$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa File: 891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa (raw, json) Hash identifier: L8rc6kB+oOvmXk9vC9xqNmHa59CQ+yKAIkqYaW8MFtE= Subject key identifier: 6F:E7:AC:9B:4D:D0:AE:E2:2E:85:31:5D:48:8B:52:DA:90:EC:5C:39 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D1172633A19917D2C45745B80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 21949 IP address blocks: 199.45.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:63:3a:19:91:7d:2c:45:74:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=f8f56c48-547c-4ca7-9ce2-1efa647a0b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:97:5e:17:fd:f9:a9:7f:52:3a:62:a9:59:3d: 82:d0:c2:c7:31:ca:9f:9d:d1:43:45:3c:26:64:bd: 1d:fb:9a:1d:02:76:ad:49:5e:dc:cb:b2:e6:df:1b: a7:59:69:04:c7:16:04:d4:95:6d:39:49:87:aa:f2: 4e:d5:88:57:cc:71:b5:6e:04:d7:ff:fe:8c:85:33: e5:e6:c8:45:89:d0:4c:43:02:6f:3e:54:d4:20:36: 5b:fc:ee:0f:6e:e5:4c:d2:32:eb:10:0b:51:c3:84: ab:59:e2:5f:c0:1e:d5:9c:87:c9:ce:db:e7:2a:01: 8b:f1:5b:64:e4:73:fb:b3:6f:85:f6:e0:2f:bb:47: 0a:3e:b6:d5:3b:f2:d8:59:02:fe:af:9a:86:b7:94: 17:06:82:44:6c:9c:79:01:d3:5c:e9:f6:85:a0:c1: 00:2a:c6:c9:74:3f:ec:fb:24:e4:2d:92:35:5d:9c: 6c:a6:d5:19:bb:6a:a6:6f:e8:7b:99:4d:44:d0:00: 12:42:ce:3a:3a:88:aa:c7:42:40:5b:24:9b:a8:ac: 6a:67:a2:ff:15:17:d3:64:d3:51:a2:cc:c0:51:f8: 39:9c:a0:98:0d:ee:a6:8f:39:ed:4c:2b:e9:a7:3d: 7f:be:1a:2d:ca:97:3b:aa:47:4b:e8:bd:de:47:dc: 78:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E7:AC:9B:4D:D0:AE:E2:2E:85:31:5D:48:8B:52:DA:90:EC:5C:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.45.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9c:4e:45:fd:37:b1:da:05:84:3b:2e:d3:c9:db:9c:da:30: 31:12:d0:9a:45:80:24:b3:d5:7c:83:46:50:4f:a9:61:a7:b5: 8b:e9:9b:02:46:af:e3:5e:64:74:44:f6:ac:b9:de:0a:e9:f5: 78:fa:39:77:f0:47:91:ee:b1:d9:40:d6:07:74:6d:3d:b0:15: 98:96:f2:85:ca:28:b3:49:a8:40:70:2b:1b:58:22:37:42:c1: 1d:7a:8c:f1:eb:79:43:22:04:24:c0:b4:9c:6b:14:86:24:e5: 50:9b:76:61:76:6c:92:62:79:c4:3a:33:e6:bd:27:d5:62:29: fc:7a:1d:72:ed:7e:39:2b:ef:50:e1:54:00:29:c6:e1:78:56: 68:32:f2:ba:42:cc:6c:ab:ad:e5:b9:72:2c:8f:1b:ac:5a:27: 9c:da:92:27:a0:83:dc:5e:5a:5f:6d:7c:c6:55:96:68:7e:5c: e8:9b:66:ae:9f:a4:a7:42:bc:7e:62:37:46:c9:9b:9f:a5:ef: d2:d9:2f:b5:0c:0b:14:35:1f:8d:bc:54:ad:bd:c3:18:bf:2b: 64:9b:83:44:b8:18:96:89:ac:84:2c:f9:fe:bb:8c:6d:a5:4a: 08:8b:b7:af:a1:0e:93:80:03:44:68:d5:cf:ae:7f:9d:26:97: f0:02:13:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmM6GZF9LEV0W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZjhmNTZjNDgtNTQ3Yy00Y2E3LTljZTItMWVmYTY0N2EwYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZdeF/35qX9SOmKpWT2C0MLHMcqfndFDRTwm ZL0d+5odAnatSV7cy7Lm3xunWWkExxYE1JVtOUmHqvJO1YhXzHG1bgTX//6MhTPl 5shFidBMQwJvPlTUIDZb/O4PbuVM0jLrEAtRw4SrWeJfwB7VnIfJztvnKgGL8Vtk 5HP7s2+F9uAvu0cKPrbVO/LYWQL+r5qGt5QXBoJEbJx5AdNc6faFoMEAKsbJdD/s +yTkLZI1XZxsptUZu2qmb+h7mU1E0AASQs46Ooiqx0JAWySbqKxqZ6L/FRfTZNNR oszAUfg5nKCYDe6mjzntTCvppz1/vhotypc7qkdL6L3eR9x4QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/nrJtN0K7iLoUxXUiLUtqQ7Fw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvODkxNzAwYzEtYjNmNi0z MDk5LTlmNWYtNzhiYTBiMjdkMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAucTkX9N7HaBYQ7LtPJ25zaMDES0JpFgCSz1XyDRlBPqWGntYvpmwJG r+NeZHRE9qy53grp9Xj6OXfwR5HusdlA1gd0bT2wFZiW8oXKKLNJqEBwKxtYIjdC wR16jPHreUMiBCTAtJxrFIYk5VCbdmF2bJJiecQ6M+a9J9ViKfx6HXLtfjkr71Dh VAApxuF4Vmgy8rpCzGyrreW5ciyPG6xaJ5zakiegg9xeWl9tfMZVlmh+XOibZq6f pKdCvH5iN0bJm5+l79LZL7UMCxQ1H428VK29wxi/K2Sbg0S4GJaJrIQs+f67jG2l SgiLt6+hDpOAA0Ro1c+uf50ml/ACE40= -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:16 2026 by rpki-client