$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa File: cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa (raw, json) Hash identifier: OyXS4o9fooRmaXxp3MX0wYFCeVCFPMac1KTEBbwaqUU= Subject key identifier: 38:2D:12:97:E9:1C:E8:7E:84:D2:0C:23:E5:C1:BE:AE:5F:6B:68:02 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D932543E7FBF46ABE22060500 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 21949 IP address blocks: 64.137.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:43:e7:fb:f4:6a:be:22:06:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=5d66455e-59ab-40e1-a91c-414e50b7ef2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:61:4e:76:76:24:50:db:4c:8d:7a:45:f8:b7: 94:20:c7:80:61:c0:3a:ed:24:86:06:00:31:1f:c8: e2:49:58:1f:7e:69:e9:1c:80:3b:dd:8d:23:61:09: 50:ed:31:45:1d:91:9a:ac:ad:98:5c:0d:8c:af:fb: de:4a:3e:8f:65:b2:58:81:7f:61:ed:f4:82:dd:55: c6:cb:36:cb:ac:86:c2:a2:f8:6b:74:d1:b4:0c:ea: 12:fb:6c:54:b4:77:51:0a:c2:c6:cc:2c:0e:d3:5a: 31:1d:3e:5a:74:c7:a5:41:f6:5e:4e:4a:a1:20:65: 5b:1e:f9:2d:fd:70:72:f8:49:e1:13:cb:0b:d1:17: 19:7e:fd:04:a8:a1:96:c6:b9:d1:86:d2:77:ce:1f: de:47:a4:81:a9:08:25:11:47:d9:80:cf:50:4e:2d: cb:89:2e:20:4e:eb:40:38:cf:98:8e:7b:73:3b:2d: 4e:70:f7:cf:4e:b3:d2:43:74:28:3a:d9:4c:9f:c1: 51:0b:35:d0:10:98:02:ba:b5:6f:53:7b:20:7f:e9: f4:c5:9c:48:25:1c:44:8d:c5:d3:82:14:35:0d:f8: 5d:dd:20:ad:7a:ca:31:a5:85:3f:16:2d:4b:7e:44: d2:aa:34:5a:e7:86:87:a4:bb:72:05:ba:46:73:a5: 03:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:12:97:E9:1C:E8:7E:84:D2:0C:23:E5:C1:BE:AE:5F:6B:68:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 64.137.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2e:74:00:40:f9:ab:60:a4:2a:aa:0a:4c:04:f6:67:50:34: ec:03:35:57:02:56:6e:28:74:1e:b5:10:c5:5d:26:f3:d4:49: 76:80:c5:68:75:e4:e3:c0:6e:a2:ed:39:ab:c0:c1:3e:f7:1a: 3a:4b:9a:51:02:5c:ba:60:eb:69:cf:79:94:b6:dc:d5:1b:72: 62:3b:c8:13:28:5f:30:33:74:8b:d3:af:aa:49:3a:29:bc:6f: 65:ad:2d:4b:18:18:8c:fc:8c:93:3e:50:de:8f:fc:e1:80:01: c2:84:69:54:33:89:56:10:2b:f6:ef:5c:43:09:18:0a:ec:3a: 37:4f:58:b4:5b:a7:a7:3d:8f:9f:f1:63:f1:05:6e:83:20:1e: e5:68:a7:e2:81:50:ed:98:3c:b2:aa:d7:bf:8b:9a:76:67:17: 3d:8d:83:fb:d0:90:5b:4f:35:97:e0:78:21:fd:98:0a:c5:72: 8d:4e:ff:4a:62:14:6a:17:f5:78:c2:b9:28:3b:50:81:41:bc: 4b:6c:0f:7e:68:08:ad:0d:a6:b0:df:c3:d9:3d:4b:ed:a8:35: 73:57:d4:57:a5:c8:13:65:36:f2:fc:55:ce:aa:78:12:b3:1c: f7:c0:bd:21:51:72:9a:0f:73:c2:48:f8:61:10:86:65:b4:ff: 45:7c:61:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUPn+/RqviIGBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NWQ2NjQ1NWUtNTlhYi00MGUxLWE5MWMtNDE0ZTUwYjdlZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGFOdnYkUNtMjXpF+LeUIMeAYcA67SSGBgAx H8jiSVgffmnpHIA73Y0jYQlQ7TFFHZGarK2YXA2Mr/veSj6PZbJYgX9h7fSC3VXG yzbLrIbCovhrdNG0DOoS+2xUtHdRCsLGzCwO01oxHT5adMelQfZeTkqhIGVbHvkt /XBy+EnhE8sL0RcZfv0EqKGWxrnRhtJ3zh/eR6SBqQglEUfZgM9QTi3LiS4gTutA OM+YjntzOy1OcPfPTrPSQ3QoOtlMn8FRCzXQEJgCurVvU3sgf+n0xZxIJRxEjcXT ghQ1Dfhd3SCtesoxpYU/Fi1LfkTSqjRa54aHpLtyBbpGc6UDRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgtEpfpHOh+hNIMI+XBvq5fa2gCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2FmY2VlZTktNjYyMy0z ZGJjLThiN2ItODdiMDNiMWJkNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQImAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUudABA+atgpCqqCkwE9mdQNOwDNVcCVm4odB61EMVdJvPUSXaAxWh1 5OPAbqLtOavAwT73GjpLmlECXLpg62nPeZS23NUbcmI7yBMoXzAzdIvTr6pJOim8 b2WtLUsYGIz8jJM+UN6P/OGAAcKEaVQziVYQK/bvXEMJGArsOjdPWLRbp6c9j5/x Y/EFboMgHuVop+KBUO2YPLKq17+LmnZnFz2Ng/vQkFtPNZfgeCH9mArFco1O/0pi FGoX9XjCuSg7UIFBvEtsD35oCK0NprDfw9k9S+2oNXNX1FelyBNlNvL8Vc6qeBKz HPfAvSFRcpoPc8JI+GEQhmW0/0V8YTg= -----END CERTIFICATE-----Generated at Wed May 13 08:18:09 2026 by rpki-client