0:ea:64:f0: ac:64:ff:58:cc:0c:1d:29:39:42:1f:c8:56:86:27:d3:3a:e1: 68:a7:47:30:c7:fe:4e:74:74:c2:be:c0:27:e1:3f:05:3b:9c: c1:1e:a1:0a:33:07:b7:23:15:5d:ae:db:2a:78:6f:65:eb:61: 0b:69:fc:94:f5:bf:a2:46:7c:df:05:1b:c1:6f:c7:ee:f3:79: 17:b7:e8:c7:36:2c:9d:71:5b:91:06:3a:46:3c:8e:a3:cb:46: b3:0c:39:3f:a2:94:5f:f3:bc:f8:d1:cf:af:be:e8:79:c6:f0: 9b:e2:3f:09:49:9e:bf:55:50:b1:8d:a7:ed:43:54:4c:dd:38: 45:fe:c2:b1:b5:5f:9d:08:19:40:af:8c:9a:ad:59:84:52:03: 99:45:67:18:32:45:d1:cd:51:3c:a4:75:57:38:70:13:4c:82: 64:5f:c1:0f:1f:9b:d4:8c:30:9f:59:e1:8c:7e:f8:24:f8:fd: 5b:56:ca:44:81:cb:f4:db:1f:33:06:08:6b:17:61:32:46:77: 15:c3:da:a7:23:48:58:36:33:d9:a3:96:c8:d8:ee:d4:8c:1c: e3:88:bf:cc:6a:17:27:e4:27:35:49:56:71:b7:70:5e:b0:74: 52:94:b9:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F86RHh2Cj7OtmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MWM3ZDQ5N2MtY2U0YS00YjRhLTk4NjYtODNlYjY3OTkxOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1lxA85GwkqLdwJ31PnJ3aoqpHEf7pG40oUL lzfUIvN92pL6SvCCr3SNjFqbw3zk7mFKXXPwOsaZ6MOVRb+7lWNHZR9NqPLXFK9g xHq3MSGgJjI8nqU7NULhoS+DZtyRoQKJiVefySpvbstK+Ch8NDl/Fi0nOXl+tNos Ra1E/8fa2Eg30bvqG766wUTpKazJ+L257wcuSjIDa1DQQjro+dUocDsl1lQy+qjc 8M02c5wM9EH5bFu90D2r85R0yQGFwAY0SuTpZXuQRTtnCjG872TjkNWEy+iOJwza WsLYyTx0rig5nhB0Y/CLfdu0gzNNgrKiojel+waxbbecajrbGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKntcuyZ1GTbHK0awRpX135wd2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvOGUxY2IxYzAtY2RlZi0z ZDFkLWE5N2EtOTQwYzcyMzE3ODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfPLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl0dDczhZ+vu3DZ4yre4Opk8Kxk/1jMDB0pOUIfyFaGJ9M64WinRzDH /k50dMK+wCfhPwU7nMEeoQozB7cjFV2u2yp4b2XrYQtp/JT1v6JGfN8FG8Fvx+7z eRe36Mc2LJ1xW5EGOkY8jqPLRrMMOT+ilF/zvPjRz6++6HnG8JviPwlJnr9VULGN p+1DVEzdOEX+wrG1X50IGUCvjJqtWYRSA5lFZxgyRdHNUTykdVc4cBNMgmRfwQ8f m9SMMJ9Z4Yx++CT4/VtWykSBy/TbHzMGCGsXYTJGdxXD2qcjSFg2M9mjlsjY7tSM HOOIv8xqFyfkJzVJVnG3cF6wdFKUuSI= -----END CERTIFICATE-----Generated at Mon Sep 21 12:39:29 2026 by rpki-client