$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa File: ce7c6a93-090d-3601-ac47-5724324b5304.roa (raw, json) Hash identifier: kvgwxCkQeKWiU94Lxao/cXZRnQU40+tC7SN5o2pexZo= Subject key identifier: E9:B4:7C:14:80:BC:27:03:46:A4:0C:9E:12:D3:15:E6:18:8A:DD:62 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F225CFEB942CEFBDA19337FA0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 21949 IP address blocks: 74.213.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:fe:b9:42:ce:fb:da:19:33:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=816ca2c2-2f1b-4cf0-917c-c78820bfecb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3a:67:5f:a9:43:29:51:2f:3c:ba:13:5c:b4: a5:b0:d5:46:cd:19:5e:47:41:cf:e6:60:9a:c3:36: 73:26:fe:1c:a6:e6:43:75:14:3c:4c:55:04:bd:37: 69:3b:38:39:da:66:15:92:8a:6c:37:a7:ea:1a:0b: cd:02:81:aa:0a:a4:3b:28:c3:45:db:f4:20:9c:3f: 68:3c:f9:c7:eb:c0:d6:4c:30:85:87:49:ab:45:83: 2b:c7:e8:d7:53:68:e1:e4:3b:00:a3:13:47:28:09: db:b5:1b:48:3b:38:a2:19:3c:3e:0e:de:32:44:9e: 77:5c:83:e4:3b:8e:c7:78:86:c8:e8:d5:66:44:f7: 5c:c6:5d:2e:a8:85:0f:ce:07:c2:87:e1:34:2e:dd: 2c:b1:25:7b:27:0a:ad:04:71:fa:b7:ce:ab:d4:df: b3:bf:eb:d6:cf:c2:2e:c4:f8:ca:70:13:74:09:e9: 71:fa:02:39:5d:6c:bf:cc:d1:a3:8f:92:b5:45:72: ed:1c:8a:ba:d1:7f:08:10:9c:1b:2e:b9:2c:5c:87: 71:6b:fd:4a:01:f2:91:db:08:04:20:e0:85:e5:31: 2a:b5:66:09:55:b7:9d:fc:8d:54:0a:df:42:4f:36: dc:f0:fa:cc:d2:00:cd:95:ac:d3:5d:69:b9:45:50: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B4:7C:14:80:BC:27:03:46:A4:0C:9E:12:D3:15:E6:18:8A:DD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 74.213.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5e:b3:a1:a7:13:de:fb:74:d4:7a:05:4f:f5:1c:c8:af:fa: 6d:f5:a9:00:82:84:ef:85:42:d3:9f:97:5a:21:f0:07:6a:3f: 34:a4:6a:3a:0e:0e:97:8b:31:5e:37:9b:f3:bc:a9:1c:d4:5c: 6b:44:49:f0:74:fc:a0:84:22:32:d3:b5:f2:39:51:b8:e5:be: 12:51:0e:1f:a6:26:5b:69:0f:30:b2:2b:43:cf:23:bd:66:b8: 82:2e:1c:99:38:3b:1e:31:a6:cd:ac:68:34:6d:6e:be:bc:53: d2:6c:71:24:74:82:b0:45:ae:66:43:3f:69:9b:e5:ae:6b:00: 10:c9:d1:7b:f9:31:bd:2a:30:cf:31:32:4d:ba:61:8d:ca:02: 3d:72:1a:26:f1:3d:fa:84:aa:ae:93:62:6d:45:c7:a8:80:4f: 77:c0:ab:95:d4:fe:66:47:3c:a8:c2:62:64:f1:f0:d2:b6:c1: 1f:de:50:19:50:73:9b:dc:71:21:81:4d:7a:cc:0b:2a:1d:82: 44:c3:b5:79:1a:dd:8f:c9:b1:5d:b6:a1:17:59:9a:34:26:47: 15:ad:3a:e5:69:ba:7e:05:4f:96:4f:5b:0e:1a:ce:e0:a8:47: a7:69:ae:d4:3a:be:b9:d2:68:ef:e7:79:6e:e2:0b:a1:16:0f: de:2f:f2:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXP65Qs772hkzf6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ODE2Y2EyYzItMmYxYi00Y2YwLTkxN2MtYzc4ODIwYmZlY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDpnX6lDKVEvPLoTXLSlsNVGzRleR0HP5mCa wzZzJv4cpuZDdRQ8TFUEvTdpOzg52mYVkopsN6fqGgvNAoGqCqQ7KMNF2/QgnD9o PPnH68DWTDCFh0mrRYMrx+jXU2jh5DsAoxNHKAnbtRtIOziiGTw+Dt4yRJ53XIPk O47HeIbI6NVmRPdcxl0uqIUPzgfCh+E0Lt0ssSV7JwqtBHH6t86r1N+zv+vWz8Iu xPjKcBN0Celx+gI5XWy/zNGjj5K1RXLtHIq60X8IEJwbLrksXIdxa/1KAfKR2wgE IOCF5TEqtWYJVbed/I1UCt9CTzbc8PrM0gDNlazTXWm5RVCCZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOm0fBSAvCcDRqQMnhLTFeYYit1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2U3YzZhOTMtMDkwZC0z NjAxLWFjNDctNTcyNDMyNGI1MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCStWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpes6GnE977dNR6BU/1HMiv+m31qQCChO+FQtOfl1oh8AdqPzSkajoO DpeLMV43m/O8qRzUXGtESfB0/KCEIjLTtfI5UbjlvhJRDh+mJltpDzCyK0PPI71m uIIuHJk4Ox4xps2saDRtbr68U9JscSR0grBFrmZDP2mb5a5rABDJ0Xv5Mb0qMM8x Mk26YY3KAj1yGibxPfqEqq6TYm1Fx6iAT3fAq5XU/mZHPKjCYmTx8NK2wR/eUBlQ c5vccSGBTXrMCyodgkTDtXka3Y/JsV22oRdZmjQmRxWtOuVpun4FT5ZPWw4azuCo R6dprtQ6vrnSaO/neW7iC6EWD94v8pA= -----END CERTIFICATE-----Generated at Tue Sep 22 17:45:16 2026 by rpki-client