$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa File: a3f85181-11c0-326a-830f-14c1fb40c85f.roa (raw, json) Hash identifier: yjxTu5bYQUpadHhbSUhPBwzdLfzR9hWPWICKWxlh4II= Subject key identifier: DD:CA:0F:E9:62:2D:5E:F1:5E:73:E2:3F:73:06:C3:4D:77:85:62:72 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584E7E94F15C523386D71D25AC20 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 21949 IP address blocks: 96.45.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f1:5c:52:33:86:d7:1d:25:ac:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=ec0d7436-8771-4a01-a4be-9b4b1fa9d475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:8f:e6:9e:76:08:57:7e:da:9f:de:0f:a6: 11:d6:a0:3c:d2:f6:ea:d2:cf:ec:f4:bd:3d:ad:60: c7:99:dd:53:fa:4e:1d:6d:e7:42:ea:24:b5:a7:42: 04:1d:6a:18:03:13:86:ad:41:74:8e:f1:c9:96:27: 76:1a:cc:65:f2:b6:29:12:f1:3e:61:be:0a:8c:45: ea:7a:16:65:46:b0:98:16:ff:0d:f3:70:14:69:ac: 46:c7:84:34:75:3e:ea:58:99:aa:52:d5:89:79:0f: 71:11:ac:93:13:ad:54:11:23:b4:b6:1b:53:34:41: af:41:bb:e8:0f:39:c9:df:1e:80:19:ec:72:cf:24: c8:4a:45:28:ad:2b:0b:62:08:32:60:d9:00:3d:e5: ff:fd:74:68:eb:1f:e2:38:9a:8a:0c:7b:ec:e3:a9: 85:c6:a0:7e:0e:4a:42:03:97:dc:b4:dc:d0:a2:61: 7a:83:fd:cb:1d:0b:c5:38:1f:11:4a:88:a3:15:49: 07:ef:b9:8d:5e:d6:3f:1b:65:9c:af:86:d1:a6:0e: a3:fa:67:6c:7d:0b:a5:86:6b:ae:00:ea:67:ab:3f: 4c:d7:e3:7e:cf:63:4c:75:3c:b4:51:b8:32:bf:49: 2f:ad:45:64:93:42:b2:67:64:c7:bf:ef:30:71:8a: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CA:0F:E9:62:2D:5E:F1:5E:73:E2:3F:73:06:C3:4D:77:85:62:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 96.45.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:49:2b:53:0e:11:ab:b5:b6:44:ce:8a:5b:bb:99:3c:4b:2c: d4:c7:33:d9:8d:2f:28:80:7d:e7:fe:cf:6b:ef:a3:8f:45:79: de:1d:2b:e5:b5:9b:67:97:ac:92:f6:a9:38:3d:d2:a0:c9:1f: d1:f3:9b:3b:6a:3a:55:82:9e:01:0f:1d:2c:93:c1:e5:bf:02: d9:bf:bf:72:ce:0e:1f:22:97:4e:5d:4b:4b:d3:f1:e8:79:9a: 8e:2e:08:84:2c:11:ac:03:eb:61:e6:09:24:be:d2:02:3b:db: 5c:57:7c:b3:ca:2b:70:33:b0:ac:4e:96:36:b8:22:02:57:4d: 5f:9e:1d:25:c4:13:ce:d3:2f:4d:4d:2b:9c:aa:98:c3:31:8a: 5f:a8:43:60:dd:ed:aa:7e:3d:7d:77:c6:03:b6:5e:b4:bc:94: 84:68:e7:ac:aa:76:62:f8:8a:96:06:f4:67:24:30:6d:00:1a: 69:9a:d4:4c:b8:14:22:6f:13:bf:37:f3:05:fa:ff:a6:31:69: f3:02:94:d2:25:38:8d:62:58:c1:88:22:93:eb:64:42:3d:b3: f0:56:9f:8f:66:c7:3a:fb:95:98:bb:c2:a2:b0:f1:43:66:25: f6:bc:72:60:33:91:cf:af:bd:ec:4e:03:8c:7a:29:25:e5:aa: 6d:14:67:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPFcUjOG1x0lrCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZWMwZDc0MzYtODc3MS00YTAxLWE0YmUtOWI0YjFmYTlkNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW+P5p52CFd+2p/eD6YR1qA80vbq0s/s9L09 rWDHmd1T+k4dbedC6iS1p0IEHWoYAxOGrUF0jvHJlid2Gsxl8rYpEvE+Yb4KjEXq ehZlRrCYFv8N83AUaaxGx4Q0dT7qWJmqUtWJeQ9xEayTE61UESO0thtTNEGvQbvo DznJ3x6AGexyzyTISkUorSsLYggyYNkAPeX//XRo6x/iOJqKDHvs46mFxqB+DkpC A5fctNzQomF6g/3LHQvFOB8RSoijFUkH77mNXtY/G2Wcr4bRpg6j+mdsfQulhmuu AOpnqz9M1+N+z2NMdTy0Ubgyv0kvrUVkk0KyZ2THv+8wcYoznwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3KD+liLV7xXnPiP3MGw013hWJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTNmODUxODEtMTFjMC0z MjZhLTgzMGYtMTRjMWZiNDBjODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5JK1MOEau1tkTOilu7mTxLLNTHM9mNLyiAfef+z2vvo49Fed4dK+W1 m2eXrJL2qTg90qDJH9HzmztqOlWCngEPHSyTweW/Atm/v3LODh8il05dS0vT8eh5 mo4uCIQsEawD62HmCSS+0gI721xXfLPKK3AzsKxOlja4IgJXTV+eHSXEE87TL01N K5yqmMMxil+oQ2Dd7ap+PX13xgO2XrS8lIRo56yqdmL4ipYG9GckMG0AGmma1Ey4 FCJvE7838wX6/6YxafMClNIlOI1iWMGIIpPrZEI9s/BWn49mxzr7lZi7wqKw8UNm Jfa8cmAzkc+vvexOA4x6KSXlqm0UZ+U= -----END CERTIFICATE-----Generated at Tue Jul 21 13:02:03 2026 by rpki-client