$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa File: f920443e-ab0e-3df1-beae-30701559a976.roa (raw, json) Hash identifier: bX1D8dl89LrbsVikccy3xh8ShUEmkw01wsn+ws4pOPI= Subject key identifier: 49:D3:F8:B5:F2:DB:A6:95:33:70:9B:75:0A:13:34:F8:ED:1F:31:2D Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F20F7BAA045BDD59A0ED38C80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 21949 IP address blocks: 198.98.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ba:a0:45:bd:d5:9a:0e:d3:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=c60eaa83-6703-4569-b4e9-c6ed6be61fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:30:66:6c:71:81:31:06:d9:9c:d5:3c:20: a1:2e:92:f3:b8:28:0b:74:a5:7f:f2:44:c0:54:6b: 83:1f:2b:9b:65:f2:f0:b1:fc:c2:a0:df:06:a8:a6: fe:ed:f7:c4:b6:4f:9a:ae:86:ef:df:bc:56:d9:ca: 86:bd:ca:1b:5c:59:70:db:bd:3a:a5:fb:cf:77:c2: 75:5a:1c:d7:75:8d:3c:7a:a1:eb:9a:c6:19:cd:c6: e0:03:91:a5:f0:6f:8c:58:5a:f4:75:d6:fc:81:e8: 51:0f:e2:1b:b6:01:9f:94:77:33:82:3d:b4:2a:7f: 8d:dd:1c:7d:db:c7:99:a4:5b:5b:ed:c0:ea:f2:ae: 08:10:2f:a1:8c:3c:74:a1:c7:02:fe:88:61:63:61: 2e:c0:6d:88:f3:42:7e:9e:54:58:0b:2c:58:d7:a3: a0:21:83:99:6b:e1:90:ad:88:e0:a9:86:80:7e:86: ee:47:f1:76:19:02:78:f8:5a:b1:d1:06:10:be:5a: b7:50:c8:ab:79:89:03:50:6c:fe:03:1f:9f:32:7b: b7:22:6a:61:0c:55:5c:4b:81:19:f3:f5:35:ed:11: 5e:d2:cd:81:0c:d8:75:46:02:80:b4:98:ec:42:3c: 1a:cc:df:3b:71:c8:19:e5:ff:6e:30:67:d5:8b:3a: 42:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D3:F8:B5:F2:DB:A6:95:33:70:9B:75:0A:13:34:F8:ED:1F:31:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 198.98.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fa:38:d4:ac:39:2e:97:18:68:0e:71:a8:d6:f1:83:ed:81: 95:ed:0b:cb:3c:0c:ae:6f:07:e0:aa:77:d9:09:ab:80:69:9d: 4d:f0:a1:87:b9:9e:6d:74:4b:58:04:3f:81:d0:58:3a:6f:31: ab:1e:ab:e4:bb:1a:83:c3:1f:9a:d4:04:cd:b0:58:6b:01:e2: 21:b9:90:1e:93:a2:57:b9:ab:07:87:04:df:f1:41:ef:af:7b: 22:55:47:72:43:37:5e:d2:16:fc:3f:5e:f5:67:8a:71:57:05: 0a:07:d1:75:0d:e3:70:b1:e2:16:d2:cb:b4:cd:b9:ea:36:d2: a7:15:3a:b9:8a:83:fe:20:75:f1:23:b1:39:ab:46:94:64:8f: 35:0c:6e:2c:2f:ee:84:74:ed:0a:bb:b9:b6:26:78:ff:5b:ae: 55:56:48:62:d8:f1:14:4e:fb:31:05:73:5b:3c:c7:70:ed:32: 99:3d:49:81:92:be:d3:2f:e2:19:e4:c7:f4:b2:c1:16:21:48: 42:60:04:6d:9e:2b:5e:0f:f8:26:51:f9:04:2e:68:aa:cd:39: 8d:29:95:11:68:b0:90:93:cf:28:ed:4d:b8:1f:8c:76:34:9b: 11:d3:72:70:ae:24:21:f0:70:5d:43:1a:bb:ad:4b:30:ef:6c: 5e:d0:17:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97qgRb3Vmg7TjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YzYwZWFhODMtNjcwMy00NTY5LWI0ZTktYzZlZDZiZTYxZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5MwZmxxgTEG2ZzVPCChLpLzuCgLdKV/8kTA VGuDHyubZfLwsfzCoN8GqKb+7ffEtk+arobv37xW2cqGvcobXFlw2706pfvPd8J1 WhzXdY08eqHrmsYZzcbgA5Gl8G+MWFr0ddb8gehRD+IbtgGflHczgj20Kn+N3Rx9 28eZpFtb7cDq8q4IEC+hjDx0occC/ohhY2EuwG2I80J+nlRYCyxY16OgIYOZa+GQ rYjgqYaAfobuR/F2GQJ4+Fqx0QYQvlq3UMireYkDUGz+Ax+fMnu3ImphDFVcS4EZ 8/U17RFe0s2BDNh1RgKAtJjsQjwazN87ccgZ5f9uMGfVizpC3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnT+LXy26aVM3CbdQoTNPjtHzEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjkyMDQ0M2UtYWIwZS0z ZGYxLWJlYWUtMzA3MDE1NTlhOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxmJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH6ONSsOS6XGGgOcajW8YPtgZXtC8s8DK5vB+Cqd9kJq4BpnU3woYe5 nm10S1gEP4HQWDpvMaseq+S7GoPDH5rUBM2wWGsB4iG5kB6Tole5qweHBN/xQe+v eyJVR3JDN17SFvw/XvVninFXBQoH0XUN43Cx4hbSy7TNueo20qcVOrmKg/4gdfEj sTmrRpRkjzUMbiwv7oR07Qq7ubYmeP9brlVWSGLY8RRO+zEFc1s8x3DtMpk9SYGS vtMv4hnkx/SywRYhSEJgBG2eK14P+CZR+QQuaKrNOY0plRFosJCTzyjtTbgfjHY0 mxHTcnCuJCHwcF1DGrutSzDvbF7QFxw= -----END CERTIFICATE-----Generated at Mon Sep 21 19:06:57 2026 by rpki-client