$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/801a5cf1-e6f7-372e-aad9-0c8e1eac5b64.roa File: 801a5cf1-e6f7-372e-aad9-0c8e1eac5b64.roa (raw, json) Hash identifier: oC41B3RJLyNSWNx+0JHSUD7/WLw531af5hhZVPhxI6w= Subject key identifier: 02:D5:F9:D4:22:CC:5F:C6:AE:DB:4B:0B:45:44:11:9A:0B:72:1E:17 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D9E5014035DFDD58057A50A80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/801a5cf1-e6f7-372e-aad9-0c8e1eac5b64.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 17241 IP address blocks: 75.98.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:14:03:5d:fd:d5:80:57:a5:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=3199261e-a88b-4274-8a49-8b14943ffb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:76:54:92:54:93:43:24:3b:59:ce:13:66:88: 41:12:d1:45:64:33:6f:13:3d:67:69:30:ae:c1:aa: 9f:ba:25:fe:b8:ef:74:99:ae:bd:b4:79:51:e9:e7: 12:ef:53:12:84:84:5b:18:b2:52:d4:da:6d:4e:9c: 4f:e5:c8:be:4c:09:87:d7:83:95:75:cd:7a:dc:fa: ea:db:75:b8:f8:fd:30:fc:a9:47:78:ed:83:a6:fa: 00:df:39:32:d7:4c:c6:10:1c:4e:91:20:5f:83:e0: 44:f0:f7:d9:da:53:ee:e8:8f:f0:e5:46:2d:b5:fc: 3d:98:a7:39:e6:ba:38:f2:7a:76:f5:48:e8:ea:b0: 70:c7:cd:da:6c:ec:43:03:ad:40:32:97:75:1a:16: 5e:21:6a:42:14:94:5d:00:5e:dc:f4:9a:37:19:4b: 8c:68:0c:a6:d8:8f:74:05:f7:4c:b9:ef:ca:22:b4: 77:0f:89:39:56:32:77:90:02:5d:9c:ca:18:f5:d1: a7:12:df:05:bd:5f:d5:a7:19:5e:ea:f4:80:7e:9a: 53:bf:a0:6a:df:6c:d9:5c:c1:ec:71:d7:92:3d:e3: bd:f1:a1:a5:34:58:6b:f9:02:26:cf:29:04:c6:1e: cf:0b:f2:00:e1:e3:41:0e:a5:09:fb:38:4c:1c:92: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D5:F9:D4:22:CC:5F:C6:AE:DB:4B:0B:45:44:11:9A:0B:72:1E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/801a5cf1-e6f7-372e-aad9-0c8e1eac5b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 75.98.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:58:40:78:9f:18:10:22:fc:6a:f9:4d:f9:53:0c:ef:9f:d9: ea:c4:c6:bb:26:45:21:e4:f8:13:2f:fe:b3:80:35:6e:6a:3e: 9c:db:5b:ff:0e:a3:3b:e8:eb:fb:07:3b:32:ec:0f:0a:67:8c: 7f:69:15:d4:68:d7:91:7a:92:f2:5a:4f:91:c5:b4:64:00:89: 60:ac:f6:f0:dd:4d:41:68:44:a5:bd:2f:cd:c7:a7:09:a8:a1: 37:5c:66:79:c4:c2:0c:68:9f:e0:8e:6b:b6:1e:5e:28:6d:34: d1:b7:42:36:97:23:7c:0c:4e:f0:bb:b7:3a:91:75:75:ac:17: 4b:fd:69:b2:50:94:f5:d6:b9:e6:50:6c:c5:01:2e:ca:35:37: c8:f4:76:b8:85:8b:a6:4b:81:06:0e:a5:d0:db:2b:96:b0:42: 06:72:2c:43:7a:5e:0b:bd:c9:cd:4b:0e:db:4e:3f:21:c5:2e: 55:76:31:15:e7:b2:f6:2d:b7:34:b2:52:64:31:2d:d5:b8:5b: c3:71:97:23:4d:22:d1:b5:7c:9d:ac:d3:94:47:51:6a:c4:5f: d6:3c:65:e4:57:72:d2:91:b7:ad:9c:36:1c:3d:a9:05:18:cf: 4a:59:a2:8e:8a:6c:ff:27:16:36:1c:51:2e:62:9f:0c:00:3d: dc:05:48:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBQDXf3VgFelCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MzE5OTI2MWUtYTg4Yi00Mjc0LThhNDktOGIxNDk0M2ZmYjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3ZUklSTQyQ7Wc4TZohBEtFFZDNvEz1naTCu waqfuiX+uO90ma69tHlR6ecS71MShIRbGLJS1NptTpxP5ci+TAmH14OVdc163Prq 23W4+P0w/KlHeO2DpvoA3zky10zGEBxOkSBfg+BE8PfZ2lPu6I/w5UYttfw9mKc5 5ro48np29Ujo6rBwx83abOxDA61AMpd1GhZeIWpCFJRdAF7c9Jo3GUuMaAym2I90 BfdMue/KIrR3D4k5VjJ3kAJdnMoY9dGnEt8FvV/Vpxle6vSAfppTv6Bq32zZXMHs cdeSPeO98aGlNFhr+QImzykExh7PC/IA4eNBDqUJ+zhMHJKDEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALV+dQizF/GrttLC0VEEZoLch4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvODAxYTVjZjEtZTZmNy0z NzJlLWFhZDktMGM4ZTFlYWM1YjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2LGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdYQHifGBAi/Gr5TflTDO+f2erExrsmRSHk+BMv/rOANW5qPpzbW/8O ozvo6/sHOzLsDwpnjH9pFdRo15F6kvJaT5HFtGQAiWCs9vDdTUFoRKW9L83Hpwmo oTdcZnnEwgxon+COa7YeXihtNNG3QjaXI3wMTvC7tzqRdXWsF0v9abJQlPXWueZQ bMUBLso1N8j0driFi6ZLgQYOpdDbK5awQgZyLEN6Xgu9yc1LDttOPyHFLlV2MRXn svYttzSyUmQxLdW4W8NxlyNNItG1fJ2s05RHUWrEX9Y8ZeRXctKRt62cNhw9qQUY z0pZoo6KbP8nFjYcUS5inwwAPdwFSJg= -----END CERTIFICATE-----Generated at Wed May 13 13:52:12 2026 by rpki-client