$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa File: 2744b9df-6b90-37a0-ad0e-89af24e611e0.roa (raw, json) Hash identifier: mwF7UTi5MX+oQHnfveX1rbc/ybco+QMu80R5m2UFXB0= Subject key identifier: 97:75:41:BA:8D:0E:FB:7F:95:F5:28:E7:20:FF:BC:9A:32:33:D1:EC Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E7E94F776A92C8C421FCCB0C0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 4213 IP address blocks: 209.11.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f7:76:a9:2c:8c:42:1f:cc:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=3a8ae89e-4cd0-4e62-8dce-df5f8e8e08f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:da:65:79:a4:ab:5a:9e:d6:b2:69:a3:e6:c6: 6f:5f:77:eb:0d:63:eb:28:b8:21:3a:59:b1:76:82: 25:02:2b:48:be:b0:bb:54:f0:87:18:ca:26:33:a3: 87:6d:ab:50:a3:d3:69:74:c5:8f:a7:cd:e1:a2:9e: 02:1f:e6:93:67:0e:e9:a7:e3:33:05:fc:9d:13:45: df:1c:8e:33:91:af:f8:57:be:9a:dd:4d:9e:5a:a6: da:d6:21:fa:91:56:3a:fe:d0:89:0f:4c:f2:4d:71: 12:8e:fb:d9:dd:0b:60:da:3f:da:c0:58:1a:33:6a: b1:3e:70:cd:57:34:62:db:29:80:0e:75:b4:b8:13: 0b:65:a6:9b:a3:a6:09:6b:ea:0a:aa:0e:19:c9:6b: 3a:a5:fa:1a:64:c0:2a:06:d5:45:d8:6b:f3:ad:23: bb:8a:c6:16:c7:c6:72:c8:51:ba:60:2b:f6:79:4b: 01:48:03:7e:32:1a:21:fb:48:1a:98:4e:e3:d8:b2: e5:7f:b3:6d:cf:8f:6f:3a:e1:8d:57:df:e9:96:ea: 7c:4d:ae:03:7a:4b:3d:8f:7e:37:8f:1b:84:96:21: a6:ef:48:02:04:11:a2:b9:9b:0f:17:4c:7d:83:d5: 30:69:f1:1d:50:ba:00:00:e2:bd:76:f5:db:ab:f5: cd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:75:41:BA:8D:0E:FB:7F:95:F5:28:E7:20:FF:BC:9A:32:33:D1:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 209.11.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8a:10:5b:25:fa:c4:ca:31:a7:a8:82:a1:99:1b:3f:f7:7e: bd:38:8e:c5:2f:8d:04:81:dc:ec:54:9b:dc:c9:36:67:d0:98: 92:67:99:73:c3:f9:2d:90:ee:c0:e2:41:c2:a5:36:f8:0a:7d: 31:3e:c4:84:e4:af:c7:13:42:81:84:a4:55:4a:3d:9d:17:59: 60:0b:63:75:18:bc:b2:7b:e7:93:45:31:b4:9e:39:0c:c0:d2: 56:99:6c:89:e2:54:92:87:4b:0d:f0:7e:c0:33:45:82:8b:e3: 40:34:c4:14:6a:8a:0c:43:ed:ea:7a:2d:98:14:ed:0c:7c:ef: 11:b7:2e:49:43:93:75:e0:ab:95:c7:f5:36:e6:1a:e4:58:a2: c3:e9:70:57:1d:8a:50:f4:59:e7:e3:6e:d4:43:ea:e8:85:d3: 2c:58:ee:f0:6e:36:6d:39:bd:db:3e:17:c1:16:85:dc:a5:ee: 85:44:de:2d:19:24:fe:d7:17:5c:5a:13:e0:90:f8:2e:27:ae: cb:b5:9d:c0:41:ab:5f:a5:eb:cd:4e:10:0c:04:5e:d0:bf:07: 21:a0:1c:f9:4e:4b:30:4c:13:8e:eb:64:f9:75:ac:be:97:d0: 1d:4c:59:47:07:41:11:15:9f:ea:af:65:ab:be:96:e0:f9:e9: 2e:b3:68:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPd2qSyMQh/MsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk M2E4YWU4OWUtNGNkMC00ZTYyLThkY2UtZGY1ZjhlOGUwOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtpleaSrWp7Wsmmj5sZvX3frDWPrKLghOlmx doIlAitIvrC7VPCHGMomM6OHbatQo9NpdMWPp83hop4CH+aTZw7pp+MzBfydE0Xf HI4zka/4V76a3U2eWqba1iH6kVY6/tCJD0zyTXESjvvZ3Qtg2j/awFgaM2qxPnDN VzRi2ymADnW0uBMLZaabo6YJa+oKqg4ZyWs6pfoaZMAqBtVF2GvzrSO7isYWx8Zy yFG6YCv2eUsBSAN+Mhoh+0gamE7j2LLlf7Ntz49vOuGNV9/plup8Ta4Deks9j343 jxuEliGm70gCBBGiuZsPF0x9g9UwafEdULoAAOK9dvXbq/XNYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd1QbqNDvt/lfUo5yD/vJoyM9HsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjc0NGI5ZGYtNmI5MC0z N2EwLWFkMGUtODlhZjI0ZTYxMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Qv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWKEFsl+sTKMaeogqGZGz/3fr04jsUvjQSB3OxUm9zJNmfQmJJnmXPD +S2Q7sDiQcKlNvgKfTE+xITkr8cTQoGEpFVKPZ0XWWALY3UYvLJ755NFMbSeOQzA 0laZbIniVJKHSw3wfsAzRYKL40A0xBRqigxD7ep6LZgU7Qx87xG3LklDk3Xgq5XH 9TbmGuRYosPpcFcdilD0WefjbtRD6uiF0yxY7vBuNm05vds+F8EWhdyl7oVE3i0Z JP7XF1xaE+CQ+C4nrsu1ncBBq1+l681OEAwEXtC/ByGgHPlOSzBME47rZPl1rL6X 0B1MWUcHQREVn+qvZau+luD56S6zaGI= -----END CERTIFICATE-----Generated at Fri Jul 24 15:07:22 2026 by rpki-client