$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa File: a725e940-6637-3306-a3a1-f7abc3c20a45.roa (raw, json) Hash identifier: ORBQNwVxd10pJ+xtffbCPn+eiXhOwM0hJ1G/GBKsKZs= Subject key identifier: 50:69:10:32:74:DD:60:0D:54:3B:ED:38:A3:C6:93:1E:7C:FA:98:1A Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F20F7BADCF7599ACB7D6D3700 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 21949 IP address blocks: 206.253.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ba:dc:f7:59:9a:cb:7d:6d:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=26294845-fcf8-45d0-9959-d7cfb91bad80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:ff:54:f7:36:ce:e4:ea:cd:b3:26:8e:3b: 3e:e4:54:c1:f6:11:53:39:da:b3:1c:39:d2:6b:06: 88:f4:08:4c:f7:68:35:78:9d:e1:8f:aa:83:fe:c4: 7f:32:95:de:dc:82:27:ed:fc:d3:37:82:3e:0c:33: 83:f6:14:ea:ea:63:5e:b7:44:ca:e8:b6:51:30:5c: e6:71:72:4c:78:ba:dc:92:71:e9:e7:1b:b1:92:2d: a6:0b:32:1d:87:7f:e0:bd:d9:b9:19:a6:75:23:89: 7d:4d:74:e3:8d:35:de:ee:97:2a:bf:6a:ee:b6:16: 97:0a:56:3c:ed:4a:15:57:bf:d5:50:d5:22:72:00: 87:d1:0c:d9:97:a6:46:0f:e3:b5:9e:8b:e7:36:66: 81:4d:2c:eb:07:20:5d:3b:49:38:01:d8:fe:f5:f0: e5:be:6f:12:96:3a:1b:b4:09:b1:52:50:28:73:cd: db:c1:bb:1b:c8:07:b9:93:89:da:8b:51:69:fa:cb: fa:83:85:a1:e9:23:80:00:62:cc:5c:12:d5:7c:a2: d9:aa:89:e9:c6:60:7b:65:02:ab:51:1f:3a:5c:50: fd:6b:56:9d:65:e1:0c:b0:ed:95:aa:e6:fa:d7:d1: d5:4e:59:31:86:80:71:98:9f:d9:48:8f:77:cb:82: 50:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:69:10:32:74:DD:60:0D:54:3B:ED:38:A3:C6:93:1E:7C:FA:98:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 206.253.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:db:30:91:c7:51:8c:ff:cc:27:37:ed:41:37:0d:6e:1a:47: 3b:4d:c5:3e:10:ac:1d:d6:e2:e9:79:6c:23:84:96:37:e1:1e: b8:58:74:b3:ed:a9:d7:8d:45:f3:0b:4a:88:97:40:47:1f:d2: c7:6e:2a:c5:1b:8b:8e:f5:21:88:ad:4a:eb:9e:8a:e6:b9:7e: ca:75:86:46:b4:13:39:c5:8b:84:37:40:dd:66:62:50:4d:21: 1c:65:9d:f3:ab:20:40:7f:cd:e8:db:9c:d2:54:ec:e6:fb:29: 07:15:a0:1f:58:62:af:1d:6a:34:00:4d:a9:f7:e7:df:40:7d: 53:75:0a:16:0d:d4:4b:db:67:4f:26:9d:de:8f:53:ac:a7:88: 40:8b:2b:45:dc:f6:d9:ef:b6:7e:45:e3:a6:e4:14:0a:61:6a: 62:8b:96:27:b1:35:67:8b:ca:fd:fc:e8:2a:fb:49:16:95:39: 9e:72:24:34:87:70:51:ff:a3:1a:fa:98:ac:2f:28:b5:c2:2e: b2:a2:d9:ba:cb:aa:95:cc:4b:68:c7:7c:07:c0:8f:96:c2:c3: e2:49:9c:6e:e7:47:50:ac:f2:75:e5:ad:ef:9e:ef:1b:44:ea: b8:c5:a4:9a:2c:3a:1e:14:18:45:62:5b:1b:3c:2b:f7:bd:d2: fb:cd:ee:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97rc91may31tNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjYyOTQ4NDUtZmNmOC00NWQwLTk5NTktZDdjZmI5MWJhZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt7/VPc2zuTqzbMmjjs+5FTB9hFTOdqzHDnS awaI9AhM92g1eJ3hj6qD/sR/MpXe3IIn7fzTN4I+DDOD9hTq6mNet0TK6LZRMFzm cXJMeLrcknHp5xuxki2mCzIdh3/gvdm5GaZ1I4l9TXTjjTXe7pcqv2ruthaXClY8 7UoVV7/VUNUicgCH0QzZl6ZGD+O1novnNmaBTSzrByBdO0k4Adj+9fDlvm8Sljob tAmxUlAoc83bwbsbyAe5k4nai1Fp+sv6g4Wh6SOAAGLMXBLVfKLZqonpxmB7ZQKr UR86XFD9a1adZeEMsO2Vqub619HVTlkxhoBxmJ/ZSI93y4JQCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBpEDJ03WANVDvtOKPGkx58+pgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTcyNWU5NDAtNjYzNy0z MzA2LWEzYTEtZjdhYmMzYzIwYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrbMJHHUYz/zCc37UE3DW4aRztNxT4QrB3W4ul5bCOEljfhHrhYdLPt qdeNRfMLSoiXQEcf0sduKsUbi471IYitSuueiua5fsp1hka0EznFi4Q3QN1mYlBN IRxlnfOrIEB/zejbnNJU7Ob7KQcVoB9YYq8dajQATan3599AfVN1ChYN1EvbZ08m nd6PU6yniECLK0Xc9tnvtn5F46bkFAphamKLliexNWeLyv386Cr7SRaVOZ5yJDSH cFH/oxr6mKwvKLXCLrKi2brLqpXMS2jHfAfAj5bCw+JJnG7nR1Cs8nXlre+e7xtE 6rjFpJosOh4UGEViWxs8K/e90vvN7tg= -----END CERTIFICATE-----Generated at Tue Sep 22 14:06:03 2026 by rpki-client