$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa File: cae92603-341e-3d54-9fda-0cf1e572484c.roa (raw, json) Hash identifier: Zi2qs0Z3C7qm00gr4sJ8ArUf/qLLFzWO37bH2WaJPTk= Subject key identifier: EB:19:AA:E6:2A:78:29:4E:57:7C:66:D3:25:B5:BC:40:70:EA:C6:0D Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D44FA409397262E12EB762E00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 21949 IP address blocks: 199.247.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:40:93:97:26:2e:12:eb:76:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=0f345aa3-6e49-4a90-9a7b-a0ce4d8beb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:30:10:54:40:a5:f1:73:23:da:c9:f6:8a:95: 82:04:e4:c5:61:07:a3:18:ce:be:43:71:f4:54:19: ca:da:eb:cb:41:31:05:10:8d:0d:ab:6a:90:f7:e5: 79:5a:20:0e:42:f3:b3:c0:aa:2c:71:6d:bc:42:7a: 5c:5c:e0:5c:cb:b0:7c:0f:23:d8:45:b1:1d:e5:aa: 07:4e:99:a3:2b:8f:fd:a8:be:c4:8e:84:fb:e6:27: a0:ee:97:b7:58:e9:5c:9e:65:67:50:1b:12:9f:25: 56:01:36:30:e7:68:e8:a6:19:cb:1b:0a:84:25:5d: 56:db:24:4a:6e:8f:e8:fc:6e:53:92:fe:77:92:3a: 36:75:a5:d9:fd:bb:12:c0:06:5b:bf:2d:a5:54:87: 1c:bf:4d:42:fe:f4:af:0b:84:62:25:e1:61:b4:ee: 20:70:64:1a:e3:6a:d3:c5:ff:97:90:02:99:07:13: 4b:eb:6c:bc:45:3a:fd:24:14:bb:ae:02:f6:c3:f2: 21:77:78:ae:d2:03:bc:1d:4e:6f:2b:8a:f3:bf:fa: 14:98:08:d3:67:a1:68:4e:1a:0f:f4:96:f6:2d:74: 77:3b:7e:48:34:8e:7b:c3:92:d4:e5:da:92:01:34: 99:ed:53:45:40:e1:91:3d:41:63:8a:6c:a5:63:4a: ef:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:19:AA:E6:2A:78:29:4E:57:7C:66:D3:25:B5:BC:40:70:EA:C6:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.247.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4c:29:e3:f2:28:cb:00:81:4f:ea:b8:21:5d:55:0e:1f:56: 05:4f:49:b8:4d:ca:7d:7f:38:9a:e7:16:31:6e:cd:74:63:ae: a4:82:19:de:56:ee:3b:7c:00:18:ff:b8:47:a1:f1:df:d8:2b: 6a:3c:1e:eb:d0:69:d1:0f:3f:23:dc:9f:49:db:9a:63:f9:6d: d3:c5:96:f3:1d:18:21:27:d2:53:80:25:42:2a:bd:29:f2:c7: a1:5a:80:31:af:6a:fc:68:85:27:c6:08:2f:a7:53:4a:7e:1b: ef:ec:df:fc:d5:d0:46:23:3c:ee:a8:fc:1d:70:84:31:03:07: a4:91:8c:bf:d9:11:d6:c3:63:ff:b1:f5:fb:5f:b3:df:20:11: be:64:2e:e0:49:56:98:59:de:df:77:03:69:a0:b7:40:7e:8f: aa:52:f2:f1:fe:76:13:f6:89:7f:35:3a:51:44:98:5e:0b:a4: 7e:bb:3d:4f:6f:f0:e0:d6:11:aa:cc:06:3e:7f:a0:2e:58:85: ae:f0:03:53:79:9e:83:9a:52:9d:76:5e:6b:1b:73:0b:dc:a9: 06:66:1c:1d:75:02:8b:cf:3b:58:54:5b:31:4c:f4:7b:a5:11: 74:39:80:90:4f:c3:df:b5:7c:19:09:c1:11:bb:fe:9c:4a:1e: e0:ae:b0:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kCTlyYuEut2LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MGYzNDVhYTMtNmU0OS00YTkwLTlhN2ItYTBjZTRkOGJlYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jAQVECl8XMj2sn2ipWCBOTFYQejGM6+Q3H0 VBnK2uvLQTEFEI0Nq2qQ9+V5WiAOQvOzwKoscW28QnpcXOBcy7B8DyPYRbEd5aoH TpmjK4/9qL7EjoT75ieg7pe3WOlcnmVnUBsSnyVWATYw52jophnLGwqEJV1W2yRK bo/o/G5Tkv53kjo2daXZ/bsSwAZbvy2lVIccv01C/vSvC4RiJeFhtO4gcGQa42rT xf+XkAKZBxNL62y8RTr9JBS7rgL2w/Ihd3iu0gO8HU5vK4rzv/oUmAjTZ6FoThoP 9Jb2LXR3O35INI57w5LU5dqSATSZ7VNFQOGRPUFjimylY0rv7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsZquYqeClOV3xm0yW1vEBw6sYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2FlOTI2MDMtMzQxZS0z ZDU0LTlmZGEtMGNmMWU1NzI0ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtMKePyKMsAgU/quCFdVQ4fVgVPSbhNyn1/OJrnFjFuzXRjrqSCGd5W 7jt8ABj/uEeh8d/YK2o8HuvQadEPPyPcn0nbmmP5bdPFlvMdGCEn0lOAJUIqvSny x6FagDGvavxohSfGCC+nU0p+G+/s3/zV0EYjPO6o/B1whDEDB6SRjL/ZEdbDY/+x 9ftfs98gEb5kLuBJVphZ3t93A2mgt0B+j6pS8vH+dhP2iX81OlFEmF4LpH67PU9v 8ODWEarMBj5/oC5Yha7wA1N5noOaUp12XmsbcwvcqQZmHB11AovPO1hUWzFM9Hul EXQ5gJBPw9+1fBkJwRG7/pxKHuCusAg= -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:25 2026 by rpki-client