$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa File: 2744b9df-6b90-37a0-ad0e-89af24e611e0.roa (raw, json) Hash identifier: 5mCXpi8f1+dP/4+BWCap1PxFtRUYdboaEToe9aJ/aqA= Subject key identifier: 3A:06:A2:8B:F8:31:F1:00:0D:07:DD:FF:37:01:FD:47:3E:39:7A:5A Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F20F7C14CFBD646CBA03BF280 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 4213 IP address blocks: 209.11.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c1:4c:fb:d6:46:cb:a0:3b:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=f878c5b7-2cbb-4392-bae4-5d6825bbad7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:6c:ed:db:ab:90:63:08:c0:4b:87:79:4c: 49:c9:00:24:00:3d:8f:a1:ee:b3:01:bf:c9:2c:a9: 1c:96:18:d8:d1:c4:51:92:34:eb:56:18:ee:9f:14: 7c:c4:86:a8:da:20:d6:52:4f:3f:28:4a:b8:3d:28: 12:77:f8:74:c5:e3:fd:e6:1e:54:1d:4b:c6:43:51: 3a:d9:a9:ad:08:f4:02:3b:cc:f0:7b:14:46:ee:9f: b2:69:cb:2f:94:27:12:a9:b3:62:a8:e3:43:4f:4f: f8:1e:f5:17:e6:3a:19:50:8c:01:e5:e2:1d:04:54: 3e:83:ba:b7:e2:ea:97:20:e7:94:11:56:aa:6f:e1: 1c:7f:c3:e6:a8:14:37:5e:04:dd:4e:57:99:6e:27: 30:bf:e4:9f:41:ad:c1:97:31:52:96:36:a6:2e:9b: 1d:32:6f:ed:76:9a:ef:27:38:ed:66:7d:6c:22:29: 8c:25:e1:78:e8:f9:00:5a:aa:c5:6c:e3:e4:9e:3a: ba:88:02:b0:25:81:de:8f:eb:23:80:1d:08:d3:b9: ea:ad:f8:6c:67:48:3f:84:3f:93:ed:9f:40:30:30: 4b:88:89:47:39:0f:34:94:ae:31:8e:77:ea:36:18: 25:0d:df:9f:dc:ea:38:57:a7:c1:16:2c:58:25:0e: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:06:A2:8B:F8:31:F1:00:0D:07:DD:FF:37:01:FD:47:3E:39:7A:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 209.11.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:0a:51:6a:49:dc:61:8c:d8:e8:b1:a7:bd:b6:34:38:c7:01: e0:ee:d6:30:22:dd:98:09:51:fc:3e:3f:2f:fa:70:ba:a5:3e: 24:e4:ac:eb:1b:17:86:1a:f9:62:9f:f8:7c:80:2a:ac:dc:19: 8b:00:63:d3:24:4b:65:01:6b:03:7b:da:f1:6f:9c:f1:a5:0a: a1:db:fc:37:ac:fc:fc:f0:22:9f:eb:db:7f:8d:e1:f1:af:23: 47:92:64:48:aa:94:84:e8:c3:ba:46:21:90:f9:75:6e:04:b3: b8:9a:d7:60:9a:c7:2a:e0:cc:a6:90:43:7b:8c:ac:3f:5c:dc: f8:88:ef:58:e2:7d:66:d5:63:75:ea:e5:50:00:72:de:9d:b1: f5:02:16:8b:da:40:04:25:b7:1c:a4:3a:96:d2:8b:76:39:ad: 1c:e5:97:1c:78:f0:54:03:a7:c4:22:f9:eb:d7:da:10:37:c0: 45:f2:7f:3d:4f:ce:56:88:14:ff:6a:be:5e:56:5c:04:14:da: f4:05:70:67:c6:87:b4:a2:0e:ed:a9:bb:58:5e:82:af:03:65: 92:fe:1c:f3:13:28:5d:ff:fa:0f:8c:7b:e0:cb:fe:36:88:49: 21:09:13:cb:02:d5:3b:1a:36:df:b6:d1:a9:09:d8:73:90:f7: 30:6f:dd:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98FM+9ZGy6A78oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk Zjg3OGM1YjctMmNiYi00MzkyLWJhZTQtNWQ2ODI1YmJhZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtts7durkGMIwEuHeUxJyQAkAD2Poe6zAb/J LKkclhjY0cRRkjTrVhjunxR8xIao2iDWUk8/KEq4PSgSd/h0xeP95h5UHUvGQ1E6 2amtCPQCO8zwexRG7p+yacsvlCcSqbNiqONDT0/4HvUX5joZUIwB5eIdBFQ+g7q3 4uqXIOeUEVaqb+Ecf8PmqBQ3XgTdTleZbicwv+SfQa3BlzFSljamLpsdMm/tdprv JzjtZn1sIimMJeF46PkAWqrFbOPknjq6iAKwJYHej+sjgB0I07nqrfhsZ0g/hD+T 7Z9AMDBLiIlHOQ80lK4xjnfqNhglDd+f3Oo4V6fBFixYJQ7QWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoGoov4MfEADQfd/zcB/Uc+OXpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjc0NGI5ZGYtNmI5MC0z N2EwLWFkMGUtODlhZjI0ZTYxMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Qv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8KUWpJ3GGM2Oixp722NDjHAeDu1jAi3ZgJUfw+Py/6cLqlPiTkrOsb F4Ya+WKf+HyAKqzcGYsAY9MkS2UBawN72vFvnPGlCqHb/Des/PzwIp/r23+N4fGv I0eSZEiqlITow7pGIZD5dW4Es7ia12CaxyrgzKaQQ3uMrD9c3PiI71jifWbVY3Xq 5VAAct6dsfUCFovaQAQltxykOpbSi3Y5rRzllxx48FQDp8Qi+evX2hA3wEXyfz1P zlaIFP9qvl5WXAQU2vQFcGfGh7SiDu2pu1hegq8DZZL+HPMTKF3/+g+Me+DL/jaI SSEJE8sC1TsaNt+20akJ2HOQ9zBv3Yc= -----END CERTIFICATE-----Generated at Wed Sep 23 23:28:53 2026 by rpki-client