$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa File: a3f85181-11c0-326a-830f-14c1fb40c85f.roa (raw, json) Hash identifier: pJiD3sHI8BY4ZfL31hjFOKetYg3Y6o5uWJUUCUoVON8= Subject key identifier: 29:03:90:4A:E8:64:D2:7B:B5:2A:7A:EA:70:5F:92:C7:4D:53:AE:4B Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D9E5014CF2F3F33E1BC6C95C0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 21949 IP address blocks: 96.45.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:14:cf:2f:3f:33:e1:bc:6c:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=dcb2c692-0102-405f-bfa9-3df6a0e9acf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:51:b0:99:f3:5e:bf:8b:aa:61:85:ff:b1: da:d4:a1:1a:29:f1:dc:66:02:0d:c7:a3:44:32:32: 9d:28:04:0a:36:5d:ef:e4:04:c7:d2:81:25:af:fb: 33:c9:cb:5b:dc:c4:ff:4b:72:e7:17:8f:7b:d8:36: 47:45:dd:46:5d:e6:30:be:23:61:23:4f:44:d3:bb: af:b8:2c:51:ec:bf:15:74:ac:ca:9f:8b:ef:8f:11: 5a:a0:8f:56:5f:55:b2:eb:f2:97:8e:06:60:84:ad: 30:94:97:f4:43:48:7a:1a:3a:dd:fd:56:5c:b4:49: f9:a0:da:10:49:e2:69:93:cc:66:aa:49:c7:38:7f: 73:c3:08:7d:f9:0a:a3:c1:e3:37:09:7e:ab:49:67: f1:93:2b:1f:c4:1e:f0:41:6d:b0:84:00:5e:2c:6a: 02:42:6b:28:fa:b4:70:b7:a0:0e:99:97:63:3b:95: 87:09:d1:b7:e5:ec:51:f3:d7:d8:44:f4:6b:05:7f: 7a:d0:a5:f1:94:84:06:84:5a:9f:04:ab:9d:f5:56: 08:02:56:72:12:22:11:26:9a:b5:3e:28:bd:a7:97: e4:ac:ad:a3:2a:e8:22:55:46:f1:8d:dc:c9:97:39: 22:57:70:51:9d:04:d2:f0:aa:ff:48:95:66:57:49: 1f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:90:4A:E8:64:D2:7B:B5:2A:7A:EA:70:5F:92:C7:4D:53:AE:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 96.45.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1d:0a:65:9d:6e:85:2a:b3:00:da:d8:cf:02:7d:52:72:e7: 65:08:22:d1:26:f5:4a:17:d7:60:74:04:c7:3e:f4:58:fa:e3: a8:c0:fc:07:26:93:7b:ad:ba:f1:6c:5a:33:f0:ff:a1:24:89: 45:9c:4d:ad:76:bb:04:ae:ce:32:65:57:cc:97:ea:01:67:66: af:f5:b4:1d:bc:9e:b0:fa:cb:87:65:66:09:19:10:ca:e8:5b: d1:9f:14:1f:61:76:65:15:55:4e:6c:de:9e:28:8b:a8:45:52: d1:ce:8b:77:a5:11:d4:9e:4d:98:4a:cd:94:bc:78:c6:f9:e7: 42:7e:cb:2c:19:6c:33:77:d2:1f:f0:f9:aa:63:c8:00:1f:53: ac:9e:ef:b8:c0:5d:11:32:b8:d5:64:17:cd:a9:30:7f:91:f6: 86:e1:36:a7:ae:db:f9:00:a6:31:ac:89:c9:23:9e:56:28:c8: bc:10:46:d9:70:a9:92:53:be:be:5d:1e:2c:ba:54:be:c3:ff: 91:82:50:69:a9:da:94:f1:55:d8:33:46:11:e1:f9:58:77:f9: 3c:8d:ab:7f:a3:39:50:d7:ba:08:a0:95:b7:b4:cf:f5:e0:82: ed:4c:9a:be:50:ee:ac:34:1f:e8:10:02:cc:b5:c3:57:2e:3e: af:a0:fb:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBTPLz8z4bxslcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZGNiMmM2OTItMDEwMi00MDVmLWJmYTktM2RmNmEwZTlhY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3RRsJnzXr+LqmGF/7Ha1KEaKfHcZgINx6NE MjKdKAQKNl3v5ATH0oElr/szyctb3MT/S3LnF4972DZHRd1GXeYwviNhI09E07uv uCxR7L8VdKzKn4vvjxFaoI9WX1Wy6/KXjgZghK0wlJf0Q0h6Gjrd/VZctEn5oNoQ SeJpk8xmqknHOH9zwwh9+QqjweM3CX6rSWfxkysfxB7wQW2whABeLGoCQmso+rRw t6AOmZdjO5WHCdG35exR89fYRPRrBX960KXxlIQGhFqfBKud9VYIAlZyEiIRJpq1 Pii9p5fkrK2jKugiVUbxjdzJlzkiV3BRnQTS8Kr/SJVmV0kfEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkDkEroZNJ7tSp66nBfksdNU65LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTNmODUxODEtMTFjMC0z MjZhLTgzMGYtMTRjMWZiNDBjODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGodCmWdboUqswDa2M8CfVJy52UIItEm9UoX12B0BMc+9Fj646jA/Acm k3utuvFsWjPw/6EkiUWcTa12uwSuzjJlV8yX6gFnZq/1tB28nrD6y4dlZgkZEMro W9GfFB9hdmUVVU5s3p4oi6hFUtHOi3elEdSeTZhKzZS8eMb550J+yywZbDN30h/w +apjyAAfU6ye77jAXREyuNVkF82pMH+R9obhNqeu2/kApjGsickjnlYoyLwQRtlw qZJTvr5dHiy6VL7D/5GCUGmp2pTxVdgzRhHh+Vh3+TyNq3+jOVDXugiglbe0z/Xg gu1Mmr5Q7qw0H+gQAsy1w1cuPq+g+4A= -----END CERTIFICATE-----Generated at Wed May 13 13:38:47 2026 by rpki-client