$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/94c1d3de-c346-3ded-b038-58b8641d9683.roa File: 94c1d3de-c346-3ded-b038-58b8641d9683.roa (raw, json) Hash identifier: CCrQWK04Q/MzlclGWDBdEzncgngNS/vUf2Auj4r0VOc= Subject key identifier: A2:7A:8A:7C:34:01:EB:3D:41:61:0C:EE:5E:DA:36:D7:5E:7B:46:44 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F46A7E1C8631BDCF74A4A0780 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/94c1d3de-c346-3ded-b038-58b8641d9683.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 397177 IP address blocks: 65.97.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e1:c8:63:1b:dc:f7:4a:4a:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=19586123-993b-469e-a08b-2ab273c5fb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:b4:2e:c6:1b:db:a9:fc:2f:04:9d:b6:69: e5:f2:fb:a0:f8:7d:c1:02:0c:f0:59:2a:c5:8a:f9: 88:18:f6:d1:e1:6e:34:55:ca:81:d3:bd:34:af:ef: 1c:e0:49:31:7e:07:36:57:ad:23:bb:92:6c:be:9a: 80:75:5e:81:6e:52:78:14:7a:b4:23:fe:1b:70:47: 62:e6:da:c8:a9:61:c4:28:ec:36:19:da:76:b2:10: 78:19:78:ed:f1:88:4b:99:c6:7b:69:87:41:93:3c: 69:0b:b5:f9:4e:0a:8b:5c:a5:54:68:ce:6a:34:ec: 85:f6:94:df:33:cf:85:63:77:1e:8a:2c:4a:4e:6f: 0a:24:e4:da:9f:0f:45:59:74:cc:64:e3:00:c9:bf: 6d:0a:b6:a4:39:c1:fa:e3:da:35:7d:cd:40:09:70: fa:2a:19:cd:14:5f:22:71:67:52:fa:3e:3f:bc:7d: f2:42:33:fa:7c:ba:d7:63:62:39:62:4b:d0:bc:b2: 41:6e:bb:6a:98:85:6d:17:c2:02:b9:fa:be:2f:c7: 4c:9b:d9:66:87:a7:81:98:8c:90:23:4f:6b:9c:be: 84:60:a8:30:87:b2:9e:df:e2:ce:7e:34:f3:ac:2f: 28:d2:67:cf:48:09:90:5f:a0:a2:b7:4d:09:0c:56: 5c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7A:8A:7C:34:01:EB:3D:41:61:0C:EE:5E:DA:36:D7:5E:7B:46:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/94c1d3de-c346-3ded-b038-58b8641d9683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 65.97.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9c:29:12:a3:95:0c:8a:34:e0:1a:ce:54:b8:06:43:ac:53: 1c:d3:60:92:cc:aa:0b:7a:72:d8:fb:ef:f9:d2:f6:c7:22:b3: a1:93:b4:83:61:44:5e:1b:ba:a9:11:f1:3d:51:47:94:1a:2f: 18:40:98:ce:52:45:cd:8d:1e:46:f7:95:33:db:7f:77:59:bc: b8:43:bb:07:c0:cb:e6:19:12:37:35:90:10:e7:dc:0d:50:bb: 5f:d0:fe:d9:19:c7:8b:6d:77:53:21:8f:7e:ec:94:a9:9a:37: 5c:43:42:d2:3d:dd:89:b6:5b:0e:4c:73:d6:a7:8e:24:2c:82: 78:8a:ea:10:77:eb:05:8f:26:84:1f:56:f0:f7:06:5a:2c:ec: 4e:4a:32:d5:0e:40:97:3e:28:39:0d:ae:a2:4e:0a:68:1a:da: a6:16:ac:73:dd:23:c5:62:0d:f4:db:97:76:3b:ba:b0:a4:fc: 50:88:90:30:19:2f:ca:77:18:66:61:ec:7b:fa:27:08:6f:af: e4:51:a4:58:0e:8a:f5:16:18:e1:a8:27:b2:2e:3d:f7:b7:79: 7b:10:77:87:a0:b1:62:07:8e:e2:ed:e6:dc:0d:ab:59:16:5f: 1d:9c:09:7b:75:e1:ac:1b:70:28:c5:84:18:3f:fb:0a:9f:16: 6f:0e:74:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+HIYxvc90pKB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MTk1ODYxMjMtOTkzYi00NjllLWEwOGItMmFiMjczYzVmYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+a0LsYb26n8LwSdtmnl8vug+H3BAgzwWSrF ivmIGPbR4W40VcqB0700r+8c4Ekxfgc2V60ju5JsvpqAdV6BblJ4FHq0I/4bcEdi 5trIqWHEKOw2Gdp2shB4GXjt8YhLmcZ7aYdBkzxpC7X5TgqLXKVUaM5qNOyF9pTf M8+FY3ceiixKTm8KJOTanw9FWXTMZOMAyb9tCrakOcH649o1fc1ACXD6KhnNFF8i cWdS+j4/vH3yQjP6fLrXY2I5YkvQvLJBbrtqmIVtF8ICufq+L8dMm9lmh6eBmIyQ I09rnL6EYKgwh7Ke3+LOfjTzrC8o0mfPSAmQX6Cit00JDFZciQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ6inw0Aes9QWEM7l7aNtdee0ZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvOTRjMWQzZGUtYzM0Ni0z ZGVkLWIwMzgtNThiODY0MWQ5NjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQWEnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWcKRKjlQyKNOAazlS4BkOsUxzTYJLMqgt6ctj77/nS9scis6GTtINh RF4buqkR8T1RR5QaLxhAmM5SRc2NHkb3lTPbf3dZvLhDuwfAy+YZEjc1kBDn3A1Q u1/Q/tkZx4ttd1Mhj37slKmaN1xDQtI93Ym2Ww5Mc9anjiQsgniK6hB36wWPJoQf VvD3Blos7E5KMtUOQJc+KDkNrqJOCmga2qYWrHPdI8ViDfTbl3Y7urCk/FCIkDAZ L8p3GGZh7Hv6Jwhvr+RRpFgOivUWGOGoJ7IuPfe3eXsQd4egsWIHjuLt5twNq1kW Xx2cCXt14awbcCjFhBg/+wqfFm8OdC4= -----END CERTIFICATE-----Generated at Sat Sep 26 11:44:42 2026 by rpki-client