$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa File: b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa (raw, json) Hash identifier: D0o7Stal3n2vmXWNlVfBIfmu0BZ35GhYJyif78PIDQk= Subject key identifier: 99:29:6C:92:01:2B:C1:8A:9A:F4:A3:6B:12:70:11:43:23:8A:BD:A5 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F4974102D6DA80CC483A2D4E0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21949 IP address blocks: 199.45.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:10:2d:6d:a8:0c:c4:83:a2:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=837c1789-0aa0-40b1-b5ab-35745f382031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:64:55:a3:9e:d2:67:50:82:79:ad:fa:fd:59: 4d:e5:6e:a3:a3:0f:e3:c8:92:ec:0c:40:87:32:6d: 9a:e0:e3:e9:d9:1b:be:7e:bc:77:ac:63:31:78:b5: ea:88:3d:38:d0:0b:82:7e:d3:a6:12:d0:ca:5b:e1: 1c:b0:2b:5c:8d:87:f3:c3:8f:4b:bc:90:15:df:60: 2f:e2:64:68:db:ce:fb:e2:af:79:11:5d:ab:71:0d: 5d:15:59:3b:9d:dd:a0:4b:c0:82:26:24:3e:17:4a: 95:95:14:5e:5c:23:cc:4a:86:83:35:66:c1:87:14: 7e:0c:a1:ce:ec:e8:b9:51:51:63:ff:ad:70:5e:77: 1d:50:1c:c9:b6:77:61:40:c6:71:27:6e:5c:0f:a3: 49:1a:26:6b:5e:54:93:a5:fd:b8:42:20:e4:79:e2: 77:8f:55:eb:06:fa:3f:78:98:55:92:93:bd:dc:cf: cd:c2:68:1a:22:15:55:db:2c:b5:b8:27:42:00:bb: 65:b6:bf:c5:61:b6:1f:39:64:98:3d:07:e4:74:c9: e0:97:70:b4:9d:ea:51:c5:17:17:d0:c1:e8:4f:2e: 09:05:4d:ae:a8:2d:b3:bc:c1:1e:c9:d3:86:0d:5d: f7:15:e7:32:f9:34:38:46:3c:7d:12:5d:e6:1e:8c: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:29:6C:92:01:2B:C1:8A:9A:F4:A3:6B:12:70:11:43:23:8A:BD:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.45.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7c:2c:f7:02:b3:3a:b9:9c:b3:4f:41:7c:6d:18:71:0d:2d: 14:60:1f:b9:44:18:53:6a:25:ed:fe:9c:b4:96:68:b9:1d:83: 0b:eb:0f:c7:e7:e8:78:1e:f0:c8:e9:3b:0e:0c:c4:64:5f:61: 6c:27:a4:55:28:fa:24:7c:58:76:a8:fa:50:d9:d4:93:b4:c8: f9:9c:eb:cb:b0:ff:28:bf:85:57:37:a6:c2:c6:44:ee:a6:15: 91:8b:df:72:37:d1:b8:09:d7:22:4d:27:8f:20:12:0d:87:56: 6a:73:48:d5:cc:1b:f1:bf:8e:28:09:10:d8:11:e4:2c:a3:41: 47:c2:49:8f:db:31:09:7c:9f:86:36:9d:04:0d:76:4e:45:1c: bd:df:0f:98:14:3a:ab:ca:c6:52:32:a8:a3:ca:1b:8b:9b:c2: 5c:7f:32:a8:30:8f:68:ad:7c:61:84:8a:f5:75:02:2a:90:b5: 9a:fe:51:e4:86:0e:a1:4d:a0:d6:0f:67:8c:d3:a1:3e:11:8c: 46:91:ea:38:6b:8f:d8:e9:0f:ee:6e:eb:dd:2f:5e:c6:6e:a9: 78:2d:6b:3c:af:78:c9:64:a7:fc:3b:11:c1:cd:04:c3:4a:fd: 36:40:2d:fb:ed:97:20:c6:dd:9a:9a:b1:eb:25:45:db:d2:48: 1a:e6:ad:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBAtbagMxIOi1OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODM3YzE3ODktMGFhMC00MGIxLWI1YWItMzU3NDVmMzgyMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomRVo57SZ1CCea36/VlN5W6jow/jyJLsDECH Mm2a4OPp2Ru+frx3rGMxeLXqiD040AuCftOmEtDKW+EcsCtcjYfzw49LvJAV32Av 4mRo28774q95EV2rcQ1dFVk7nd2gS8CCJiQ+F0qVlRReXCPMSoaDNWbBhxR+DKHO 7Oi5UVFj/61wXncdUBzJtndhQMZxJ25cD6NJGiZrXlSTpf24QiDkeeJ3j1XrBvo/ eJhVkpO93M/NwmgaIhVV2yy1uCdCALtltr/FYbYfOWSYPQfkdMngl3C0nepRxRcX 0MHoTy4JBU2uqC2zvMEeydOGDV33Fecy+TQ4Rjx9El3mHoxWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkpbJIBK8GKmvSjaxJwEUMjir2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYjBkZmNjNmQtZjNkZi0z MjU2LWJlNzMtMGU5Njk0ZThlNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA58LPcCszq5nLNPQXxtGHENLRRgH7lEGFNqJe3+nLSWaLkdgwvrD8fn 6Hge8MjpOw4MxGRfYWwnpFUo+iR8WHao+lDZ1JO0yPmc68uw/yi/hVc3psLGRO6m FZGL33I30bgJ1yJNJ48gEg2HVmpzSNXMG/G/jigJENgR5CyjQUfCSY/bMQl8n4Y2 nQQNdk5FHL3fD5gUOqvKxlIyqKPKG4ubwlx/Mqgwj2itfGGEivV1AiqQtZr+UeSG DqFNoNYPZ4zToT4RjEaR6jhrj9jpD+5u690vXsZuqXgtazyveMlkp/w7EcHNBMNK /TZALfvtlyDG3ZqaseslRdvSSBrmrbo= -----END CERTIFICATE-----Generated at Thu Oct 1 09:47:20 2026 by rpki-client