$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa File: de012c4e-185d-3ce9-b093-964f60565a71.roa (raw, json) Hash identifier: NHsqu9nn6XoiHRkeP9EufaQlXuhTlrcRX6XVovEhFq8= Subject key identifier: C4:88:1F:ED:23:34:26:89:A2:54:81:01:5F:CE:4E:83:38:D8:03:02 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D9E5014A3D2D107A328DBE700 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 21949 IP address blocks: 72.15.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:14:a3:d2:d1:07:a3:28:db:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=e3d14cf8-008d-485b-8932-0283c6ff4bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:21:ce:f1:cf:8b:8d:66:67:2e:1d:08:66: 98:59:71:4e:d9:af:bc:32:b3:db:ec:92:9a:9b:e7: f4:19:bf:cc:a3:79:e9:ff:d1:ce:80:b3:0a:9a:0d: 8a:9a:8d:b6:e7:b0:79:1a:41:40:73:46:73:c5:15: b9:3c:a8:d7:e9:04:b6:3d:9c:15:b8:42:66:bb:b8: 8b:32:88:bd:7d:bd:89:56:a7:55:e0:50:cf:8e:99: bf:9d:42:0c:97:cf:01:18:69:0a:a5:12:d4:73:64: 46:a0:74:b4:25:74:4a:36:c9:65:aa:ea:e2:4c:b5: 45:cd:1f:3d:17:dc:b0:3a:2b:0d:d5:1d:0b:39:58: b5:30:54:bc:59:86:3b:cf:fb:e5:eb:bd:d5:19:70: 7a:a4:c5:2a:1f:dd:42:76:44:f6:89:85:96:d8:d6: ff:72:ec:fb:ed:4e:36:61:c7:66:4d:39:7d:a8:d6: c0:9c:d7:3d:bb:20:fa:cf:6d:be:f2:03:c2:cb:78: 37:bc:71:48:32:41:37:12:29:7e:d7:2e:df:73:07: 96:68:02:d4:35:60:28:f2:bc:50:39:21:dd:25:d1: c4:5e:fa:99:96:46:8f:03:8d:f1:00:39:79:d0:b1: 31:1a:87:9c:3b:5f:b7:66:33:fb:ea:70:44:97:a1: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:88:1F:ED:23:34:26:89:A2:54:81:01:5F:CE:4E:83:38:D8:03:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 72.15.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6d:4e:79:64:04:cf:5f:88:65:1f:13:02:d2:b2:33:c2:e1: d0:e4:82:7b:e1:c3:ac:31:e3:62:64:70:fe:24:92:5f:95:4d: 6b:87:74:00:ff:8e:97:3f:a6:3d:51:89:d4:cf:ea:a0:f5:9b: 70:79:8c:47:12:39:65:61:c0:d9:52:cc:10:73:f5:37:97:69: 37:6b:c5:15:28:2c:10:65:6c:2c:94:c3:06:1f:3b:53:4b:25: 5c:bb:f1:0d:f4:6f:d4:cb:2b:ee:b7:44:53:f5:9d:79:ea:82: a4:cd:35:d9:5a:af:6b:1b:a0:a7:82:12:eb:73:af:60:1e:24: 3d:7c:ad:c5:65:b4:50:9f:32:2e:e4:a1:9e:9c:5b:c5:c0:57: d8:e4:84:33:23:89:86:9a:b4:95:45:da:b3:e5:14:1d:73:05: 69:9b:7c:db:3c:cd:bb:b0:52:9a:e3:b5:6b:70:ef:9d:3d:6f: 98:01:41:0c:05:d4:7c:f0:c2:df:9c:4a:91:f3:98:4c:77:a3: 08:c9:ea:30:96:a7:c9:6e:4e:f8:56:41:ab:78:bb:3b:6b:2c: fc:88:6e:4e:f3:9d:e4:1c:e0:3f:fc:64:2d:6f:08:51:48:04: 82:9d:06:0a:6d:e6:c7:c6:4f:a8:b3:bd:c2:0d:42:3b:30:08: f8:4a:4d:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBSj0tEHoyjb5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZTNkMTRjZjgtMDA4ZC00ODViLTg5MzItMDI4M2M2ZmY0YmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH0hzvHPi41mZy4dCGaYWXFO2a+8MrPb7JKa m+f0Gb/Mo3np/9HOgLMKmg2Kmo2257B5GkFAc0ZzxRW5PKjX6QS2PZwVuEJmu7iL Moi9fb2JVqdV4FDPjpm/nUIMl88BGGkKpRLUc2RGoHS0JXRKNsllquriTLVFzR89 F9ywOisN1R0LOVi1MFS8WYY7z/vl673VGXB6pMUqH91CdkT2iYWW2Nb/cuz77U42 YcdmTTl9qNbAnNc9uyD6z22+8gPCy3g3vHFIMkE3Eil+1y7fcweWaALUNWAo8rxQ OSHdJdHEXvqZlkaPA43xADl50LExGoecO1+3ZjP76nBEl6HpFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSIH+0jNCaJolSBAV/OToM42AMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZGUwMTJjNGUtMTg1ZC0z Y2U5LWIwOTMtOTY0ZjYwNTY1YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESA8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5tTnlkBM9fiGUfEwLSsjPC4dDkgnvhw6wx42JkcP4kkl+VTWuHdAD/ jpc/pj1RidTP6qD1m3B5jEcSOWVhwNlSzBBz9TeXaTdrxRUoLBBlbCyUwwYfO1NL JVy78Q30b9TLK+63RFP1nXnqgqTNNdlar2sboKeCEutzr2AeJD18rcVltFCfMi7k oZ6cW8XAV9jkhDMjiYaatJVF2rPlFB1zBWmbfNs8zbuwUprjtWtw7509b5gBQQwF 1Hzwwt+cSpHzmEx3owjJ6jCWp8luTvhWQat4uztrLPyIbk7zneQc4D/8ZC1vCFFI BIKdBgpt5sfGT6izvcINQjswCPhKTbI= -----END CERTIFICATE-----Generated at Wed May 13 08:01:48 2026 by rpki-client