$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa File: 242691ed-7e95-376c-af82-2bd75883d13d.roa (raw, json) Hash identifier: SxKRLX/G9FI27COzKgGZNV3P5XY4QI5WMpKdGIuscTM= Subject key identifier: 03:1E:BB:E0:03:89:12:5D:C7:CC:F1:1A:5F:48:98:6B:92:04:49:C4 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584F3A17CA5D10A8DBD5E4A40E40 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 12213 IP address blocks: 149.137.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:ca:5d:10:a8:db:d5:e4:a4:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=d8b99ec2-662c-4270-a491-5b2ea3ea2a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:46:bc:09:fb:da:72:89:a4:f6:f2:84:e6: db:93:6b:0d:e5:53:ee:52:ad:ac:cd:b3:74:21:38: 34:02:06:11:3d:1b:f4:6d:0d:c6:ef:12:80:ae:2e: 0e:ce:24:d0:9d:fe:c2:11:4e:e9:aa:04:1a:46:32: 10:a2:5c:4e:7c:d6:40:aa:82:09:0b:e6:d1:cb:60: 6f:6f:f7:a3:1e:3a:02:68:a8:c8:be:49:c4:47:db: c7:ed:52:44:d7:d7:ae:18:72:0d:76:4e:e3:d5:42: 1a:80:8d:b2:78:38:f4:82:86:e4:1b:84:08:e3:5a: 1c:58:ee:ff:cc:59:02:16:cc:14:4e:d2:1a:a0:d1: dc:2e:8a:aa:b2:93:70:62:45:5c:cf:d4:7d:aa:9f: 32:af:e9:8d:38:01:2b:23:4b:0d:69:84:fc:77:79: fd:13:09:c9:cc:c5:fe:ec:c6:09:c3:79:3a:e0:57: 05:da:78:49:21:98:d6:25:db:c9:0d:29:69:39:2a: 43:c8:e8:d3:0d:18:b6:35:9b:47:4c:c2:36:e4:89: c1:ed:0a:fa:0b:8a:a5:97:26:2f:aa:37:c4:8c:f4: d6:c0:cd:b3:41:b7:8b:26:f3:b4:83:f5:9f:ab:e1: 25:92:f8:92:66:47:fa:6d:40:95:6d:0b:01:2b:bd: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1E:BB:E0:03:89:12:5D:C7:CC:F1:1A:5F:48:98:6B:92:04:49:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 149.137.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e3:95:bf:5d:15:b7:8c:df:04:f5:9d:64:ed:9e:38:13:33: ad:25:06:f0:d7:78:b3:ad:98:03:af:6c:02:df:df:02:56:69: df:e2:58:9b:9c:1c:6b:00:62:4d:dd:50:5d:69:6c:dd:9d:7e: 1e:d9:4a:59:33:06:73:d0:57:2b:6a:ba:e2:58:e9:9e:52:e1: 3f:d8:59:e2:35:d5:b8:98:9c:f9:8b:9a:ea:c7:3e:c0:cd:1d: 81:f5:ae:ae:5a:3f:c8:f5:2a:00:20:79:e5:19:2d:99:63:90: e1:80:aa:f3:d3:bb:2e:7c:d1:68:8c:7b:bd:15:76:b3:e1:ca: 8d:43:62:9e:52:c2:c6:49:8d:d9:50:66:18:69:b6:8a:8a:50: cc:1e:7c:3d:d1:31:07:a3:fa:34:02:97:3c:1e:94:51:4d:c4: 3a:1b:98:2a:5e:3a:6c:dd:c2:9c:1b:6e:37:35:a2:3b:32:fc: e1:7f:25:d9:51:20:aa:b5:a6:9c:3d:14:c0:34:0b:64:03:79: 4d:16:91:29:ed:ae:50:03:66:7b:04:9c:6a:aa:e6:28:93:5e: f0:9e:1d:bc:ac:78:37:ce:d2:04:61:b5:33:a1:30:0d:43:f2: 4a:72:c3:36:ee:af:3e:71:ca:87:af:56:9c:40:1b:6a:cd:08: fe:26:ef:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8pdEKjb1eSkDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZDhiOTllYzItNjYyYy00MjcwLWE0OTEtNWIyZWEzZWEyYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWBGvAn72nKJpPbyhObbk2sN5VPuUq2szbN0 ITg0AgYRPRv0bQ3G7xKAri4OziTQnf7CEU7pqgQaRjIQolxOfNZAqoIJC+bRy2Bv b/ejHjoCaKjIvknER9vH7VJE19euGHINdk7j1UIagI2yeDj0gobkG4QI41ocWO7/ zFkCFswUTtIaoNHcLoqqspNwYkVcz9R9qp8yr+mNOAErI0sNaYT8d3n9EwnJzMX+ 7MYJw3k64FcF2nhJIZjWJdvJDSlpOSpDyOjTDRi2NZtHTMI25InB7Qr6C4qllyYv qjfEjPTWwM2zQbeLJvO0g/Wfq+ElkviSZkf6bUCVbQsBK72hdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMeu+ADiRJdx8zxGl9ImGuSBEnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMjQyNjkxZWQtN2U5NS0z NzZjLWFmODItMmJkNzU4ODNkMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzjlb9dFbeM3wT1nWTtnjgTM60lBvDXeLOtmAOvbALf3wJWad/iWJuc HGsAYk3dUF1pbN2dfh7ZSlkzBnPQVytquuJY6Z5S4T/YWeI11biYnPmLmurHPsDN HYH1rq5aP8j1KgAgeeUZLZljkOGAqvPTuy580WiMe70VdrPhyo1DYp5SwsZJjdlQ ZhhptoqKUMwefD3RMQej+jQClzwelFFNxDobmCpeOmzdwpwbbjc1ojsy/OF/JdlR IKq1ppw9FMA0C2QDeU0WkSntrlADZnsEnGqq5iiTXvCeHbyseDfO0gRhtTOhMA1D 8kpywzburz5xyoevVpxAG2rNCP4m7yQ= -----END CERTIFICATE-----Generated at Thu Sep 24 02:17:04 2026 by rpki-client