$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa File: f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa (raw, json) Hash identifier: xD32AodhKuwWU7iw2w4tMNtPvmbH1Ih0jru0BPSDwaY= Subject key identifier: 7A:54:5A:7D:4D:61:E2:F4:61:43:45:8A:61:C3:4D:14:4A:2C:73:4B Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F225D02021279B4017D2A0A80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 21949 IP address blocks: 74.213.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:02:02:12:79:b4:01:7d:2a:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=12b45e61-af19-4596-96dc-cd6cfd0fe6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:54:69:f8:dc:d5:95:91:6d:72:c5:9b:c2: 66:cd:3e:6a:32:df:2e:5c:a0:a9:78:ef:01:bb:f3: d4:34:62:3d:59:c5:ad:f0:bf:f6:b9:d5:38:dd:5b: 29:d4:d1:61:3e:32:fd:e8:0a:87:8b:5a:83:91:5b: 16:7d:36:ee:d7:e1:1a:5e:2a:fe:7c:99:71:ba:82: e1:db:4c:ab:81:d5:32:44:20:05:d7:30:c1:dd:8b: 4e:0f:a1:32:05:94:5b:a7:45:92:99:4d:47:80:37: 7d:bd:2e:5b:5c:6e:bc:78:c5:30:e8:40:ae:3c:e0: d0:1a:17:26:ef:e1:d3:be:7c:90:df:8d:02:8e:aa: 20:96:af:fb:8c:75:5b:30:fe:1d:95:ec:fe:10:05: 6e:89:5c:2e:e0:b3:d7:13:18:1b:6f:de:0f:31:e2: 8e:2b:5a:00:7e:b9:d9:20:f6:8d:9d:8e:47:45:bc: 56:85:b4:66:8c:0a:f9:c7:ca:ab:53:02:3c:5f:f3: 9a:a7:84:c1:f3:00:8e:9a:f0:70:2d:ee:af:df:6b: 0f:2e:fe:22:31:00:54:b6:a2:de:3a:71:42:d0:a5: ef:5b:19:4f:07:a3:f4:8c:29:e4:07:ce:98:3a:e7: 31:4d:e1:38:fb:eb:27:7c:a0:8c:3b:46:da:e2:93: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:54:5A:7D:4D:61:E2:F4:61:43:45:8A:61:C3:4D:14:4A:2C:73:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 74.213.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c9:a9:62:d0:3f:f1:83:79:f1:ec:3b:84:88:9d:27:48:93: 12:f3:ec:46:0e:7f:a8:a6:51:68:a5:e3:ed:09:f4:9d:b8:0a: 1a:57:61:02:f3:4b:b8:7e:3e:63:9d:30:81:64:d2:d3:27:ff: b3:27:5d:f4:1f:f2:46:c6:e2:7c:b3:9d:0c:12:ec:e1:3b:e9: 5d:7c:d6:4f:58:2d:0b:d5:7e:ac:64:b2:0d:f2:cb:a3:51:1f: 06:e2:b9:0c:29:2b:07:4e:85:5f:93:7b:62:cf:de:ab:a0:87: 1d:3c:5b:e1:0f:1c:63:36:6a:84:f6:5d:21:7e:08:cf:e2:33: bb:b1:c1:18:48:9f:58:52:c2:d3:a1:fe:15:28:b8:a4:4d:20: 23:77:5d:c0:19:c8:4b:12:68:04:23:8d:3c:59:c6:9a:e7:e9: 69:db:d9:e1:d1:7b:bf:91:54:0f:6d:cb:82:08:87:2f:6d:29: 2f:1c:ee:62:de:db:af:20:bd:33:a2:8a:46:46:f4:19:d8:5d: 09:65:d1:37:84:5f:d9:08:fa:0e:a4:2a:48:88:78:48:df:a1: b9:89:fd:8b:08:f8:1e:51:15:32:3d:72:e4:bd:d0:a5:99:42: 6d:2d:c1:7f:71:af:41:3c:44:14:68:91:8b:70:5e:98:f0:c3: 65:60:3a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQICEnm0AX0qCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MTJiNDVlNjEtYWYxOS00NTk2LTk2ZGMtY2Q2Y2ZkMGZlNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt39Uafjc1ZWRbXLFm8JmzT5qMt8uXKCpeO8B u/PUNGI9WcWt8L/2udU43Vsp1NFhPjL96AqHi1qDkVsWfTbu1+EaXir+fJlxuoLh 20yrgdUyRCAF1zDB3YtOD6EyBZRbp0WSmU1HgDd9vS5bXG68eMUw6ECuPODQGhcm 7+HTvnyQ340Cjqoglq/7jHVbMP4dlez+EAVuiVwu4LPXExgbb94PMeKOK1oAfrnZ IPaNnY5HRbxWhbRmjAr5x8qrUwI8X/Oap4TB8wCOmvBwLe6v32sPLv4iMQBUtqLe OnFC0KXvWxlPB6P0jCnkB86YOucxTeE4++snfKCMO0ba4pPh9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpUWn1NYeL0YUNFimHDTRRKLHNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjlmOGRjZDgtMjFmNS0z MDMxLWExYWEtZjFiZjBmOWJiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCStWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfJqWLQP/GDefHsO4SInSdIkxLz7EYOf6imUWil4+0J9J24ChpXYQLz S7h+PmOdMIFk0tMn/7MnXfQf8kbG4nyznQwS7OE76V181k9YLQvVfqxksg3yy6NR HwbiuQwpKwdOhV+Te2LP3qughx08W+EPHGM2aoT2XSF+CM/iM7uxwRhIn1hSwtOh /hUouKRNICN3XcAZyEsSaAQjjTxZxprn6Wnb2eHRe7+RVA9ty4IIhy9tKS8c7mLe 268gvTOiikZG9BnYXQll0TeEX9kI+g6kKkiIeEjfobmJ/YsI+B5RFTI9cuS90KWZ Qm0twX9xr0E8RBRokYtwXpjww2VgOlo= -----END CERTIFICATE-----Generated at Mon Sep 21 08:02:58 2026 by rpki-client