$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa File: c1af7f83-54d1-3637-b23a-1fac1823fd70.roa (raw, json) Hash identifier: BuXt8KO7o5kZAXJYXAns/qvQL6KA5P/4lRq9IuGgrdc= Subject key identifier: 90:EB:96:F7:49:28:F1:39:FB:02:D7:4A:DF:EA:44:2C:6C:A5:DF:AA Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F4988AB074D0D640D4D6234E8 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21949 IP address blocks: 65.97.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:ab:07:4d:0d:64:0d:4d:62:34:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4e27dfe7-6dd2-430e-877d-e8b7891b1576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f6:65:63:a9:c2:ed:85:75:22:4d:fb:18:99: e9:02:d6:b3:66:57:1a:23:ce:ad:a3:06:23:16:31: b5:a2:da:77:b0:d0:1e:53:64:0e:a4:90:b7:fd:2d: 73:37:66:65:7a:be:da:e5:7b:ae:39:b5:a0:b7:66: 93:79:a0:36:8d:a9:7e:60:c1:3a:c0:cd:cc:43:f3: be:36:2f:40:e9:ef:c5:6a:86:9b:d0:93:c2:9a:e5: 4a:bd:f9:22:cd:83:bf:03:19:57:57:38:74:ff:cd: 9a:71:ae:e1:23:6c:36:62:ad:09:d2:f9:4d:be:16: bf:1f:f6:22:34:44:83:22:52:38:cb:2e:5e:d3:d7: c8:9a:50:b3:2b:56:8b:d6:2e:05:08:d9:38:a9:00: e0:f5:24:d6:d4:05:1a:fe:49:b4:f5:04:a1:b8:25: b3:05:f6:57:c2:72:14:42:c6:3f:03:4b:02:a4:b6: 74:df:12:f5:2d:6b:00:9d:30:5d:b5:0c:61:8a:90: 5c:a6:e2:cf:0e:be:06:0f:c6:a5:23:c7:6d:df:7e: 93:2f:8a:2e:12:e7:3a:ec:15:a0:cc:10:fa:30:bb: 07:ef:d3:2f:4f:97:5e:59:98:e2:d5:46:1f:64:d8: 51:f9:13:bd:3c:b0:c3:1c:62:1e:06:76:31:fa:03: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EB:96:F7:49:28:F1:39:FB:02:D7:4A:DF:EA:44:2C:6C:A5:DF:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 65.97.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a7:4f:6d:5f:e1:a2:05:f3:36:62:7f:5d:d2:04:4a:a0:e6: 3c:d8:4b:c2:64:e1:2e:27:e4:77:8c:b3:00:d0:52:9a:fe:ca: 3e:e6:db:fc:af:81:58:eb:9e:36:48:03:96:49:41:aa:7d:be: 5a:3c:d0:2d:43:55:81:83:89:b7:1b:f3:d3:7a:95:4a:8c:e7: 31:c8:e3:93:fc:96:62:db:18:ef:f3:5e:3c:a5:8f:3d:92:a2: 06:d4:90:5c:45:79:f8:b3:f3:47:e5:bd:6e:8e:c9:67:01:e4: 2e:26:3d:7b:32:e6:1a:23:02:4a:e6:b9:47:f7:63:3e:f2:f4: 19:5e:28:20:10:b0:ef:96:82:51:05:03:dc:89:9d:47:12:57: 52:49:4f:89:85:12:6d:9c:df:8e:8e:73:14:a4:e5:7a:e6:77: d5:1c:a4:41:2e:33:bc:db:72:38:4d:05:dd:46:7a:9a:89:f6: f5:28:33:cd:b1:5a:50:a6:ba:f1:ea:c7:02:61:81:0f:13:ce: bf:b8:a7:dc:4b:14:b6:83:ec:c0:60:d4:dc:69:c5:7b:ee:06: 90:b8:95:8f:b9:49:bb:60:00:6a:45:29:64:19:6e:c3:86:14: c1:10:4d:7f:24:87:27:14:40:d2:f8:e8:57:4f:6e:f0:37:09: db:25:f7:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiKsHTQ1kDU1iNOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGUyN2RmZTctNmRkMi00MzBlLTg3N2QtZThiNzg5MWIxNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfZlY6nC7YV1Ik37GJnpAtazZlcaI86towYj FjG1otp3sNAeU2QOpJC3/S1zN2Zler7a5XuuObWgt2aTeaA2jal+YME6wM3MQ/O+ Ni9A6e/Faoab0JPCmuVKvfkizYO/AxlXVzh0/82aca7hI2w2Yq0J0vlNvha/H/Yi NESDIlI4yy5e09fImlCzK1aL1i4FCNk4qQDg9STW1AUa/km09QShuCWzBfZXwnIU QsY/A0sCpLZ03xL1LWsAnTBdtQxhipBcpuLPDr4GD8alI8dt336TL4ouEuc67BWg zBD6MLsH79MvT5deWZji1UYfZNhR+RO9PLDDHGIeBnYx+gN2xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDrlvdJKPE5+wLXSt/qRCxspd+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYzFhZjdmODMtNTRkMS0z NjM3LWIyM2EtMWZhYzE4MjNmZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQWEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2nT21f4aIF8zZif13SBEqg5jzYS8Jk4S4n5HeMswDQUpr+yj7m2/yv gVjrnjZIA5ZJQap9vlo80C1DVYGDibcb89N6lUqM5zHI45P8lmLbGO/zXjyljz2S ogbUkFxFefiz80flvW6OyWcB5C4mPXsy5hojAkrmuUf3Yz7y9BleKCAQsO+WglEF A9yJnUcSV1JJT4mFEm2c346OcxSk5Xrmd9UcpEEuM7zbcjhNBd1GepqJ9vUoM82x WlCmuvHqxwJhgQ8Tzr+4p9xLFLaD7MBg1NxpxXvuBpC4lY+5SbtgAGpFKWQZbsOG FMEQTX8khycUQNL46FdPbvA3Cdsl97g= -----END CERTIFICATE-----Generated at Mon Sep 28 19:59:23 2026 by rpki-client