$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa File: e05980ac-da96-32ce-98dc-c394a2925f26.roa (raw, json) Hash identifier: s+Kmslc0zSiP9kPIaWRzAIuDG99sr9qEsO1Y2hBH9GM= Subject key identifier: C3:F7:4D:0F:CE:EA:10:84:EC:80:41:B8:DE:3E:8F:7F:93:5D:36:6D Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D9E501488B1FDB0878477E8C6 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 21949 IP address blocks: 207.66.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:14:88:b1:fd:b0:87:84:77:e8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=467d868c-c9b7-4a9a-8005-657a8ef9cc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0d:fa:e8:f2:96:43:7f:36:b5:f9:74:9f:27: 71:16:31:a4:da:3c:cf:6d:b0:f5:55:ce:07:83:25: 3d:7f:c4:8d:48:13:15:0e:dd:9f:12:76:c5:28:4a: 51:ad:ae:04:68:4a:30:9e:c0:27:19:57:ed:8f:c7: 22:ab:7d:54:04:f3:26:6f:e6:5b:e4:2a:ce:cd:b6: 79:80:5e:3b:83:75:69:ae:3c:62:40:b9:ab:d8:63: c9:44:eb:77:85:c4:94:e2:a0:56:51:3c:44:ae:b9: 68:dd:7b:3c:80:6b:1d:9e:47:6d:fb:82:19:9a:e1: b2:57:a3:e3:9b:79:9a:ce:fe:0c:d7:5e:4d:8f:d0: ab:3a:06:ba:35:81:66:df:6c:10:71:c3:ec:c2:da: d1:aa:f9:99:14:ad:9f:ab:88:d5:91:78:4d:10:77: 1f:ea:ce:ac:86:3b:31:41:cd:f7:f0:d5:7f:34:9a: 2d:96:69:4a:86:f1:6b:d5:fc:ca:7a:dd:a8:6b:d4: 09:c8:df:01:63:01:90:55:86:fb:0b:9b:6d:17:11: 6d:d5:9c:f7:0d:32:54:85:3a:cb:59:2a:09:f4:3c: eb:85:7c:5d:3f:d2:fc:d3:d5:44:63:d6:24:18:e8: 58:3d:a9:25:2e:92:03:ce:70:58:bc:51:d8:34:9d: 91:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F7:4D:0F:CE:EA:10:84:EC:80:41:B8:DE:3E:8F:7F:93:5D:36:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 207.66.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:95:ca:01:21:6f:0f:c8:6d:72:74:2e:16:16:4e:7b:0a:0f: 59:49:40:78:c1:ea:0f:9d:c3:ea:c0:db:b0:e4:0e:b4:79:46: ea:b3:8b:44:f7:6e:c2:3c:3b:a0:29:49:4e:82:93:06:ef:c4: b0:93:6f:b3:dd:55:10:b7:71:66:81:11:64:79:b5:4a:73:58: f9:07:0c:13:29:3c:2c:14:e5:08:08:95:c2:ca:5c:fc:ff:11: 38:18:5e:9b:8a:94:c4:77:f0:bd:56:bf:e2:f9:a6:57:e2:9d: 8c:fd:b9:16:90:a5:47:9c:e1:0f:41:8d:f5:f8:ae:99:3d:f0: fd:a6:2c:a1:2b:0f:64:c0:e4:ae:5c:21:7e:da:b5:69:83:0a: 59:e0:bc:2a:9e:21:54:8a:63:c2:5d:54:b2:65:74:5a:4b:fa: 12:75:f9:3c:79:a7:9b:da:db:a5:cf:d6:75:f9:dc:fd:e0:5c: ac:fb:53:b3:db:c2:d0:a3:2c:61:a1:84:4b:b0:97:f3:70:08: f1:48:c2:43:46:aa:c3:31:db:10:3c:19:e0:f2:ae:74:68:50: c9:75:2b:57:41:c3:be:c1:03:c5:c2:59:b4:6a:0c:8d:12:60: 2e:49:46:10:31:c9:a6:32:4f:99:58:da:47:bc:b5:69:72:b2: 52:51:12:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBSIsf2wh4R36MYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NDY3ZDg2OGMtYzliNy00YTlhLTgwMDUtNjU3YThlZjljYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw366PKWQ382tfl0nydxFjGk2jzPbbD1Vc4H gyU9f8SNSBMVDt2fEnbFKEpRra4EaEownsAnGVftj8ciq31UBPMmb+Zb5CrOzbZ5 gF47g3VprjxiQLmr2GPJROt3hcSU4qBWUTxErrlo3Xs8gGsdnkdt+4IZmuGyV6Pj m3mazv4M115Nj9CrOga6NYFm32wQccPswtrRqvmZFK2fq4jVkXhNEHcf6s6shjsx Qc338NV/NJotlmlKhvFr1fzKet2oa9QJyN8BYwGQVYb7C5ttFxFt1Zz3DTJUhTrL WSoJ9DzrhXxdP9L809VEY9YkGOhYPaklLpIDznBYvFHYNJ2RZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMP3TQ/O6hCE7IBBuN4+j3+TXTZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZTA1OTgwYWMtZGE5Ni0z MmNlLTk4ZGMtYzM5NGEyOTI1ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz0J4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOVygEhbw/IbXJ0LhYWTnsKD1lJQHjB6g+dw+rA27DkDrR5Ruqzi0T3 bsI8O6ApSU6CkwbvxLCTb7PdVRC3cWaBEWR5tUpzWPkHDBMpPCwU5QgIlcLKXPz/ ETgYXpuKlMR38L1Wv+L5plfinYz9uRaQpUec4Q9BjfX4rpk98P2mLKErD2TA5K5c IX7atWmDClngvCqeIVSKY8JdVLJldFpL+hJ1+Tx5p5va26XP1nX53P3gXKz7U7Pb wtCjLGGhhEuwl/NwCPFIwkNGqsMx2xA8GeDyrnRoUMl1K1dBw77BA8XCWbRqDI0S YC5JRhAxyaYyT5lY2ke8tWlyslJREsU= -----END CERTIFICATE-----Generated at Wed May 13 12:56:01 2026 by rpki-client