$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa File: b67e258b-12d7-30b6-ba30-2b61891a6642.roa (raw, json) Hash identifier: /j4cwf9QurYNIFcDTNrgwiv2r4Hdcd6TIlrocfa6Vug= Subject key identifier: 04:81:F8:FA:97:F1:78:D0:B4:F5:D0:6E:90:20:AD:51:E8:80:F2:BA Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584EF7175FFBF1E2F98A077829A0 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 394111 IP address blocks: 207.174.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:5f:fb:f1:e2:f9:8a:07:78:29:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=7c24d7cf-f935-4121-9568-1e20d5ecb7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2e:4b:a6:d8:01:d5:5a:12:32:3f:bd:e5:d4: 94:4e:7a:6e:5c:31:fc:45:df:fa:dc:47:10:c1:0c: 9a:b4:15:13:a5:5f:10:e3:67:f8:33:28:21:c6:d8: 18:12:e8:9c:66:0d:7a:fb:5e:4b:fe:45:bd:bc:4a: 10:e4:9e:93:d8:2c:68:a6:66:c5:44:d4:5e:d4:19: d0:ef:35:b8:fb:4c:c3:10:57:6c:a5:02:c9:db:7a: 7f:a6:55:dd:c0:70:9c:3f:96:8d:f9:75:64:8e:0c: 7a:eb:47:51:5c:60:9d:c3:02:22:80:89:64:51:3f: 40:3c:21:43:b2:a2:bc:f7:f4:f7:28:98:fd:c8:ae: 2a:3a:bd:f3:d7:50:7d:ac:db:ec:07:85:f2:9d:e9: 47:7c:8b:6a:51:36:79:19:87:6e:24:66:9a:75:6d: 0d:27:bc:15:74:42:7e:db:24:49:06:66:2c:9e:04: 0c:ee:ee:4a:8a:3a:bf:bb:b0:40:fa:79:40:df:f2: ee:6e:87:b2:5c:62:83:45:ae:84:21:66:f9:62:71: 8a:fa:54:aa:06:ef:48:f0:7d:5d:1a:71:b0:4b:21: a2:8a:f4:0d:59:94:fd:af:8f:46:cc:ef:3e:f7:1b: 52:bc:7c:bf:0a:2a:73:47:94:97:90:f9:c8:3e:fc: 21:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:81:F8:FA:97:F1:78:D0:B4:F5:D0:6E:90:20:AD:51:E8:80:F2:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 207.174.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b3:2f:5d:c0:4c:b9:f4:4f:0a:f4:42:0e:63:31:81:d5:d4: 05:e9:38:61:ae:40:ff:e4:0b:7e:57:cf:bf:45:e3:9c:9e:17: 1b:3a:b0:71:55:d4:87:56:4d:71:7a:76:93:4a:09:1d:37:5c: c3:b2:c2:fc:53:6a:c0:61:24:da:99:75:7b:a5:ac:dd:3e:0f: 24:28:02:72:35:0f:73:2c:1a:a3:86:3d:51:1a:73:bd:f6:a1: 49:9e:06:fd:00:fb:94:f4:12:6d:18:0b:cd:39:21:57:bd:b7: 0d:07:21:23:6f:29:2c:8c:ce:30:b7:0c:35:bc:00:47:85:5e: 73:bb:0c:52:87:f1:eb:8d:05:6c:89:d4:b8:0f:08:79:62:97: 67:20:a2:c1:03:a6:a5:42:48:bc:34:9f:a4:be:b2:a5:d0:a4: 66:a2:a6:2f:f1:60:c5:3d:52:ee:07:78:bd:07:54:b2:5f:7a: 3f:11:e5:99:e3:80:7f:97:33:3a:b5:68:c2:77:bf:c3:64:40: 75:74:a3:0b:d6:8f:d7:f3:a1:91:60:b5:42:cf:6e:6d:b2:d3: 88:53:e7:9c:41:24:72:8a:8d:a2:76:e2:aa:67:ce:3d:dd:e0: 06:c0:25:eb:0b:d5:c5:98:6d:f5:15:6b:42:6f:6f:af:b3:99: 1d:5d:a8:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F1/78eL5igd4KaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk N2MyNGQ3Y2YtZjkzNS00MTIxLTk1NjgtMWUyMGQ1ZWNiN2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S5LptgB1VoSMj+95dSUTnpuXDH8Rd/63EcQ wQyatBUTpV8Q42f4MyghxtgYEuicZg16+15L/kW9vEoQ5J6T2CxopmbFRNRe1BnQ 7zW4+0zDEFdspQLJ23p/plXdwHCcP5aN+XVkjgx660dRXGCdwwIigIlkUT9APCFD sqK89/T3KJj9yK4qOr3z11B9rNvsB4XynelHfItqUTZ5GYduJGaadW0NJ7wVdEJ+ 2yRJBmYsngQM7u5Kijq/u7BA+nlA3/LuboeyXGKDRa6EIWb5YnGK+lSqBu9I8H1d GnGwSyGiivQNWZT9r49GzO8+9xtSvHy/CipzR5SXkPnIPvwhaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASB+PqX8XjQtPXQbpAgrVHogPK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYjY3ZTI1OGItMTJkNy0z MGI2LWJhMzAtMmI2MTg5MWE2NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz66QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCzL13ATLn0Twr0Qg5jMYHV1AXpOGGuQP/kC35Xz79F45yeFxs6sHFV 1IdWTXF6dpNKCR03XMOywvxTasBhJNqZdXulrN0+DyQoAnI1D3MsGqOGPVEac732 oUmeBv0A+5T0Em0YC805IVe9tw0HISNvKSyMzjC3DDW8AEeFXnO7DFKH8euNBWyJ 1LgPCHlil2cgosEDpqVCSLw0n6S+sqXQpGaipi/xYMU9Uu4HeL0HVLJfej8R5Znj gH+XMzq1aMJ3v8NkQHV0owvWj9fzoZFgtULPbm2y04hT55xBJHKKjaJ24qpnzj3d 4AbAJesL1cWYbfUVa0Jvb6+zmR1dqLM= -----END CERTIFICATE-----Generated at Sat Sep 26 13:04:42 2026 by rpki-client