$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa File: ce7c6a93-090d-3601-ac47-5724324b5304.roa (raw, json) Hash identifier: pL2/jn2bjF3xmGuCsKyJ65yUxxkJn9P12TpMVv+9JXM= Subject key identifier: 12:1A:F4:0A:8D:1E:A0:5B:F4:06:0E:8B:C3:15:41:98:70:2D:DE:6B Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D9FB567C1F8D121B7A8543880 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 21949 IP address blocks: 74.213.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:67:c1:f8:d1:21:b7:a8:54:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=20eddb8e-6382-47be-946c-4f050359e38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c2:98:82:76:c0:43:37:37:39:58:ef:5a:b4: e3:81:79:72:90:1c:52:1c:37:21:bf:ad:e7:a5:ee: 19:40:cc:ef:cf:55:71:69:a9:26:84:3f:f4:aa:24: a5:5f:a2:dd:da:47:69:f3:be:f5:3b:ee:40:08:93: 2b:64:af:c9:64:34:c1:ca:55:75:13:11:78:f9:c1: 8a:18:87:4b:eb:fd:fd:b9:e5:a0:2c:21:af:36:0d: aa:fd:f9:33:37:fa:cd:57:e7:e7:3a:7a:d2:f5:7c: b2:ec:73:90:2b:e7:a4:5e:8c:0d:63:8b:be:96:84: d3:96:5a:78:bc:c4:c9:88:d5:54:37:86:8b:5a:16: 45:2b:cb:d3:c7:3f:92:5f:93:41:56:b1:9e:4d:db: 80:71:ee:98:bb:6f:68:5a:75:89:a4:bd:09:f5:69: 69:ab:ea:6d:86:8c:32:3b:f5:52:fc:c4:0f:e0:3d: f6:87:9b:2d:03:44:bf:c0:c0:53:b2:d6:17:71:75: d9:fc:ea:19:f9:ea:b5:2c:af:9d:6a:4c:13:8d:8c: 22:0c:cd:99:9d:9d:60:85:e4:dd:5f:35:ae:1f:94: 36:52:e6:3c:6e:d2:f3:05:33:40:5b:e4:af:6d:8c: ff:97:37:f2:a4:16:ac:04:92:7d:7a:6b:60:2a:76: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1A:F4:0A:8D:1E:A0:5B:F4:06:0E:8B:C3:15:41:98:70:2D:DE:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 74.213.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:76:05:13:5e:fc:8f:fc:fd:fe:52:da:43:fa:df:ec:c7:75: a4:27:3c:52:ca:4d:fd:b1:c5:63:85:87:9e:15:4b:60:51:55: 80:a1:de:58:f7:d0:9e:90:ae:70:ad:cd:c3:c5:3e:5e:18:ee: 60:d3:db:5b:35:a0:ec:63:1e:d6:74:cc:b4:65:92:99:ce:62: 8b:cb:05:57:b2:25:01:21:0b:ae:31:c9:40:1c:2a:f6:32:eb: 88:c2:ca:a0:a7:1f:92:c9:28:e6:9f:e1:2d:bd:2b:fc:46:f2: 33:b6:74:81:8f:72:b6:f5:85:91:46:f6:1c:11:b1:68:f8:4f: f7:e3:e2:72:56:0e:06:be:f9:84:51:47:a2:fe:32:88:e8:3a: 0f:06:0e:aa:1e:d6:20:1e:a2:2a:b4:86:85:c1:be:73:56:eb: 3a:09:2f:35:f8:06:39:d3:fe:a0:3d:b8:47:18:41:49:d9:6e: d2:5c:8d:22:62:72:2b:c2:59:7f:d7:c6:50:fc:96:12:aa:b6: 21:19:d7:ac:8a:65:c9:1d:07:38:a3:c0:c0:09:7c:01:20:08: 8d:38:3f:35:3e:ef:ce:af:7a:5b:6c:f5:c9:a3:55:da:75:19: 41:0d:47:a3:86:2a:e2:87:60:50:73:c9:a6:3c:ee:37:92:29: 1f:e8:18:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftWfB+NEht6hUOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk MjBlZGRiOGUtNjM4Mi00N2JlLTk0NmMtNGYwNTAzNTllMzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisKYgnbAQzc3OVjvWrTjgXlykBxSHDchv63n pe4ZQMzvz1VxaakmhD/0qiSlX6Ld2kdp8771O+5ACJMrZK/JZDTBylV1ExF4+cGK GIdL6/39ueWgLCGvNg2q/fkzN/rNV+fnOnrS9Xyy7HOQK+ekXowNY4u+loTTllp4 vMTJiNVUN4aLWhZFK8vTxz+SX5NBVrGeTduAce6Yu29oWnWJpL0J9Wlpq+pthowy O/VS/MQP4D32h5stA0S/wMBTstYXcXXZ/OoZ+eq1LK+dakwTjYwiDM2ZnZ1gheTd XzWuH5Q2UuY8btLzBTNAW+SvbYz/lzfypBasBJJ9emtgKnZPzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIa9AqNHqBb9AYOi8MVQZhwLd5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2U3YzZhOTMtMDkwZC0z NjAxLWFjNDctNTcyNDMyNGI1MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCStWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD52BRNe/I/8/f5S2kP63+zHdaQnPFLKTf2xxWOFh54VS2BRVYCh3lj3 0J6QrnCtzcPFPl4Y7mDT21s1oOxjHtZ0zLRlkpnOYovLBVeyJQEhC64xyUAcKvYy 64jCyqCnH5LJKOaf4S29K/xG8jO2dIGPcrb1hZFG9hwRsWj4T/fj4nJWDga++YRR R6L+MojoOg8GDqoe1iAeoiq0hoXBvnNW6zoJLzX4BjnT/qA9uEcYQUnZbtJcjSJi civCWX/XxlD8lhKqtiEZ16yKZckdBzijwMAJfAEgCI04PzU+786velts9cmjVdp1 GUENR6OGKuKHYFBzyaY87jeSKR/oGNg= -----END CERTIFICATE-----Generated at Wed May 13 14:42:33 2026 by rpki-client