$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa File: 33b25462-3f2f-33b4-ab16-bb27bccd452c.roa (raw, json) Hash identifier: tvB1Zqqr6pomJ/D0OqA+fi6XLIJ8J7sMVgiLm2uPsUA= Subject key identifier: B4:84:DF:68:0B:E2:55:3D:9C:DB:29:7B:3F:CA:A5:FC:EB:68:AA:19 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D24DF85279D9EFF3ACE196080 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 21949 IP address blocks: 198.22.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:85:27:9d:9e:ff:3a:ce:19:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=08477767-98f5-4986-8006-a83632f505da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:27:6c:6f:76:91:8a:2d:9c:38:1b:eb:be: 04:83:be:16:17:63:fd:ec:80:86:b9:17:b7:f0:08: 28:c4:9d:8c:03:ff:63:c1:3b:5e:39:26:56:60:e9: 78:ce:7b:55:9d:83:d9:fb:43:20:94:19:fc:15:4d: ce:a8:f4:73:54:1d:88:3f:bb:1a:24:cc:b0:d3:83: 71:42:99:7b:92:6e:d0:03:dd:6a:20:7b:1a:a0:98: d0:6a:dd:28:62:8c:5d:8a:53:3a:8d:54:23:78:6c: 0b:f3:f4:2d:84:48:f7:40:cf:47:b5:e7:1a:ef:4d: a5:a4:07:a2:a3:c4:a2:4b:30:a2:fe:7d:6e:d8:e8: d2:e5:1a:49:bf:30:13:41:80:2d:ea:7d:2e:f6:c2: af:33:d3:d5:dd:cf:a2:44:da:23:35:81:c4:dc:8f: 85:03:ef:f5:59:63:db:74:d5:db:72:82:10:39:ff: c1:17:1c:3d:b6:ea:8d:28:75:12:e2:33:ab:f8:5a: f4:8f:78:70:a2:ce:01:df:1f:c4:25:9b:57:15:c5: eb:6d:d7:50:14:05:1a:b6:86:5e:8e:7a:0f:4a:9e: 36:c5:be:31:ff:91:a9:fa:97:72:28:b6:ea:d6:1e: 20:06:fb:76:97:5f:56:51:dd:ab:30:11:ee:f0:88: 7c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:84:DF:68:0B:E2:55:3D:9C:DB:29:7B:3F:CA:A5:FC:EB:68:AA:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 198.22.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:2d:cd:53:94:04:4e:e8:d7:f0:b6:c0:a3:a4:fd:c6:2b:c6: fe:c7:0d:d7:0b:47:a2:d1:b6:0f:52:5f:84:f4:14:0a:f7:44: 75:9b:4a:e7:97:66:f5:0e:64:c5:20:87:eb:2c:6f:2b:fb:d0: 13:64:ae:eb:50:6a:ad:c1:3d:7d:b0:52:2e:8b:f0:07:25:84: 1b:30:fd:fb:12:33:6a:e6:98:c2:67:3d:21:ae:3f:90:69:d5: 18:5d:bd:2e:d9:a9:b5:2b:a8:08:7a:66:49:04:4e:53:56:ba: e4:16:27:b5:da:84:a2:51:a7:ad:a2:09:05:34:d7:35:0e:79: ac:75:e6:c6:b5:93:5b:31:dc:5e:1b:9c:be:c4:62:86:84:3b: a3:2f:bd:37:31:89:43:f8:fa:2e:0e:4e:8a:b2:a7:63:f7:d3: d9:30:bd:ce:45:f7:01:2d:48:fe:a3:e6:ec:3e:09:38:6e:21: 25:8c:ab:53:fe:2e:8b:bc:b5:c2:35:55:e6:6e:6b:79:27:f1: c6:5c:42:98:3f:86:00:15:f9:36:8a:ae:d3:93:bf:e2:10:f3: b4:b2:3c:ec:0f:2e:d8:d5:40:67:44:dd:18:bc:3b:68:a1:06: bd:a6:83:b3:66:3d:9c:55:95:f3:76:5c:cf:0d:b2:81:03:cd: 6e:46:d2:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34UnnZ7/Os4ZYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDg0Nzc3NjctOThmNS00OTg2LTgwMDYtYTgzNjMyZjUwNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxsnbG92kYotnDgb674Eg74WF2P97ICGuRe3 8AgoxJ2MA/9jwTteOSZWYOl4zntVnYPZ+0MglBn8FU3OqPRzVB2IP7saJMyw04Nx Qpl7km7QA91qIHsaoJjQat0oYoxdilM6jVQjeGwL8/QthEj3QM9Hteca702lpAei o8SiSzCi/n1u2OjS5RpJvzATQYAt6n0u9sKvM9PV3c+iRNojNYHE3I+FA+/1WWPb dNXbcoIQOf/BFxw9tuqNKHUS4jOr+Fr0j3hwos4B3x/EJZtXFcXrbddQFAUatoZe jnoPSp42xb4x/5Gp+pdyKLbq1h4gBvt2l19WUd2rMBHu8Ih8YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSE32gL4lU9nNspez/KpfzraKoZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMzNiMjU0NjItM2YyZi0z M2I0LWFiMTYtYmIyN2JjY2Q0NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4tzVOUBE7o1/C2wKOk/cYrxv7HDdcLR6LRtg9SX4T0FAr3RHWbSueX ZvUOZMUgh+ssbyv70BNkrutQaq3BPX2wUi6L8AclhBsw/fsSM2rmmMJnPSGuP5Bp 1RhdvS7ZqbUrqAh6ZkkETlNWuuQWJ7XahKJRp62iCQU01zUOeax15sa1k1sx3F4b nL7EYoaEO6MvvTcxiUP4+i4OToqyp2P309kwvc5F9wEtSP6j5uw+CThuISWMq1P+ Lou8tcI1VeZua3kn8cZcQpg/hgAV+TaKrtOTv+IQ87SyPOwPLtjVQGdE3Ri8O2ih Br2mg7NmPZxVlfN2XM8NsoEDzW5G0ps= -----END CERTIFICATE-----Generated at Thu Mar 26 14:38:05 2026 by rpki-client