$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa File: f920443e-ab0e-3df1-beae-30701559a976.roa (raw, json) Hash identifier: iRQJq/aKav113VufDLIL96ruobH/i0bMTot6KKzj6Lo= Subject key identifier: 08:96:93:19:53:75:AC:43:63:BC:4A:BE:D6:8F:76:79:11:50:C2:A3 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D9E501436E2CF977950091D00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 21949 IP address blocks: 198.98.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:14:36:e2:cf:97:79:50:09:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=b9e060dc-9891-48e6-962f-ecc82ed64958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:b9:47:d6:c1:32:f5:54:26:2e:53:a6:db: d8:0f:40:e3:15:73:ce:b9:44:bd:4a:46:13:2a:77: e6:16:a7:6f:cb:f1:d4:53:39:60:68:5f:24:40:af: b5:6c:32:86:14:92:06:a2:af:43:9c:c8:87:62:d5: 7e:43:af:f5:70:fd:c2:27:74:ea:0d:76:1b:87:9c: 30:c7:04:0c:97:e7:6a:4a:f2:24:ba:44:5b:dd:68: da:0a:31:cc:8f:d7:d8:3a:49:92:25:24:02:50:63: 61:97:a8:65:b6:8b:a1:ad:2f:ca:a4:ca:93:0c:aa: 7a:8d:03:0b:eb:ac:dc:bd:68:6c:60:5e:0f:fe:ea: c4:66:84:98:47:55:05:c9:4f:a9:fb:39:c6:84:db: 0c:ef:02:d4:50:20:be:69:ac:f7:39:17:2a:da:d1: 1a:19:ef:20:ea:53:e4:9e:00:d6:82:6e:d5:b9:3a: b0:82:57:83:9a:c0:5e:0d:14:04:25:49:58:bc:61: de:e2:4c:fd:6b:51:41:d5:bd:76:c4:1d:d9:47:4c: c4:ac:e1:e9:5d:79:ad:6c:15:63:b6:ce:2c:a8:0d: 33:55:ad:75:e7:1b:d2:e0:fd:46:cc:ce:85:ba:54: f0:6d:07:bf:fe:a9:a0:7c:af:4f:62:a5:a8:49:51: 14:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:96:93:19:53:75:AC:43:63:BC:4A:BE:D6:8F:76:79:11:50:C2:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 198.98.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:96:dd:c4:05:29:fe:21:c7:be:f8:37:c8:0d:47:c4:45:67: 3a:9c:8f:64:7a:88:3b:f8:df:db:d2:28:a6:93:a0:9d:21:bd: cd:ab:e3:0f:00:33:cb:95:f3:4e:c8:b6:d8:14:11:ba:c0:c1: 49:c6:be:a6:a0:bd:bd:ba:38:4d:60:a6:3c:13:bc:22:a8:61: 73:62:3e:0d:af:09:12:b5:f3:a6:2d:53:ba:ea:65:e5:46:84: d7:ea:d7:97:1e:ba:4b:58:93:a3:34:fb:ec:41:87:59:1a:7c: c2:c4:84:10:48:6b:84:ee:9d:5b:d4:32:79:23:8e:19:00:a2: 68:7a:6c:ee:d6:ea:87:20:6c:b7:68:85:af:57:17:6d:43:ff: ad:52:48:ad:55:d5:c4:d0:ef:20:08:92:4f:ec:0b:5c:54:03: fd:64:c4:7d:b4:07:0c:df:f3:25:de:8b:19:4f:c1:c2:81:46: 23:52:c3:ac:2b:35:c9:99:5a:32:a0:82:f9:5c:4c:a3:3c:5b: b4:4b:11:50:d6:52:85:75:8a:44:bb:d7:a2:0f:a3:c4:d7:bf: b2:7a:e9:52:00:a4:e5:79:68:07:b8:5b:8c:ef:c2:b5:c6:a9: b4:66:2a:ea:63:bc:ae:e9:1a:ce:cd:81:36:e5:d9:84:b1:b0: b8:3d:72:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBQ24s+XeVAJHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YjllMDYwZGMtOTg5MS00OGU2LTk2MmYtZWNjODJlZDY0OTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEe5R9bBMvVUJi5TptvYD0DjFXPOuUS9SkYT KnfmFqdvy/HUUzlgaF8kQK+1bDKGFJIGoq9DnMiHYtV+Q6/1cP3CJ3TqDXYbh5ww xwQMl+dqSvIkukRb3WjaCjHMj9fYOkmSJSQCUGNhl6hltouhrS/KpMqTDKp6jQML 66zcvWhsYF4P/urEZoSYR1UFyU+p+znGhNsM7wLUUCC+aaz3ORcq2tEaGe8g6lPk ngDWgm7VuTqwgleDmsBeDRQEJUlYvGHe4kz9a1FB1b12xB3ZR0zErOHpXXmtbBVj ts4sqA0zVa115xvS4P1GzM6FulTwbQe//qmgfK9PYqWoSVEUdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiWkxlTdaxDY7xKvtaPdnkRUMKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjkyMDQ0M2UtYWIwZS0z ZGYxLWJlYWUtMzA3MDE1NTlhOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxmJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2W3cQFKf4hx774N8gNR8RFZzqcj2R6iDv439vSKKaToJ0hvc2r4w8A M8uV807IttgUEbrAwUnGvqagvb26OE1gpjwTvCKoYXNiPg2vCRK186YtU7rqZeVG hNfq15ceuktYk6M0++xBh1kafMLEhBBIa4TunVvUMnkjjhkAomh6bO7W6ocgbLdo ha9XF21D/61SSK1V1cTQ7yAIkk/sC1xUA/1kxH20Bwzf8yXeixlPwcKBRiNSw6wr NcmZWjKggvlcTKM8W7RLEVDWUoV1ikS716IPo8TXv7J66VIApOV5aAe4W4zvwrXG qbRmKupjvK7pGs7NgTbl2YSxsLg9cro= -----END CERTIFICATE-----Generated at Wed May 13 11:37:10 2026 by rpki-client