$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa File: 891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa (raw, json) Hash identifier: KDFXAcNLQZPO1Lihc+tmcXyzZpfuwRJOpmr//mkEbUY= Subject key identifier: 10:9A:B3:8F:50:B8:D5:D4:12:DD:4C:14:8E:A0:83:80:AE:76:D6:87 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F497410454F68F7ED52D2AA80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21949 IP address blocks: 199.45.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:10:45:4f:68:f7:ed:52:d2:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a4c7e6f6-6801-48bf-ac20-923c2fc9d93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f7:8b:ba:3a:c3:72:da:a2:6a:78:94:58:d1: 65:ff:ff:62:55:e2:99:59:fc:89:fa:30:b3:79:01: 5d:e5:3a:6d:4a:2e:4e:fd:ac:6c:2f:dd:23:a4:4f: cd:c7:b8:15:ed:44:de:36:f0:f1:8e:82:c2:d4:05: 37:aa:10:96:72:89:fc:53:61:bc:4d:60:ae:43:8c: de:c8:a2:54:0b:a6:72:39:19:cb:44:12:57:4e:91: 55:0f:91:96:d7:8b:22:eb:7c:a5:a8:47:73:a6:ff: 41:1d:84:f1:3e:9e:6c:57:95:1c:44:ca:22:f9:7f: 6e:e5:2b:67:52:70:fe:79:9b:0f:6b:9a:5d:9b:c2: 9e:af:21:83:d7:23:0f:c4:88:f0:a0:bc:48:1b:97: 99:04:f9:ef:47:6e:3e:27:37:ce:30:1a:fe:5e:4f: 74:d6:20:3a:28:6c:11:bc:67:fb:57:98:47:08:f6: 77:8c:fc:70:76:99:89:7b:7e:87:54:17:49:88:af: a5:cd:f3:22:82:22:31:b3:af:89:68:54:7f:bf:33: 28:78:02:c8:e1:57:85:56:90:47:2c:df:c2:93:b6: 0a:56:d2:d7:70:3b:50:5a:5a:3d:85:9d:df:4b:b7: 6e:8e:66:54:29:19:3e:12:3b:37:e3:0d:f8:f1:3f: 91:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9A:B3:8F:50:B8:D5:D4:12:DD:4C:14:8E:A0:83:80:AE:76:D6:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.45.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:30:7e:05:e2:c5:f2:03:b4:8b:7d:9d:d2:11:bc:2e:49:b5: d6:2b:53:f7:c3:d8:e1:bc:54:0a:94:27:fe:95:1e:c7:07:d0: 04:36:a3:ad:6b:13:80:d1:9f:5e:53:c0:9d:7c:f5:09:12:78: 6a:e8:0b:62:b8:4c:74:5d:f4:e7:1e:24:c3:2a:ed:91:9d:68: b1:89:48:e6:cb:6b:38:2d:e6:39:ab:be:0c:71:d8:d0:61:6b: 77:9e:53:03:d7:56:f7:be:c7:68:e5:16:80:5d:6a:41:4e:1d: 12:be:83:db:4d:50:12:a2:95:f8:8c:fc:81:41:2c:60:c0:85: 7f:7e:0a:0b:86:e2:be:f0:19:12:5f:f4:4c:b8:e5:50:c4:1f: 15:c3:3b:75:fe:f9:2a:fb:1d:cb:53:7d:bb:06:26:7f:4b:1e: 58:3a:3e:7c:1e:51:a5:b2:d6:b4:1f:04:6e:7c:6f:5c:cc:0a: be:34:7b:ac:ec:66:e4:b5:4a:53:79:a4:67:88:15:bf:30:97: 49:88:cb:28:30:15:00:ca:fe:90:c1:84:5e:01:83:7f:3f:6a: 5c:b6:53:3f:9d:aa:6f:1a:1b:ee:c0:d7:0a:08:d6:66:3d:be: 8e:da:e5:3c:e8:7f:79:dd:20:42:8a:22:ef:43:c7:24:26:2e: 2e:a8:a6:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBBFT2j37VLSqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTRjN2U2ZjYtNjgwMS00OGJmLWFjMjAtOTIzYzJmYzlkOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfeLujrDctqianiUWNFl//9iVeKZWfyJ+jCz eQFd5TptSi5O/axsL90jpE/Nx7gV7UTeNvDxjoLC1AU3qhCWcon8U2G8TWCuQ4ze yKJUC6ZyORnLRBJXTpFVD5GW14si63ylqEdzpv9BHYTxPp5sV5UcRMoi+X9u5Stn UnD+eZsPa5pdm8KeryGD1yMPxIjwoLxIG5eZBPnvR24+JzfOMBr+Xk901iA6KGwR vGf7V5hHCPZ3jPxwdpmJe36HVBdJiK+lzfMigiIxs6+JaFR/vzMoeALI4VeFVpBH LN/Ck7YKVtLXcDtQWlo9hZ3fS7dujmZUKRk+Ejs34w348T+RAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCas49QuNXUEt1MFI6gg4CudtaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvODkxNzAwYzEtYjNmNi0z MDk5LTlmNWYtNzhiYTBiMjdkMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAwfgXixfIDtIt9ndIRvC5JtdYrU/fD2OG8VAqUJ/6VHscH0AQ2o61r E4DRn15TwJ189QkSeGroC2K4THRd9OceJMMq7ZGdaLGJSObLazgt5jmrvgxx2NBh a3eeUwPXVve+x2jlFoBdakFOHRK+g9tNUBKilfiM/IFBLGDAhX9+CguG4r7wGRJf 9Ey45VDEHxXDO3X++Sr7HctTfbsGJn9LHlg6PnweUaWy1rQfBG58b1zMCr40e6zs ZuS1SlN5pGeIFb8wl0mIyygwFQDK/pDBhF4Bg38/aly2Uz+dqm8aG+7A1woI1mY9 vo7a5Tzof3ndIEKKIu9DxyQmLi6opk8= -----END CERTIFICATE-----Generated at Tue Sep 29 19:46:32 2026 by rpki-client