$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa File: de012c4e-185d-3ce9-b093-964f60565a71.roa (raw, json) Hash identifier: bktznqhAm8HRAO0dl6tICjQdRsToI5DUQm1gwAp8Kdw= Subject key identifier: 74:A6:96:28:A2:2D:38:81:CB:A3:52:7C:82:74:B4:FA:59:93:68:B9 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584E7E94F13B49809E90E6641780 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 21949 IP address blocks: 72.15.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f1:3b:49:80:9e:90:e6:64:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=642d6bc2-6fb9-456b-8804-4a2aa2ff0571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:ae:4d:c5:44:af:06:be:49:38:42:95:64: 5e:8b:84:54:22:40:64:24:4c:a1:bd:64:05:36:3f: 7f:6c:f3:8b:5a:3a:a9:be:dd:da:e9:5c:48:ef:d1: 85:21:9f:99:ec:8d:79:93:5a:e8:4a:d0:a7:59:16: f1:f4:04:c1:f4:f1:7e:4c:58:f4:d7:71:d9:80:19: 16:53:8e:49:1b:5f:bd:fa:55:94:f9:6a:00:23:e5: d2:0e:bf:5a:ab:0a:d8:55:6e:66:35:e8:13:fe:a1: 28:79:77:af:3a:93:d3:e1:35:04:3c:55:b9:21:48: 69:31:ff:4f:93:ff:81:ae:ba:20:9d:53:7d:cf:f1: 72:72:6e:d5:4b:96:b3:c9:19:c6:38:b0:74:d9:d7: fe:4b:39:6f:a2:7a:f8:da:a8:bd:17:41:9f:13:61: e7:e2:4f:6b:73:78:f1:8f:30:cf:10:9c:0e:c6:9c: 82:94:28:a4:b6:2b:2f:45:5b:d4:5e:98:2d:b9:b9: ca:67:9c:55:cc:68:77:31:d6:32:bc:d1:3d:e5:7d: e5:1e:72:6c:24:55:9b:4e:b3:b6:3a:a5:39:ee:9e: d8:d1:83:62:72:f7:40:65:10:2a:28:ee:31:af:ea: c9:85:7e:9f:11:ce:05:da:97:6e:74:be:03:df:12: 69:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A6:96:28:A2:2D:38:81:CB:A3:52:7C:82:74:B4:FA:59:93:68:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 72.15.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d6:8c:61:77:0d:1d:e4:1d:e1:85:ed:6d:ca:2c:f1:cf:7b: 58:10:26:03:c6:4d:ea:05:a0:23:73:7b:dc:b5:f8:91:86:69: b6:80:bb:2e:d0:06:f0:54:19:3a:a1:19:b2:f7:8a:39:84:43: 5e:07:3a:82:35:51:1d:76:7a:60:36:e5:bb:e5:56:6e:2d:7d: fa:04:a8:0b:ee:61:f7:b9:45:7b:a2:10:43:76:a2:23:d9:94: a7:ae:84:0d:67:38:66:d4:b1:a8:a7:ed:b3:9a:d2:bf:47:3a: 83:a3:ba:56:b1:5f:d0:e8:22:5b:a4:06:22:11:65:7d:b4:eb: 85:e2:c1:80:45:21:20:01:c8:32:59:49:f8:e2:d9:75:a7:70: ae:93:c6:b7:ac:a7:b8:83:0a:30:11:a5:30:52:f6:6e:c3:e1: d3:d3:68:26:ec:4c:2c:3a:e1:c0:2c:27:cd:ae:42:12:6b:eb: 2b:fc:09:30:8d:e2:7d:a5:59:b0:79:89:06:8e:0e:1b:4e:04: 3e:77:49:0b:02:de:7a:b0:4e:3e:35:f7:4f:33:be:39:f0:5c: 02:f3:27:83:28:e5:3a:c7:d0:0c:c7:90:2b:65:07:6d:ba:2e: 44:2b:ce:fe:13:77:6d:87:82:04:31:ab:9f:81:ff:1a:a8:d5: eb:cb:b8:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPE7SYCekOZkF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NjQyZDZiYzItNmZiOS00NTZiLTg4MDQtNGEyYWEyZmYwNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+euTcVErwa+SThClWRei4RUIkBkJEyhvWQF Nj9/bPOLWjqpvt3a6VxI79GFIZ+Z7I15k1roStCnWRbx9ATB9PF+TFj013HZgBkW U45JG1+9+lWU+WoAI+XSDr9aqwrYVW5mNegT/qEoeXevOpPT4TUEPFW5IUhpMf9P k/+BrrognVN9z/Fycm7VS5azyRnGOLB02df+Szlvonr42qi9F0GfE2Hn4k9rc3jx jzDPEJwOxpyClCiktisvRVvUXpgtubnKZ5xVzGh3MdYyvNE95X3lHnJsJFWbTrO2 OqU57p7Y0YNicvdAZRAqKO4xr+rJhX6fEc4F2pdudL4D3xJpLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSmliiiLTiBy6NSfIJ0tPpZk2i5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZGUwMTJjNGUtMTg1ZC0z Y2U5LWIwOTMtOTY0ZjYwNTY1YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESA8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7WjGF3DR3kHeGF7W3KLPHPe1gQJgPGTeoFoCNze9y1+JGGabaAuy7Q BvBUGTqhGbL3ijmEQ14HOoI1UR12emA25bvlVm4tffoEqAvuYfe5RXuiEEN2oiPZ lKeuhA1nOGbUsain7bOa0r9HOoOjulaxX9DoIlukBiIRZX2064XiwYBFISAByDJZ Sfji2XWncK6Txresp7iDCjARpTBS9m7D4dPTaCbsTCw64cAsJ82uQhJr6yv8CTCN 4n2lWbB5iQaODhtOBD53SQsC3nqwTj41908zvjnwXALzJ4Mo5TrH0AzHkCtlB226 LkQrzv4Td22HggQxq5+B/xqo1evLuDE= -----END CERTIFICATE-----Generated at Tue Jul 21 13:01:08 2026 by rpki-client