$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa File: 7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa (raw, json) Hash identifier: pc58txlBuCxI/aZPem7jP0XN8RWbbUKGzAXywMQV0X0= Subject key identifier: AB:86:D9:E4:6A:B7:5C:4A:D5:41:12:0F:CB:F8:4F:F7:56:50:AD:E7 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F4976DFCFF7BC6EE041A6B589 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21949 IP address blocks: 134.231.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:df:cf:f7:bc:6e:e0:41:a6:b5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b3d12979-c86e-45e0-824f-f7bdb911f738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3d:9f:44:c8:cc:24:f3:2b:ad:64:32:75:65: f2:b7:b7:3a:76:9c:2a:2e:23:d2:54:f7:85:b3:fe: b5:5e:48:20:a4:15:35:28:fe:d2:d8:72:8d:0b:96: d0:cc:22:f6:59:a7:fc:38:e0:59:0b:f6:a5:c3:b0: b6:90:f5:06:69:0f:ab:f1:56:5e:f2:13:3d:ec:50: 8d:4e:e5:01:af:9e:59:74:d8:59:97:c9:76:37:7d: ec:bf:98:b9:88:b6:71:28:af:55:35:86:e4:ed:82: 14:b4:ce:3a:54:39:49:25:09:95:1d:70:bb:ab:c0: ac:b8:30:2f:20:60:e7:4f:61:8e:56:fd:d3:cc:69: f0:9e:41:18:cd:cf:63:05:67:8c:55:83:f4:80:93: d4:be:4a:6d:90:80:e1:b9:09:40:20:d6:bf:8f:2b: ac:d7:bf:ab:e1:d4:ec:a4:ff:9c:61:d0:d7:f5:0c: bf:6f:13:cf:77:c3:20:9b:25:de:38:34:c8:b2:00: 48:68:e2:f9:c5:d7:e1:f2:4e:32:91:b1:8e:3c:5e: e2:d9:46:57:04:3b:c8:17:03:e0:ab:75:26:1e:46: 39:47:a1:df:f4:d0:f2:be:12:7c:51:f3:99:32:29: 84:73:de:bf:35:0b:a9:20:51:bf:db:a3:b9:1b:ae: 7f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:86:D9:E4:6A:B7:5C:4A:D5:41:12:0F:CB:F8:4F:F7:56:50:AD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 134.231.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:8a:dd:ec:94:20:8c:ae:b5:a0:aa:50:5e:e7:f4:17:9c:d1: a5:65:0f:c4:c8:92:16:b8:fe:67:5b:e6:15:13:73:ef:82:4a: 50:56:05:5b:bb:e7:a3:e5:a2:87:e5:8f:12:1b:87:a4:f5:d9: b4:dc:11:fd:db:06:a5:d2:62:2f:c8:0e:0a:5d:da:eb:df:62: 3d:92:81:89:00:ff:37:d5:a8:15:d5:7f:f4:bf:1d:6e:ea:13: c9:36:b3:b9:79:27:2a:5a:a6:58:cd:28:0a:84:4d:d6:7d:e0: b8:f8:2d:50:f2:c4:a4:e0:27:b0:e3:03:bd:77:c6:f4:76:eb: cc:7f:9d:ab:06:8e:b1:42:bf:9f:3f:08:b0:98:92:2d:d1:bc: 0d:86:de:e1:05:92:b0:b3:5f:fc:6f:27:a4:fe:27:b3:35:1b: c3:f2:f3:f5:3e:67:f4:4b:1a:9c:aa:c2:a3:cf:1b:70:be:8a: a5:73:d0:4e:58:66:75:d2:c9:63:47:1c:7f:3a:80:dd:12:3f: e6:96:77:7d:f6:70:bc:86:57:52:f0:3e:b3:8a:72:5a:63:57: 78:84:75:7e:7d:8a:27:9a:e7:f2:8b:d8:9b:38:0e:c4:48:81: 22:3e:28:8e:e0:81:ec:24:72:fd:62:fd:cd:42:3a:42:79:54: d9:4e:24:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdt/P97xu4EGmtYkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjNkMTI5NzktYzg2ZS00NWUwLTgyNGYtZjdiZGI5MTFmNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij2fRMjMJPMrrWQydWXyt7c6dpwqLiPSVPeF s/61XkggpBU1KP7S2HKNC5bQzCL2Waf8OOBZC/alw7C2kPUGaQ+r8VZe8hM97FCN TuUBr55ZdNhZl8l2N33sv5i5iLZxKK9VNYbk7YIUtM46VDlJJQmVHXC7q8CsuDAv IGDnT2GOVv3TzGnwnkEYzc9jBWeMVYP0gJPUvkptkIDhuQlAINa/jyus17+r4dTs pP+cYdDX9Qy/bxPPd8MgmyXeODTIsgBIaOL5xdfh8k4ykbGOPF7i2UZXBDvIFwPg q3UmHkY5R6Hf9NDyvhJ8UfOZMimEc96/NQupIFG/26O5G65/CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuG2eRqt1xK1UESD8v4T/dWUK3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvN2QyNWJiNmMtZmE0OC0z YzQ0LTkyYjEtZjU4MjczOTU5ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFhucgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6K3eyUIIyutaCqUF7n9Bec0aVlD8TIkha4/mdb5hUTc++CSlBWBVu7 56PloofljxIbh6T12bTcEf3bBqXSYi/IDgpd2uvfYj2SgYkA/zfVqBXVf/S/HW7q E8k2s7l5JypapljNKAqETdZ94Lj4LVDyxKTgJ7DjA713xvR268x/nasGjrFCv58/ CLCYki3RvA2G3uEFkrCzX/xvJ6T+J7M1G8Py8/U+Z/RLGpyqwqPPG3C+iqVz0E5Y ZnXSyWNHHH86gN0SP+aWd332cLyGV1LwPrOKclpjV3iEdX59iiea5/KL2Js4DsRI gSI+KI7ggewkcv1i/c1COkJ5VNlOJDQ= -----END CERTIFICATE-----Generated at Mon Sep 28 07:34:08 2026 by rpki-client