$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/20317159-9aca-3178-8c8a-6141107ab5a4.roa File: 20317159-9aca-3178-8c8a-6141107ab5a4.roa (raw, json) Hash identifier: G5tQgbfCe7K5Ao+DV3mt2IrbTx0uL1ZFRlsMa36uV8M= Subject key identifier: F2:1B:5E:A8:C2:F0:DD:32:3B:23:7B:FE:24:2D:AE:26:D4:2F:0A:7B Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F4988265E5481BF465D8F4A00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/20317159-9aca-3178-8c8a-6141107ab5a4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21949 IP address blocks: 199.33.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:26:5e:54:81:bf:46:5d:8f:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=96a6e116-314a-4700-9ba1-3476c8ed4aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:14:dd:a0:18:8c:4f:94:db:7c:c1:10:30: e0:28:b9:bf:d6:46:01:ea:f4:1c:b1:d6:5f:87:c8: af:89:22:c8:a1:3c:d9:9d:44:47:c8:b8:04:8f:dc: ef:59:30:66:6d:88:0c:86:af:c3:d2:88:af:ae:4e: 69:29:bd:f9:85:72:19:c1:33:6a:ea:65:3c:d2:3e: e1:21:1f:56:f5:57:46:bb:b7:ca:da:f5:4e:92:ca: a0:f7:5e:19:22:5b:ff:ce:fe:85:b7:d2:71:f7:5b: 94:96:64:33:68:e7:7d:6d:b5:38:29:1a:3d:3b:c2: f8:c4:5c:cc:52:94:ee:01:94:ed:1f:d5:ca:3f:76: ea:33:b0:3a:ec:6b:84:4b:dc:41:c3:83:92:40:24: 68:7b:26:14:33:20:31:ec:b6:8e:9e:f7:30:af:74: da:b9:ae:5c:59:54:62:2b:4d:44:f3:75:4f:a1:3c: d9:e2:5e:ca:ce:21:f2:33:a4:60:e5:9c:f7:77:11: 88:3d:3a:3e:37:16:47:97:e8:45:34:8b:99:c7:d9: e5:46:13:72:60:f2:ee:3a:19:a8:bd:af:93:e3:63: 23:57:08:49:f2:d5:fe:a5:f8:2d:4d:d5:cb:53:3a: 02:38:a6:9a:36:80:6d:05:d7:05:2f:e5:61:2b:89: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1B:5E:A8:C2:F0:DD:32:3B:23:7B:FE:24:2D:AE:26:D4:2F:0A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/20317159-9aca-3178-8c8a-6141107ab5a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:52:ba:06:e9:14:ae:bf:8b:ee:f6:16:f3:00:c9:1f:b9:42: d7:2b:1a:e0:db:0b:55:a1:69:44:48:12:4b:2e:37:67:1b:56: 04:82:e1:78:b7:eb:37:fa:59:e7:7f:a4:81:af:d8:15:1b:84: 42:9e:2d:8b:83:2a:67:de:77:9a:72:c6:61:21:13:15:30:12: b3:a5:2e:38:b4:4c:de:24:7d:94:6d:89:03:cb:5d:33:a4:62: a5:fd:30:6c:d2:48:6f:1b:06:ad:0f:fa:37:1f:25:5c:ca:0e: a9:1d:a2:45:3b:c6:da:7d:bf:29:23:fa:a4:01:b0:44:84:d9: d8:1e:05:67:6b:e1:bc:ad:01:66:f3:64:c2:d9:64:95:1a:13: ef:4f:f6:22:50:16:95:0c:c4:43:f8:84:3e:b7:f9:8f:8c:f9: e3:12:e3:3d:36:e3:38:c6:ea:8e:20:65:4a:b3:53:63:e2:5e: 5c:5b:71:2a:ed:7d:91:8b:c9:09:fd:a6:98:c5:5e:b1:06:c5: 58:a9:9b:c4:c3:2e:43:76:8b:0a:5b:d3:ac:4c:d0:49:9c:12: 53:ce:56:b3:9c:4a:a8:db:08:82:ed:61:fe:3a:49:1f:20:95: dc:6e:77:87:22:03:dd:a7:37:52:01:7a:ba:e0:8a:64:ce:9f: 91:2a:2f:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCZeVIG/Rl2PSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTZhNmUxMTYtMzE0YS00NzAwLTliYTEtMzQ3NmM4ZWQ0YWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+cU3aAYjE+U23zBEDDgKLm/1kYB6vQcsdZf h8iviSLIoTzZnURHyLgEj9zvWTBmbYgMhq/D0oivrk5pKb35hXIZwTNq6mU80j7h IR9W9VdGu7fK2vVOksqg914ZIlv/zv6Ft9Jx91uUlmQzaOd9bbU4KRo9O8L4xFzM UpTuAZTtH9XKP3bqM7A67GuES9xBw4OSQCRoeyYUMyAx7LaOnvcwr3Taua5cWVRi K01E83VPoTzZ4l7KziHyM6Rg5Zz3dxGIPTo+NxZHl+hFNIuZx9nlRhNyYPLuOhmo va+T42MjVwhJ8tX+pfgtTdXLUzoCOKaaNoBtBdcFL+VhK4kh4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIbXqjC8N0yOyN7/iQtribULwp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMjAzMTcxNTktOWFjYS0z MTc4LThjOGEtNjE0MTEwN2FiNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxSugbpFK6/i+72FvMAyR+5QtcrGuDbC1WhaURIEksuN2cbVgSC4Xi3 6zf6Wed/pIGv2BUbhEKeLYuDKmfed5pyxmEhExUwErOlLji0TN4kfZRtiQPLXTOk YqX9MGzSSG8bBq0P+jcfJVzKDqkdokU7xtp9vykj+qQBsESE2dgeBWdr4bytAWbz ZMLZZJUaE+9P9iJQFpUMxEP4hD63+Y+M+eMS4z024zjG6o4gZUqzU2PiXlxbcSrt fZGLyQn9ppjFXrEGxVipm8TDLkN2iwpb06xM0EmcElPOVrOcSqjbCILtYf46SR8g ldxud4ciA92nN1IBerrgimTOn5EqL8o= -----END CERTIFICATE-----Generated at Sat Oct 3 13:27:56 2026 by rpki-client