$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa File: cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa (raw, json) Hash identifier: 278GFkCV174ruPGhc0FU6v0/awRLOPfzrGy9umG/yCA= Subject key identifier: EC:06:90:00:43:8E:0B:61:CC:1D:D3:52:8F:40:EC:7C:DC:2F:C4:AA Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F15CCE6D144A1416A2509FFC0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 21949 IP address blocks: 64.137.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e6:d1:44:a1:41:6a:25:09:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=db8cdf02-2631-4245-aca4-30bcba539c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:3d:60:34:84:05:d0:c3:d5:89:72:bf:b0: dd:18:bc:c9:b1:c4:90:9e:be:93:6f:3f:cd:5a:38: 0a:a7:04:e1:47:a8:d4:d3:57:f5:28:31:99:c5:29: eb:7c:02:c6:a7:0d:95:eb:59:52:25:d0:63:b8:83: 10:38:46:8e:b1:ed:ce:83:9f:6c:d1:83:f8:fa:cc: d5:a4:a8:3f:8d:c7:82:1d:8d:74:f7:05:df:59:5e: a0:c6:74:fe:e7:5d:db:d1:fa:42:12:14:c8:30:7d: 11:76:0b:fb:e8:22:8d:16:09:63:db:d8:6a:60:7c: f4:0b:25:eb:a9:51:98:f0:ec:52:fe:fa:e9:71:2c: a7:4f:ae:95:2b:f0:6f:43:0c:76:d0:f5:76:8b:a7: 61:d8:23:c1:55:42:8e:c0:80:06:63:16:1b:a4:1f: 8c:e7:98:84:6d:55:67:45:89:b1:84:ee:f5:32:a9: 09:ce:46:24:ad:e6:ce:a9:77:c3:d0:b4:98:67:6a: df:3c:73:5a:b1:9d:a4:75:45:57:96:1a:ee:fd:07: 2c:e4:6f:94:a7:9c:d6:39:bb:78:da:93:48:af:fc: a3:6f:9d:14:1e:b8:bb:2e:4e:ac:10:25:04:a2:fa: 61:52:c2:98:44:1c:fb:d5:e4:0d:75:70:b6:11:dd: ca:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:06:90:00:43:8E:0B:61:CC:1D:D3:52:8F:40:EC:7C:DC:2F:C4:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 64.137.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1b:9a:fa:ff:21:a3:af:d5:5e:0d:c7:d6:ea:86:d8:0e:b2: 96:88:d2:5a:48:d1:d1:ec:66:1e:17:2b:25:1e:fe:70:27:0d: b8:e9:6f:55:1b:71:e6:e4:c1:a4:cd:17:31:78:31:3f:8a:71: 03:d5:ca:b5:cb:61:e3:8a:ad:9b:e7:0d:3c:0f:32:91:ad:31: 12:59:75:b1:df:51:6b:89:44:10:fc:27:c8:16:51:fb:d0:be: bb:bb:c9:53:8f:d5:f8:27:54:43:3a:86:e5:ce:5f:67:11:38: 43:bf:f9:61:61:53:dc:db:b5:93:24:23:af:42:8f:9d:60:fb: 16:b5:70:da:83:22:6f:ee:65:ca:39:68:02:2e:8e:30:cb:46: c1:bd:2a:dd:1e:c1:64:24:d3:8f:ea:81:b2:5f:aa:30:fb:92: 27:f6:2e:9c:2f:a9:7c:a1:58:82:f9:9b:6e:f7:32:c4:da:63: 8f:c5:a1:4b:9f:99:42:96:06:7f:d6:a7:9d:34:7e:ee:ea:ce: 69:bf:ad:f1:26:56:5a:27:f7:57:dc:7e:75:cc:e7:36:95:5d: 1a:54:51:4a:7d:5a:5a:5a:69:13:f3:d8:c5:90:89:82:1b:b8: dc:4f:6e:f9:49:4b:94:7b:30:cb:29:f8:59:3a:a3:97:38:d6: 67:3e:73:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzObRRKFBaiUJ/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZGI4Y2RmMDItMjYzMS00MjQ1LWFjYTQtMzBiY2JhNTM5YzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0c9YDSEBdDD1Ylyv7DdGLzJscSQnr6Tbz/N WjgKpwThR6jU01f1KDGZxSnrfALGpw2V61lSJdBjuIMQOEaOse3Og59s0YP4+szV pKg/jceCHY109wXfWV6gxnT+513b0fpCEhTIMH0Rdgv76CKNFglj29hqYHz0CyXr qVGY8OxS/vrpcSynT66VK/BvQwx20PV2i6dh2CPBVUKOwIAGYxYbpB+M55iEbVVn RYmxhO71MqkJzkYkrebOqXfD0LSYZ2rfPHNasZ2kdUVXlhru/Qcs5G+Up5zWObt4 2pNIr/yjb50UHri7Lk6sECUEovphUsKYRBz71eQNdXC2Ed3KDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwGkABDjgthzB3TUo9A7HzcL8SqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2FmY2VlZTktNjYyMy0z ZGJjLThiN2ItODdiMDNiMWJkNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQImAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4bmvr/IaOv1V4Nx9bqhtgOspaI0lpI0dHsZh4XKyUe/nAnDbjpb1Ub cebkwaTNFzF4MT+KcQPVyrXLYeOKrZvnDTwPMpGtMRJZdbHfUWuJRBD8J8gWUfvQ vru7yVOP1fgnVEM6huXOX2cROEO/+WFhU9zbtZMkI69Cj51g+xa1cNqDIm/uZco5 aAIujjDLRsG9Kt0ewWQk04/qgbJfqjD7kif2LpwvqXyhWIL5m273MsTaY4/FoUuf mUKWBn/Wp500fu7qzmm/rfEmVlon91fcfnXM5zaVXRpUUUp9WlpaaRPz2MWQiYIb uNxPbvlJS5R7MMsp+Fk6o5c41mc+cyk= -----END CERTIFICATE-----Generated at Sun Sep 20 23:14:23 2026 by rpki-client