$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa File: b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa (raw, json) Hash identifier: /u8L28S1K7k9MPLbhMlT84NSVFfefblzM5Bs6AA19SI= Subject key identifier: D8:B3:46:55:C1:42:EE:2A:B4:1B:CD:A5:E7:DA:DC:FC:5A:B6:E4:CB Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D1172630EC4D609C4033AFA00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 21949 IP address blocks: 199.45.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:63:0e:c4:d6:09:c4:03:3a:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=b0f62e10-a17f-4231-ab90-c831310b24e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:af:e6:8b:76:6d:c8:bc:7d:0e:9e:de:87: 3e:00:ef:30:5b:40:1b:55:a4:5e:a1:5d:2b:60:78: 37:c6:1c:bd:4d:96:4d:35:82:14:d4:c7:48:6f:8a: 91:e9:04:88:9d:4e:67:72:e0:55:98:8d:79:46:06: 9c:9c:9e:0c:17:56:d9:a4:dd:9d:10:90:31:6c:be: d8:4b:f4:51:66:16:b8:dd:a8:22:f0:23:82:17:b1: 59:3e:bf:70:06:9f:8b:87:d6:54:38:32:e4:b0:e6: ac:58:b9:d8:88:e9:57:64:bd:98:de:49:38:0e:02: 80:88:c5:75:5b:32:df:0d:eb:ca:66:7f:ac:1e:50: 5f:ee:e3:a4:a4:35:69:49:88:2e:af:cb:f9:03:f8: ba:19:f2:5f:1f:5d:d9:50:d7:d1:f2:03:1c:6b:ee: 3c:de:31:e0:61:d4:66:e4:47:16:9d:08:63:60:64: c5:9b:d7:ee:35:94:5d:06:87:01:3a:ea:c9:5e:76: d1:47:fb:07:75:43:10:58:61:cc:3c:bc:69:a7:a0: 80:f6:f1:dd:e8:b3:c4:96:f9:4d:2e:47:ed:5b:00: 85:45:5f:b8:e5:17:7b:e1:90:f5:43:4a:95:16:f5: 08:ae:ab:6d:8d:26:f0:fb:b7:fb:fe:a1:fc:b2:d9: 69:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B3:46:55:C1:42:EE:2A:B4:1B:CD:A5:E7:DA:DC:FC:5A:B6:E4:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.45.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b7:db:b4:42:20:88:24:31:ee:ea:1e:79:d3:51:f6:4e:99: 08:2b:99:7c:d2:0c:d3:85:e4:16:86:e2:a9:c1:8b:49:04:25: 0c:e1:ef:83:6a:b2:62:51:f3:31:26:96:58:10:70:2e:9e:24: 3a:45:5e:9b:0f:6a:7b:75:42:db:2b:5d:e9:0b:51:eb:a3:3b: b4:21:73:75:91:22:46:7b:28:bd:3c:ae:64:be:48:4f:0c:d2: d5:5d:64:4d:d4:dd:6a:1b:d2:e6:3c:f7:90:57:0b:13:a9:14: 66:fd:c9:06:41:78:e0:6d:be:1a:0d:d9:10:f2:53:95:dc:ab: 56:3f:2b:19:ba:fd:e3:26:90:4c:07:5a:17:e0:d2:55:53:a7: 78:33:18:d7:e4:fb:49:bd:22:b8:34:80:5c:ab:40:46:cd:db: 95:06:fd:a0:26:c4:61:64:b3:69:ee:02:a9:1d:24:66:87:d9: 9d:e1:60:53:7f:84:ef:f0:ab:6d:c7:0f:cf:1d:81:ee:11:a3: 56:1d:36:b5:b5:e4:e9:27:86:72:e0:af:91:ea:0d:0d:27:8b: 21:d4:d2:b0:29:77:9a:f5:70:d9:40:df:99:7b:ce:29:af:ab: 0a:c9:51:50:b7:e4:db:06:bf:9a:af:06:50:29:15:a7:dc:9b: 37:b1:3f:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmMOxNYJxAM6+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk YjBmNjJlMTAtYTE3Zi00MjMxLWFiOTAtYzgzMTMxMGIyNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynmv5ot2bci8fQ6e3oc+AO8wW0AbVaReoV0r YHg3xhy9TZZNNYIU1MdIb4qR6QSInU5ncuBVmI15RgacnJ4MF1bZpN2dEJAxbL7Y S/RRZha43agi8COCF7FZPr9wBp+Lh9ZUODLksOasWLnYiOlXZL2Y3kk4DgKAiMV1 WzLfDevKZn+sHlBf7uOkpDVpSYgur8v5A/i6GfJfH13ZUNfR8gMca+483jHgYdRm 5EcWnQhjYGTFm9fuNZRdBocBOurJXnbRR/sHdUMQWGHMPLxpp6CA9vHd6LPElvlN LkftWwCFRV+45Rd74ZD1Q0qVFvUIrqttjSbw+7f7/qH8stlpXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNizRlXBQu4qtBvNpefa3PxatuTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYjBkZmNjNmQtZjNkZi0z MjU2LWJlNzMtMGU5Njk0ZThlNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABa327RCIIgkMe7qHnnTUfZOmQgrmXzSDNOF5BaG4qnBi0kEJQzh74Nq smJR8zEmllgQcC6eJDpFXpsPant1QtsrXekLUeujO7Qhc3WRIkZ7KL08rmS+SE8M 0tVdZE3U3Wob0uY895BXCxOpFGb9yQZBeOBtvhoN2RDyU5Xcq1Y/Kxm6/eMmkEwH Whfg0lVTp3gzGNfk+0m9Irg0gFyrQEbN25UG/aAmxGFks2nuAqkdJGaH2Z3hYFN/ hO/wq23HD88dge4Ro1YdNrW15OknhnLgr5HqDQ0niyHU0rApd5r1cNlA35l7zimv qwrJUVC35NsGv5qvBlApFafcmzexP20= -----END CERTIFICATE-----Generated at Thu Mar 26 13:38:58 2026 by rpki-client