$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa File: 1c8cfd90-1e45-3ca8-865a-284e8261e043.roa (raw, json) Hash identifier: 1pgbCd5Od9FGaLu0Ke9IvEh1IJd8uNS3nORPDlsXGZ4= Subject key identifier: F6:01:E6:6F:E2:38:A5:3B:06:40:E9:8F:40:6E:5C:C4:21:A8:17:9C Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584E7E94F0F6F2C5977C9A493E80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 21949 IP address blocks: 199.68.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f0:f6:f2:c5:97:7c:9a:49:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=0e2e06db-368f-466f-aa24-d9dfa3cd2e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5b:1f:9b:24:b6:db:50:79:12:20:ae:1e:7e: 8e:17:32:cf:9b:0e:5c:84:1c:96:85:19:e4:78:4a: 5c:63:f2:2e:d7:14:7c:da:ea:cd:e5:bc:a5:db:d2: ea:78:fa:09:04:13:0f:9d:82:91:93:2c:9f:47:a4: c9:9d:60:c1:d3:c1:f1:15:db:f4:aa:f9:d8:22:78: 48:0d:e6:c7:09:7c:47:95:4b:23:6f:da:a9:2b:b0: 5b:40:37:c4:bc:45:7f:0e:41:26:f9:bd:cb:05:ee: f8:bd:86:b7:58:eb:87:04:0f:ff:ed:57:98:4e:52: e7:3d:55:85:fe:ca:b9:30:b8:af:9a:43:61:f9:20: 49:9c:ba:32:f6:9f:8a:49:97:b4:3f:b6:e2:9f:1a: 7f:b5:8e:75:1e:da:a3:b8:d9:73:df:e0:1c:70:be: 85:d2:26:05:b0:49:28:f9:6f:ab:8c:11:cc:41:02: 6d:4a:4a:2f:f3:c5:ea:21:7c:8f:79:98:39:89:19: a3:eb:c3:42:f9:4e:57:a3:83:5f:da:57:5c:08:a8: 4c:84:ad:bb:d7:48:99:9f:aa:bf:8b:8c:40:7f:98: 58:f7:b9:3d:2e:27:e6:58:e1:1a:15:0b:af:1b:35: 3a:33:ef:de:e1:a3:a0:a2:7b:39:77:55:c2:a0:68: 3e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:01:E6:6F:E2:38:A5:3B:06:40:E9:8F:40:6E:5C:C4:21:A8:17:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.68.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:81:5a:f0:31:51:5a:e7:16:9b:fa:7a:b3:63:1f:d3:64:76: 31:61:dc:26:1f:b4:65:2c:2a:99:f4:d2:51:cf:83:6a:6d:e5: 14:e1:51:b5:b1:4b:ed:b7:be:bc:ac:14:36:10:58:b2:18:27: ab:42:0e:09:78:9a:09:38:7c:62:0b:27:3d:b6:e5:ca:71:c0: af:07:fc:b5:78:0e:cc:12:d6:89:33:d1:0c:be:1c:bb:12:21: 0f:c0:ae:a7:ca:7a:10:d6:a4:aa:72:8f:9e:e0:72:2c:42:97: 83:aa:d0:72:9a:6c:b3:81:18:f5:1b:be:7c:aa:85:ac:5f:57: 71:b6:5d:cb:b9:a7:77:d1:89:15:c3:b7:28:86:62:2a:e2:b1: 15:b0:e6:a4:40:76:9f:68:8c:11:2f:fa:bd:dc:d1:b6:85:19: 63:d7:40:83:17:d1:c7:c0:7e:af:0d:3c:be:b1:1a:db:e6:0b: 1b:fa:06:5d:10:95:13:f0:e0:ae:75:7e:34:cb:76:30:84:fe: 37:af:85:29:9c:4d:ea:c0:f3:22:b6:02:01:f1:65:06:6e:3b: b7:24:04:3f:e8:48:0c:86:3d:11:98:f2:a1:cf:0e:0f:63:4c: 4b:9a:f0:50:8d:71:5e:e4:2f:35:57:b9:ab:05:15:94:b9:fd: ad:22:1a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPD28sWXfJpJPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MGUyZTA2ZGItMzY4Zi00NjZmLWFhMjQtZDlkZmEzY2QyZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFsfmyS221B5EiCuHn6OFzLPmw5chByWhRnk eEpcY/Iu1xR82urN5byl29LqePoJBBMPnYKRkyyfR6TJnWDB08HxFdv0qvnYInhI DebHCXxHlUsjb9qpK7BbQDfEvEV/DkEm+b3LBe74vYa3WOuHBA//7VeYTlLnPVWF /sq5MLivmkNh+SBJnLoy9p+KSZe0P7binxp/tY51HtqjuNlz3+AccL6F0iYFsEko +W+rjBHMQQJtSkov88XqIXyPeZg5iRmj68NC+U5Xo4Nf2ldcCKhMhK2710iZn6q/ i4xAf5hY97k9LifmWOEaFQuvGzU6M+/e4aOgons5d1XCoGg+cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYB5m/iOKU7BkDpj0BuXMQhqBecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMWM4Y2ZkOTAtMWU0NS0z Y2E4LTg2NWEtMjg0ZTgyNjFlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiBWvAxUVrnFpv6erNjH9NkdjFh3CYftGUsKpn00lHPg2pt5RThUbWx S+23vrysFDYQWLIYJ6tCDgl4mgk4fGILJz225cpxwK8H/LV4DswS1okz0Qy+HLsS IQ/ArqfKehDWpKpyj57gcixCl4Oq0HKabLOBGPUbvnyqhaxfV3G2Xcu5p3fRiRXD tyiGYirisRWw5qRAdp9ojBEv+r3c0baFGWPXQIMX0cfAfq8NPL6xGtvmCxv6Bl0Q lRPw4K51fjTLdjCE/jevhSmcTerA8yK2AgHxZQZuO7ckBD/oSAyGPRGY8qHPDg9j TEua8FCNcV7kLzVXuasFFZS5/a0iGjc= -----END CERTIFICATE-----Generated at Tue Jul 21 13:01:29 2026 by rpki-client