$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa File: a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa (raw, json) Hash identifier: fQ5i9bkH6OGD37g/i4ejHV5yeSKvZQTqFMgcngyvgTY= Subject key identifier: 3D:98:25:E3:EF:84:35:B8:D1:49:29:8A:8C:F5:C2:2E:FA:1A:D7:57 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D9E50145E6B2E9CDA938DBEA0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 21949 IP address blocks: 205.175.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:14:5e:6b:2e:9c:da:93:8d:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=684980eb-1d3e-4f47-b7e7-eb270908c7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5d:06:9d:2c:3c:97:ef:91:7b:a6:52:d3:12: d3:5a:ec:6b:7d:c1:92:7c:37:60:b7:7c:e3:83:a3: bd:4e:83:b6:29:32:4c:16:ae:70:a9:f6:45:a4:ed: c3:e4:e0:87:f3:3e:6d:2b:3b:9b:a8:67:ec:34:2b: b8:ee:a4:47:f2:5e:7a:fc:71:e1:d4:90:a8:c5:f2: 46:3e:e1:a9:7e:04:d5:60:76:7c:d1:1b:22:d9:e5: 28:ef:5f:fb:66:5d:9a:85:8d:71:a9:72:4e:22:eb: 9e:17:f8:e8:33:fc:1d:1e:e9:88:e4:f9:05:91:f5: af:26:7d:3a:54:c6:28:91:d7:04:3a:06:1a:eb:0e: b1:17:0f:5f:b6:7e:94:f9:f6:48:bf:64:8e:7a:2e: a5:51:c3:3a:2a:2e:6a:98:2d:0c:8e:7e:25:34:8c: 57:9b:9a:76:09:10:7f:ce:99:79:3c:bf:87:e0:12: 92:f5:a5:e9:b5:15:57:70:b7:3a:a8:87:95:b7:8a: b1:19:47:16:9b:2a:c4:fc:e4:a9:d9:3b:8f:77:9f: 3d:ed:96:44:34:7c:96:1b:f6:dc:ed:eb:78:99:5e: fd:1e:78:aa:7f:9d:9a:7c:a3:1c:f9:d8:10:83:b6: c4:7d:32:97:94:a5:53:f0:58:07:b8:02:93:9d:1c: 96:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:98:25:E3:EF:84:35:B8:D1:49:29:8A:8C:F5:C2:2E:FA:1A:D7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 205.175.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:05:70:4d:4d:27:4a:49:a9:f0:5c:c5:39:fe:69:b8:bc:bc: 87:fc:96:00:61:2d:9b:aa:28:99:b1:3b:dc:30:18:85:a3:91: ba:fb:3c:b6:e8:c6:5e:a9:90:7a:ac:a5:75:3c:d6:4e:68:37: 66:01:6e:b4:09:e6:de:6b:be:98:57:a0:8f:2f:9e:62:5a:1e: ff:1e:64:a0:54:a1:46:6e:11:6f:70:2b:45:4c:36:79:dc:87: 0e:31:f7:ad:f3:9a:6b:89:68:be:f3:e1:10:44:81:fe:66:b9: a9:1b:35:ba:c0:92:a2:b1:52:fe:a2:00:9e:9b:19:9e:7a:1d: 62:79:0e:ec:c0:a0:0b:6c:94:9e:c2:c4:3d:8c:bd:35:a3:b8: 60:51:e0:97:07:67:2a:cf:a1:b2:62:48:4c:18:14:63:ac:f5: 84:42:2f:1c:75:72:43:65:d0:20:bb:7c:49:e5:8b:f3:39:3b: 7f:53:a9:39:1e:9e:7b:37:57:4a:7d:41:d3:ee:e6:6f:62:82: 3f:37:2c:42:66:17:63:f7:a9:16:4b:0f:65:39:b9:e3:36:4a: 98:1a:07:6f:b9:6d:98:c9:7c:1e:7a:46:e3:b0:39:49:99:ac: 41:ff:5c:33:40:74:95:5d:a8:b5:06:74:0f:23:a2:af:41:22: 6b:f2:ff:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBReay6c2pONvqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk Njg0OTgwZWItMWQzZS00ZjQ3LWI3ZTctZWIyNzA5MDhjN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh10GnSw8l++Re6ZS0xLTWuxrfcGSfDdgt3zj g6O9ToO2KTJMFq5wqfZFpO3D5OCH8z5tKzubqGfsNCu47qRH8l56/HHh1JCoxfJG PuGpfgTVYHZ80Rsi2eUo71/7Zl2ahY1xqXJOIuueF/joM/wdHumI5PkFkfWvJn06 VMYokdcEOgYa6w6xFw9ftn6U+fZIv2SOei6lUcM6Ki5qmC0Mjn4lNIxXm5p2CRB/ zpl5PL+H4BKS9aXptRVXcLc6qIeVt4qxGUcWmyrE/OSp2TuPd5897ZZENHyWG/bc 7et4mV79Hniqf52afKMc+dgQg7bEfTKXlKVT8FgHuAKTnRyWNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2YJePvhDW40Ukpioz1wi76GtdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTVlNWM0YWItZGE0YS0z OWQwLTkyNzAtYzBlODRmZWEwNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCza/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsFcE1NJ0pJqfBcxTn+abi8vIf8lgBhLZuqKJmxO9wwGIWjkbr7PLbo xl6pkHqspXU81k5oN2YBbrQJ5t5rvphXoI8vnmJaHv8eZKBUoUZuEW9wK0VMNnnc hw4x963zmmuJaL7z4RBEgf5muakbNbrAkqKxUv6iAJ6bGZ56HWJ5DuzAoAtslJ7C xD2MvTWjuGBR4JcHZyrPobJiSEwYFGOs9YRCLxx1ckNl0CC7fEnli/M5O39TqTke nns3V0p9QdPu5m9igj83LEJmF2P3qRZLD2U5ueM2SpgaB2+5bZjJfB56RuOwOUmZ rEH/XDNAdJVdqLUGdA8joq9BImvy/yA= -----END CERTIFICATE-----Generated at Wed May 13 08:26:03 2026 by rpki-client