$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa File: 1d5b64a0-14ba-398c-be22-b579612157ce.roa (raw, json) Hash identifier: BieRrd/Tysddk+US4i6M7JgoODxTA2M3yJMhQZpqGTQ= Subject key identifier: F5:0D:D2:F3:7E:06:AC:29:DE:D0:34:2F:8D:F8:7F:D1:38:F2:F5:3A Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584E7E94F0EB06ECC177454C6B60 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 21949 IP address blocks: 199.167.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f0:eb:06:ec:c1:77:45:4c:6b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=a1fcf912-3a2f-41d4-863e-46009490f7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:72:68:5c:ec:97:7e:55:75:6d:90:95:65:42: 60:7b:e5:f0:fe:b7:f9:2b:de:12:83:7a:0e:0d:82: 05:c7:a4:15:6b:0a:a4:30:68:56:11:ca:6a:7d:c9: 2b:03:67:70:b0:94:59:b4:67:8d:72:f9:23:33:96: ac:8a:fb:1b:20:26:b4:50:74:fa:ac:99:be:12:a7: 4f:28:1e:d5:9f:5c:ca:81:f1:11:4f:8e:48:50:f7: fe:ec:a1:6f:1f:ba:e2:4f:48:0b:c0:f6:23:ca:5c: 58:fb:99:42:87:33:b0:15:44:58:d6:65:cd:1e:9f: 49:02:b1:19:10:a3:26:b1:50:8f:60:5e:c3:45:63: 75:17:3a:a1:91:e5:60:b8:7b:c7:53:1a:c8:83:1a: 79:d3:23:4e:3b:3e:91:ca:28:e4:20:4b:3a:9e:0e: 8a:e3:bb:5f:2c:17:6a:f3:6b:52:eb:70:5f:3c:ab: 2b:3b:fb:73:2d:65:7e:25:49:a8:1a:38:f3:a1:5f: bc:67:e8:ba:a5:fb:df:f2:13:4b:5e:dd:0e:ad:0a: d1:51:5d:9d:de:a3:33:0f:92:3c:3a:8e:b2:28:86: a6:a9:c5:26:e4:4b:ff:6a:cb:88:12:ee:a6:89:50: 1c:7f:52:0f:0e:6b:c9:8f:f9:cf:62:42:ae:28:fe: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0D:D2:F3:7E:06:AC:29:DE:D0:34:2F:8D:F8:7F:D1:38:F2:F5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.167.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:07:98:e7:a4:ab:7b:df:75:aa:a4:8f:47:b8:9c:60:51:6c: e7:6f:cf:cd:53:48:25:47:b3:a0:24:d8:33:10:8a:b5:67:1f: 7b:2a:f9:34:f9:dc:af:5d:78:a4:85:51:7d:81:d9:b2:a4:d2: 11:cb:d5:6a:e0:14:08:c3:6e:b7:20:a6:8e:33:89:e5:22:95: da:07:61:2c:f2:8a:b3:ad:d8:8f:10:56:1b:4c:97:d1:6e:e0: d6:83:75:d5:d2:b0:64:26:4c:f9:4c:e7:c7:36:97:9c:a6:5e: e2:16:98:0e:55:fd:80:97:a2:f9:dd:39:cb:9f:d2:bc:b3:86: d6:50:49:69:d0:71:66:ab:fa:57:00:4f:46:20:a7:ef:bb:e2: 44:23:e9:ec:85:98:a4:40:55:db:14:af:47:08:49:f8:6a:3d: a3:d3:90:74:19:52:f4:f2:b4:b3:c5:02:1a:19:2f:51:31:b2: 5d:dc:66:97:84:35:49:54:c0:34:db:d2:46:89:eb:9e:2d:73: 26:60:5f:00:76:20:59:68:b5:60:a5:41:42:46:8e:d5:09:e2: b3:70:3c:d7:46:44:bb:48:6b:42:58:5b:5a:2a:8e:fd:18:e6: 54:cf:3a:79:f6:1b:e3:2c:6e:75:4b:76:27:7e:de:4a:84:66: 78:2c:26:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPDrBuzBd0VMa2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YTFmY2Y5MTItM2EyZi00MWQ0LTg2M2UtNDYwMDk0OTBmN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXJoXOyXflV1bZCVZUJge+Xw/rf5K94Sg3oO DYIFx6QVawqkMGhWEcpqfckrA2dwsJRZtGeNcvkjM5asivsbICa0UHT6rJm+EqdP KB7Vn1zKgfERT45IUPf+7KFvH7riT0gLwPYjylxY+5lChzOwFURY1mXNHp9JArEZ EKMmsVCPYF7DRWN1FzqhkeVguHvHUxrIgxp50yNOOz6RyijkIEs6ng6K47tfLBdq 82tS63BfPKsrO/tzLWV+JUmoGjjzoV+8Z+i6pfvf8hNLXt0OrQrRUV2d3qMzD5I8 Oo6yKIamqcUm5Ev/asuIEu6miVAcf1IPDmvJj/nPYkKuKP6ppQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUN0vN+Bqwp3tA0L434f9E48vU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMWQ1YjY0YTAtMTRiYS0z OThjLWJlMjItYjU3OTYxMjE1N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6eYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoHmOekq3vfdaqkj0e4nGBRbOdvz81TSCVHs6Ak2DMQirVnH3sq+TT5 3K9deKSFUX2B2bKk0hHL1WrgFAjDbrcgpo4zieUildoHYSzyirOt2I8QVhtMl9Fu 4NaDddXSsGQmTPlM58c2l5ymXuIWmA5V/YCXovndOcuf0ryzhtZQSWnQcWar+lcA T0Ygp++74kQj6eyFmKRAVdsUr0cISfhqPaPTkHQZUvTytLPFAhoZL1Exsl3cZpeE NUlUwDTb0kaJ654tcyZgXwB2IFlotWClQUJGjtUJ4rNwPNdGRLtIa0JYW1oqjv0Y 5lTPOnn2G+MsbnVLdid+3kqEZngsJj4= -----END CERTIFICATE-----Generated at Tue Jul 21 13:02:43 2026 by rpki-client