$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa File: ce7c6a93-090d-3601-ac47-5724324b5304.roa (raw, json) Hash identifier: HjfMuqpBNmkInc4dznRj7ymnjKYPxaDSHh+7geWmb3U= Subject key identifier: C7:2D:AA:C4:6F:4E:54:E3:2A:2F:56:EF:4C:C3:29:A3:8D:AF:70:8E Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584E7FFA30AB2254279EC102E480 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 21949 IP address blocks: 74.213.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:30:ab:22:54:27:9e:c1:02:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=265d9efd-5e3e-4fcc-8e65-d2ea94f7d225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:23:1c:48:bb:0c:1d:ef:19:14:15:f3:21: 85:75:7b:1b:a3:ea:d0:e9:e8:73:92:9b:c1:e5:81: 49:f6:a0:13:c3:30:73:65:9e:91:98:2b:00:ea:60: eb:b0:00:bd:66:2d:00:c1:9a:80:25:28:9e:b4:80: 52:00:e3:1b:0f:e1:91:56:07:61:ec:f7:92:40:17: e5:55:eb:8a:e3:21:d6:69:5f:ea:c0:f4:4c:41:d8: 59:92:33:50:ab:ec:f1:38:d3:ee:16:d8:42:92:f7: f1:26:8a:77:65:d6:4e:85:76:a9:43:00:e8:d2:04: 21:6f:db:0b:a7:3a:f5:44:dd:27:78:e1:10:1e:dc: 22:08:8a:41:9e:fb:2e:37:ed:22:ea:61:a4:39:0c: 54:6f:b7:ae:6d:61:6f:5c:49:c0:d5:d0:6b:97:6f: c2:c4:5a:d4:de:f4:a8:81:6c:74:bd:97:e4:67:1b: 9c:b2:f0:31:40:b0:f1:3a:4d:10:00:4e:a2:64:59: 8f:4b:b5:f2:d7:b5:8b:89:0e:3d:b3:e3:28:67:da: f1:5a:d7:0f:24:d8:27:b7:06:43:37:83:51:8b:44: ef:1c:66:d7:ec:2e:f1:c9:12:36:29:a5:84:7b:1a: 64:12:d4:87:07:5b:5c:95:c2:3b:87:bf:c5:da:75: cb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2D:AA:C4:6F:4E:54:E3:2A:2F:56:EF:4C:C3:29:A3:8D:AF:70:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 74.213.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f5:60:ef:dc:b1:99:63:9b:3f:bd:5f:8c:a9:3d:6b:0c:d8: c3:c5:98:85:38:90:61:50:f1:e1:91:dc:8e:53:a8:46:a4:61: 51:9d:89:18:66:d6:d4:48:50:18:54:f9:68:7f:e2:3d:e3:85: cc:4d:0a:70:04:5f:a5:64:88:4f:80:e1:81:01:7f:76:4d:cc: 61:50:f2:80:92:75:94:41:40:7b:31:c7:4f:bf:cf:44:64:55: c0:b8:88:92:db:e2:b6:d5:c7:2c:ad:26:96:75:c3:07:92:75: 00:1f:f4:06:08:f4:1e:26:0c:34:49:1b:ec:31:c2:42:57:29: af:e9:bd:af:3e:e6:df:b7:5b:5f:d6:de:82:2a:42:4f:72:a8: fb:b9:1f:16:66:01:a0:b4:f3:89:2a:87:fc:31:f8:d9:02:fc: db:30:57:5d:fa:ef:81:39:3f:8f:20:a4:8c:a8:00:bf:23:a3: 90:4c:ac:f8:cb:1c:1a:69:0c:bc:b7:45:ca:e5:76:70:0e:08: 14:bb:f7:d2:56:9c:96:d7:31:98:7c:2c:36:4f:42:36:cb:fb: 21:cf:8a:0e:c1:1f:7e:2b:4a:6b:7a:a1:51:23:3c:c7:80:62: 87:20:bf:67:25:c7:7f:9b:f4:75:4c:48:6f:54:98:2a:37:21: 2c:5f:fc:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jCrIlQnnsEC5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk MjY1ZDllZmQtNWUzZS00ZmNjLThlNjUtZDJlYTk0ZjdkMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFMjHEi7DB3vGRQV8yGFdXsbo+rQ6ehzkpvB 5YFJ9qATwzBzZZ6RmCsA6mDrsAC9Zi0AwZqAJSietIBSAOMbD+GRVgdh7PeSQBfl VeuK4yHWaV/qwPRMQdhZkjNQq+zxONPuFthCkvfxJop3ZdZOhXapQwDo0gQhb9sL pzr1RN0neOEQHtwiCIpBnvsuN+0i6mGkOQxUb7eubWFvXEnA1dBrl2/CxFrU3vSo gWx0vZfkZxucsvAxQLDxOk0QAE6iZFmPS7Xy17WLiQ49s+MoZ9rxWtcPJNgntwZD N4NRi0TvHGbX7C7xyRI2KaWEexpkEtSHB1tclcI7h7/F2nXLowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMctqsRvTlTjKi9W70zDKaONr3COMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2U3YzZhOTMtMDkwZC0z NjAxLWFjNDctNTcyNDMyNGI1MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCStWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED1YO/csZljmz+9X4ypPWsM2MPFmIU4kGFQ8eGR3I5TqEakYVGdiRhm 1tRIUBhU+Wh/4j3jhcxNCnAEX6VkiE+A4YEBf3ZNzGFQ8oCSdZRBQHsxx0+/z0Rk VcC4iJLb4rbVxyytJpZ1wweSdQAf9AYI9B4mDDRJG+wxwkJXKa/pva8+5t+3W1/W 3oIqQk9yqPu5HxZmAaC084kqh/wx+NkC/NswV13674E5P48gpIyoAL8jo5BMrPjL HBppDLy3RcrldnAOCBS799JWnJbXMZh8LDZPQjbL+yHPig7BH34rSmt6oVEjPMeA Yocgv2clx3+b9HVMSG9UmCo3ISxf/CA= -----END CERTIFICATE-----Generated at Tue Jul 21 13:03:30 2026 by rpki-client