$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa File: fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa (raw, json) Hash identifier: eKjR/AoxDMlnuTbvu8RzJdnydahqEAnBSKbsRc3zP8Q= Subject key identifier: 86:9A:F7:6C:6E:3C:B0:C1:00:B9:DC:29:93:68:CB:97:72:76:00:84 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F4C3D44FCEDEE1597128BC080 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 35927 IP address blocks: 64.18.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:44:fc:ed:ee:15:97:12:8b:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=18176e27-5b2d-4634-aaa5-8541694ed52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:12:8e:aa:12:fa:37:15:dd:ce:50:7a:1b:7e: e9:1c:c8:6d:a0:93:18:34:e3:62:7f:4b:1d:ad:b7: 36:a3:7e:09:e9:27:e4:2a:c3:70:2c:71:2d:40:09: 19:b4:1a:63:58:ed:f6:c0:6c:ba:fe:cb:f2:60:6a: 17:62:00:ec:39:50:ff:33:fd:a8:86:15:e1:2a:00: f6:11:da:4f:68:03:a7:a6:3e:f1:2e:e5:b7:08:8b: 49:88:14:16:4d:a6:04:9b:98:e1:a7:a9:72:6d:dc: e4:5f:d6:2b:5f:15:04:53:7c:f1:ca:db:c3:a8:c6: 0d:d4:e9:40:9f:5a:b7:91:89:f5:1b:f1:7a:1f:16: d0:58:22:8c:3f:50:3d:56:cb:13:ed:b6:6b:ac:79: fb:b2:f5:f1:a8:2d:13:2f:73:33:e7:5f:f5:cf:96: cc:01:0c:52:f0:57:53:51:54:b4:9f:43:1d:61:fd: 48:7c:66:d6:68:69:2a:11:dc:e1:55:f6:b6:a1:c4: b7:9f:e3:7f:e7:6d:59:6e:f1:96:9d:19:d5:ba:11: 8a:92:ca:b6:18:94:8e:cf:1e:98:4d:fb:5c:39:83: cd:2c:90:92:00:bf:0a:fb:a0:62:41:20:2a:24:3d: 21:9c:46:6d:a5:08:5e:a9:a9:80:b2:24:a5:ff:28: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9A:F7:6C:6E:3C:B0:C1:00:B9:DC:29:93:68:CB:97:72:76:00:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 64.18.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a8:ab:a1:d8:23:dd:7c:b9:41:bd:5c:56:d0:bd:e2:b2:53: 7e:f1:49:93:f5:a5:c0:11:e0:17:37:be:3e:78:a9:a4:60:9e: c1:5e:c6:9c:c9:dd:11:5e:40:7b:82:2c:86:0c:1b:e1:58:50: 05:34:79:e0:a6:69:a1:52:d1:25:6b:05:a5:7b:fc:bf:7e:d9: 78:6a:61:7b:55:46:61:ef:1b:1a:cb:4d:db:8e:79:5e:64:b2: f4:74:b9:33:e1:98:ac:f3:66:b7:2d:56:2e:70:86:43:a3:60: 4d:18:23:7b:72:18:87:ba:d9:ce:34:7f:4e:87:1a:6f:96:a7: aa:74:d6:77:c4:57:0d:eb:4e:c6:3c:df:99:45:0f:b3:e8:11: 05:0b:9d:ff:db:88:18:98:30:e3:4f:c7:5c:f5:d8:30:c0:c9: 8f:43:33:8f:bd:08:a7:65:b2:da:58:85:02:91:12:4c:a6:47: 18:e6:c1:c1:3c:e1:61:92:a0:e5:38:2e:48:21:fd:97:af:5e: 15:b3:94:4b:25:30:27:81:99:38:47:81:ef:0a:ca:25:4e:f8: a9:a5:5c:58:85:9a:d8:34:56:ca:f5:77:7a:44:8e:cf:59:e2: 06:31:37:db:98:9c:f7:00:94:f3:51:f4:31:de:9f:7b:37:23: 51:0d:a1:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUT87e4VlxKLwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTgxNzZlMjctNWIyZC00NjM0LWFhYTUtODU0MTY5NGVkNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhKOqhL6NxXdzlB6G37pHMhtoJMYNONif0sd rbc2o34J6SfkKsNwLHEtQAkZtBpjWO32wGy6/svyYGoXYgDsOVD/M/2ohhXhKgD2 EdpPaAOnpj7xLuW3CItJiBQWTaYEm5jhp6lybdzkX9YrXxUEU3zxytvDqMYN1OlA n1q3kYn1G/F6HxbQWCKMP1A9VssT7bZrrHn7svXxqC0TL3Mz51/1z5bMAQxS8FdT UVS0n0MdYf1IfGbWaGkqEdzhVfa2ocS3n+N/521ZbvGWnRnVuhGKksq2GJSOzx6Y TftcOYPNLJCSAL8K+6BiQSAqJD0hnEZtpQheqamAsiSl/yif0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaa92xuPLDBALncKZNoy5dydgCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZmUxZTdiYjctMjlmOS0z NDYxLWExM2MtZmE5YWQ5OTE0MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBJCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACioq6HYI918uUG9XFbQveKyU37xSZP1pcAR4Bc3vj54qaRgnsFexpzJ 3RFeQHuCLIYMG+FYUAU0eeCmaaFS0SVrBaV7/L9+2XhqYXtVRmHvGxrLTduOeV5k svR0uTPhmKzzZrctVi5whkOjYE0YI3tyGIe62c40f06HGm+Wp6p01nfEVw3rTsY8 35lFD7PoEQULnf/biBiYMONPx1z12DDAyY9DM4+9CKdlstpYhQKREkymRxjmwcE8 4WGSoOU4Lkgh/ZevXhWzlEslMCeBmThHge8KyiVO+KmlXFiFmtg0Vsr1d3pEjs9Z 4gYxN9uYnPcAlPNR9DHen3s3I1ENoYk= -----END CERTIFICATE-----Generated at Sat Sep 26 10:47:20 2026 by rpki-client