$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/fa929d22-5b04-3656-bfd5-92174907d027.roa File: fa929d22-5b04-3656-bfd5-92174907d027.roa (raw, json) Hash identifier: DHdxj/4XVGSJEDXEmYrmciTjElqc/eeYbhgMJIa7qwI= Subject key identifier: 72:8D:E4:07:10:1E:A3:EE:FA:24:CA:C0:4B:F9:3D:27:1F:C6:2E:1C Certificate issuer: /CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Certificate serial: 010D0C9F4328584DADAAED476D941D25F0B31880 Authority key identifier: 35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/fa929d22-5b04-3656-bfd5-92174907d027.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 7441 IP address blocks: 207.189.128.0/21 maxlen: 24 207.189.136.0/22 maxlen: 24 207.189.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:ed:47:6d:94:1d:25:f0:b3:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=f0b1f9d9-e140-42d1-946c-5adac7f56648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:9f:cb:86:6c:4c:79:9b:ee:93:b3:ff:56: d2:3c:57:70:56:9f:ec:9c:68:ae:70:61:38:ae:20: 3d:03:de:bc:75:13:78:8c:16:32:bd:8c:61:da:f1: 09:e5:f7:6b:84:66:50:a1:21:6d:bd:47:e4:e8:9c: d5:59:75:2a:6c:a5:b9:7d:8a:cd:99:50:39:90:1d: a7:e6:24:57:7b:12:d1:37:4b:53:fc:06:ac:d3:64: 56:6e:26:ba:f9:44:9a:4f:11:67:61:ea:af:aa:a4: c3:80:4d:a2:69:87:23:bb:b1:95:7b:48:f4:f0:ec: c0:c8:af:d4:06:d4:9d:0e:fd:7f:0f:4e:1f:7c:d9: 9a:4f:49:f1:be:ee:cf:b5:31:1f:40:d8:7c:64:3e: 5f:46:f1:a8:82:f0:4d:82:e9:d3:85:f6:ec:3f:68: d2:25:a0:bb:b9:c5:20:3b:db:38:3f:1a:06:1b:4f: a1:21:2a:ee:e5:84:60:2a:61:23:20:29:e2:06:ea: 27:df:e6:02:91:9d:10:71:9e:4e:45:8b:3c:58:1a: f8:95:83:95:02:c1:47:32:2c:80:4c:56:3b:25:35: 01:a0:1b:81:82:2d:66:87:bb:c0:65:03:8a:85:b1: a0:c2:9c:25:c1:ad:ea:2c:dd:e1:50:d5:2d:de:92: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8D:E4:07:10:1E:A3:EE:FA:24:CA:C0:4B:F9:3D:27:1F:C6:2E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/fa929d22-5b04-3656-bfd5-92174907d027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl X509v3 Authority Key Identifier: keyid:35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer sbgp-ipAddrBlock: critical IPv4: 207.189.128.0-207.189.141.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a6:cf:12:7e:97:f9:c3:6a:f1:db:f0:85:8b:12:e5:4a:64: 88:bf:67:15:20:8b:23:8e:84:fb:2c:0a:d2:c5:e7:30:eb:24: 3f:8d:8d:ab:3d:84:ab:be:e8:6d:9c:2a:39:fb:ad:be:01:b5: fe:a3:be:d5:da:17:3e:a3:f6:5c:39:14:d9:dd:6a:90:3f:5c: 9e:04:5f:70:9c:0b:85:05:a4:df:48:fb:99:f9:cf:0c:9f:6b: a2:df:3a:c1:31:02:84:4a:fc:37:c2:0d:1d:3c:7b:05:a1:c1: 69:86:7b:29:82:44:0d:29:ef:f6:89:8a:f1:f2:4a:d3:de:43: a0:47:9a:d3:ee:ec:fd:e1:9a:45:b6:6d:23:cc:47:13:8e:97: 84:6f:e9:fa:19:2d:80:4d:d4:02:0a:51:63:a3:3b:1d:76:86: 82:7b:f7:09:b0:10:25:cf:e9:53:57:35:94:cd:18:76:a9:6e: 3f:52:04:b5:6d:73:39:d5:fc:a1:67:bf:92:bd:92:3b:21:dd: 2c:46:22:5c:cb:37:96:0e:51:be:d3:cd:4a:9a:19:6b:a6:30: 70:b0:5f:ca:e1:87:e4:aa:4b:b9:8a:45:af:7e:57:99:ea:24: 3a:f6:7b:7e:8f:63:2f:d1:af:8b:de:f0:79:64:b0:c5:24:28: 01:fc:c6:38 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE2tqu1HbZQdJfCzGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5ZjdhMmMtMDQzOC00ZDIwLThmMGItMDk1YTM4ZDEw NDZmMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk ZjBiMWY5ZDktZTE0MC00MmQxLTk0NmMtNWFkYWM3ZjU2NjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbOfy4ZsTHmb7pOz/1bSPFdwVp/snGiucGE4 riA9A968dRN4jBYyvYxh2vEJ5fdrhGZQoSFtvUfk6JzVWXUqbKW5fYrNmVA5kB2n 5iRXexLRN0tT/Aas02RWbia6+USaTxFnYeqvqqTDgE2iaYcju7GVe0j08OzAyK/U BtSdDv1/D04ffNmaT0nxvu7PtTEfQNh8ZD5fRvGogvBNgunThfbsP2jSJaC7ucUg O9s4PxoGG0+hISru5YRgKmEjICniBuon3+YCkZ0QcZ5ORYs8WBr4lYOVAsFHMiyA TFY7JTUBoBuBgi1mh7vAZQOKhbGgwpwlwa3qLN3hUNUt3pIb1wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHKN5AcQHqPu+iTKwEv5PScfxi4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlm N2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVhMzhkMTA0NmYvZmE5MjlkMjItNWIwNC0z NjU2LWJmZDUtOTIxNzQ5MDdkMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjQ5ZjdhMmMtMDQzOC00ZDIwLThm MGItMDk1YTM4ZDEwNDZmLzI0OWY3YTJjLTA0MzgtNGQyMC04ZjBiLTA5NWEzOGQx MDQ2Zi5jcmwwHwYDVR0jBBgwFoAUNY2F6KzHAj/AIloDXSktnY57TSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlmN2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVh MzhkMTA0NmYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAfPvYAD BAHPvYwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAWqbPEn6X+cNq8dvwhYsS5UpkiL9nFSCLI46E+ywK0sXn MOskP42Nqz2Eq77obZwqOfutvgG1/qO+1doXPqP2XDkU2d1qkD9cngRfcJwLhQWk 30j7mfnPDJ9rot86wTEChEr8N8INHTx7BaHBaYZ7KYJEDSnv9omK8fJK095DoEea 0+7s/eGaRbZtI8xHE46XhG/p+hktgE3UAgpRY6M7HXaGgnv3CbAQJc/pU1c1lM0Y dqluP1IEtW1zOdX8oWe/kr2SOyHdLEYiXMs3lg5RvtPNSpoZa6YwcLBfyuGH5KpL uYpFr35XmeokOvZ7fo9jL9Gvi97weWSwxSQoAfzGOA== -----END CERTIFICATE-----Generated at Wed May 13 05:17:27 2026 by rpki-client