$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa File: 1d5b64a0-14ba-398c-be22-b579612157ce.roa (raw, json) Hash identifier: h3W56F71GOglSHcbns7acMl8p5Q5lmG6lv5VwQh6bwE= Subject key identifier: 91:30:6E:27:D2:FE:79:2F:AA:6C:AF:BD:5F:D2:87:D4:DB:68:F4:EC Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D9E501443DA887AB0DE111560 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 21949 IP address blocks: 199.167.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:14:43:da:88:7a:b0:de:11:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=1eb6da82-2e63-4bb7-b5ff-af8bc85bad66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:bb:89:0c:dd:a9:2c:36:06:9e:62:45:05: 64:9c:0f:2e:b0:40:10:cc:b7:19:e5:40:cf:c4:22: 77:b8:14:e4:5f:33:37:a1:66:af:f9:2e:18:23:4c: 53:f0:f7:42:ed:c9:1d:50:88:24:3e:68:12:91:2b: ed:0f:0f:42:d3:66:74:41:fd:72:e5:ed:95:53:a9: 47:b9:dc:d1:49:33:2e:cc:30:9e:65:66:d0:fe:30: e6:57:99:97:6f:3a:cd:ee:d6:f2:09:2e:1e:aa:58: 6f:ae:d0:4a:3b:24:43:8d:22:79:fb:74:29:87:64: fe:0a:72:33:c8:a7:91:c7:5b:b0:08:49:39:ee:3d: a4:49:7b:c6:c6:0c:0c:55:51:f9:66:31:aa:e3:6d: fd:e7:0d:3b:f6:40:0b:89:24:c2:bd:8a:f4:a3:e9: 6d:ab:66:c0:10:b1:92:54:8b:88:10:88:30:74:32: 39:6a:25:02:90:bc:80:d4:7a:75:ed:6a:c1:c6:fa: 2e:b7:5f:7c:6b:a0:f4:3c:4e:cc:cd:ae:a1:c4:90: 0e:06:da:63:bf:85:87:57:b8:e1:59:ba:b9:30:14: a0:9a:e3:b5:87:9a:18:2e:29:38:9b:49:80:18:d4: 0d:98:06:c7:b0:a7:8f:a1:e0:57:c1:fb:10:96:04: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:30:6E:27:D2:FE:79:2F:AA:6C:AF:BD:5F:D2:87:D4:DB:68:F4:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.167.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9d:c0:2d:fc:55:01:7c:76:62:d7:83:fa:9a:22:40:16:56: a7:40:e3:a5:02:7b:96:bd:14:7b:09:44:ad:9f:38:86:0a:06: c7:22:d9:ff:c9:28:2e:b8:91:61:64:d3:67:e9:a1:47:ff:a1: 9f:c6:53:4e:be:ef:48:8e:5f:f5:e2:17:84:60:1c:ef:81:b2: 10:c9:89:58:01:78:60:af:4c:83:52:fe:cb:33:5e:b8:e4:33: d5:e3:9d:43:59:de:02:35:4d:f9:15:e2:ef:63:25:86:c9:fb: ad:80:9b:7d:ef:7a:3c:65:24:5c:c8:6d:85:db:62:25:d0:e7: db:49:fb:84:36:88:19:fa:7b:d9:83:50:a0:c1:3e:82:95:3c: e2:0e:3f:c8:f3:b2:f0:71:af:a7:0b:28:5e:b6:29:1b:93:92: ff:a2:e8:5f:b7:58:86:1c:5f:21:81:18:37:1c:cb:93:93:fe: 8d:0f:ec:ad:7a:73:b1:b6:66:e2:c4:5f:35:82:27:b1:63:86: ff:4e:69:4e:c3:77:12:b4:45:2d:0e:d7:f3:4d:16:98:51:06: 55:1c:dc:b3:61:95:db:00:e2:c4:0d:22:41:a1:8c:bd:a8:2e: 83:08:3a:74:99:6e:a7:a5:28:49:e1:e0:b7:82:14:48:4d:6b: 51:8b:85:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBRD2oh6sN4RFWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MWViNmRhODItMmU2My00YmI3LWI1ZmYtYWY4YmM4NWJhZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS67iQzdqSw2Bp5iRQVknA8usEAQzLcZ5UDP xCJ3uBTkXzM3oWav+S4YI0xT8PdC7ckdUIgkPmgSkSvtDw9C02Z0Qf1y5e2VU6lH udzRSTMuzDCeZWbQ/jDmV5mXbzrN7tbyCS4eqlhvrtBKOyRDjSJ5+3Qph2T+CnIz yKeRx1uwCEk57j2kSXvGxgwMVVH5ZjGq42395w079kALiSTCvYr0o+ltq2bAELGS VIuIEIgwdDI5aiUCkLyA1Hp17WrBxvout198a6D0PE7Mza6hxJAOBtpjv4WHV7jh Wbq5MBSgmuO1h5oYLik4m0mAGNQNmAbHsKePoeBXwfsQlgT74wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEwbifS/nkvqmyvvV/Sh9TbaPTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMWQ1YjY0YTAtMTRiYS0z OThjLWJlMjItYjU3OTYxMjE1N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6eYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWdwC38VQF8dmLXg/qaIkAWVqdA46UCe5a9FHsJRK2fOIYKBsci2f/J KC64kWFk02fpoUf/oZ/GU06+70iOX/XiF4RgHO+BshDJiVgBeGCvTINS/sszXrjk M9XjnUNZ3gI1TfkV4u9jJYbJ+62Am33vejxlJFzIbYXbYiXQ59tJ+4Q2iBn6e9mD UKDBPoKVPOIOP8jzsvBxr6cLKF62KRuTkv+i6F+3WIYcXyGBGDccy5OT/o0P7K16 c7G2ZuLEXzWCJ7Fjhv9OaU7DdxK0RS0O1/NNFphRBlUc3LNhldsA4sQNIkGhjL2o LoMIOnSZbqelKEnh4LeCFEhNa1GLhYQ= -----END CERTIFICATE-----Generated at Wed May 13 16:03:06 2026 by rpki-client