$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa File: 1c8cfd90-1e45-3ca8-865a-284e8261e043.roa (raw, json) Hash identifier: LQxPuZ5rM4ZJC3/krjimUFxDiJMu6SXwrh7qflt5Xeg= Subject key identifier: 8C:C1:12:E1:F8:E1:65:7F:20:F9:58:22:03:03:F3:65:92:E8:83:2A Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D9E501450E86727AD19A2F680 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 21949 IP address blocks: 199.68.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:14:50:e8:67:27:ad:19:a2:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=91cd3fcd-3585-4b71-89b6-31e54aa28fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:eb:94:3d:32:ed:db:1b:d0:9c:ca:56:26:d9: db:61:21:8a:60:fc:ad:0b:7c:f0:18:5d:50:00:72: f4:e0:29:2c:fc:5d:b7:c2:4f:b1:6c:c6:63:80:a8: b5:13:04:e6:88:f7:3f:e2:e5:97:43:40:e5:77:e4: f6:ff:e8:0b:70:6f:c0:78:f9:9f:47:6b:7f:ca:67: 43:2a:55:d2:fb:9a:ec:c8:81:2c:99:8c:de:36:ec: 42:08:4b:eb:15:8c:6b:ed:ba:ee:87:d9:06:11:a0: 9d:46:c2:c9:2e:03:45:da:ac:e5:b6:d9:c2:9c:0e: 89:d6:01:9e:4f:af:8d:8d:c1:94:6e:f9:1f:76:0e: 2c:78:f3:22:80:21:b4:09:b1:fd:60:ef:04:b3:f7: e3:e9:31:bc:4a:b7:dd:b1:b7:c8:d0:b1:fd:19:02: 38:d1:a6:9c:1c:60:11:c4:8c:ef:cb:1c:7d:cf:83: 4c:f2:e5:00:aa:d8:df:03:9c:a7:f1:4a:12:00:10: a4:81:b4:de:d0:81:89:2e:3e:ed:4e:10:de:55:0e: ba:c7:37:b5:86:2f:f2:07:f2:98:8c:5c:4a:0f:b9: 22:95:32:d9:e0:17:5a:27:b7:33:df:c5:b1:f8:d1: dd:03:2a:62:25:fe:26:d4:cb:4f:16:13:c1:6f:04: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C1:12:E1:F8:E1:65:7F:20:F9:58:22:03:03:F3:65:92:E8:83:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.68.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:49:bc:58:f0:a3:34:7f:cc:f8:c9:2a:c3:32:57:1b:16:e5: 90:39:ff:10:71:6f:90:84:b3:67:9a:06:e8:d6:93:7c:92:5a: 99:cd:20:99:5b:01:9b:32:ab:be:7a:17:92:02:6a:0c:34:6d: 93:d5:c9:0f:a3:23:dc:a2:1a:99:b6:99:5d:5f:79:e9:80:fb: 34:e9:0d:3d:46:f5:4c:4a:71:a5:47:42:9b:94:4e:e7:73:cc: 9a:82:96:ac:cd:58:c7:c8:33:33:bd:8d:f3:29:7f:59:58:77: d2:fe:26:11:cf:db:9e:7c:89:bd:31:89:54:d7:b3:0b:0e:c6: 63:33:04:68:ec:49:c4:3d:0e:60:9e:ea:fa:50:76:ef:91:33: e0:db:c7:cb:02:54:c8:f7:28:20:1d:ff:08:d7:f4:33:fd:d7: 9b:6d:12:8b:b4:3b:53:fd:82:5d:d4:ae:a0:6a:f9:6d:fc:28: a5:b7:18:6f:e1:f2:0b:09:3e:7d:f6:12:82:4d:a5:7a:23:bf: da:8f:b9:ee:28:dc:07:83:39:33:eb:3b:dd:94:9b:83:3b:93: f6:47:af:6e:35:b8:9d:ad:48:bb:65:6a:27:f3:d0:7b:09:90: 9d:9d:18:b7:e9:32:20:82:30:e4:b2:cb:cd:b9:20:07:af:2a: bf:df:75:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBRQ6GcnrRmi9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk OTFjZDNmY2QtMzU4NS00YjcxLTg5YjYtMzFlNTRhYTI4ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+uUPTLt2xvQnMpWJtnbYSGKYPytC3zwGF1Q AHL04Cks/F23wk+xbMZjgKi1EwTmiPc/4uWXQ0Dld+T2/+gLcG/AePmfR2t/ymdD KlXS+5rsyIEsmYzeNuxCCEvrFYxr7bruh9kGEaCdRsLJLgNF2qzlttnCnA6J1gGe T6+NjcGUbvkfdg4sePMigCG0CbH9YO8Es/fj6TG8SrfdsbfI0LH9GQI40aacHGAR xIzvyxx9z4NM8uUAqtjfA5yn8UoSABCkgbTe0IGJLj7tThDeVQ66xze1hi/yB/KY jFxKD7kilTLZ4BdaJ7cz38Wx+NHdAypiJf4m1MtPFhPBbwR7AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzBEuH44WV/IPlYIgMD82WS6IMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMWM4Y2ZkOTAtMWU0NS0z Y2E4LTg2NWEtMjg0ZTgyNjFlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhJvFjwozR/zPjJKsMyVxsW5ZA5/xBxb5CEs2eaBujWk3ySWpnNIJlb AZsyq756F5ICagw0bZPVyQ+jI9yiGpm2mV1feemA+zTpDT1G9UxKcaVHQpuUTudz zJqClqzNWMfIMzO9jfMpf1lYd9L+JhHP2558ib0xiVTXswsOxmMzBGjsScQ9DmCe 6vpQdu+RM+Dbx8sCVMj3KCAd/wjX9DP915ttEou0O1P9gl3UrqBq+W38KKW3GG/h 8gsJPn32EoJNpXojv9qPue4o3AeDOTPrO92Um4M7k/ZHr241uJ2tSLtlaifz0HsJ kJ2dGLfpMiCCMOSyy825IAevKr/fdRc= -----END CERTIFICATE-----Generated at Wed May 13 07:58:19 2026 by rpki-client