$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f30a06bf-a0c7-3beb-812a-8449ff6f4db7.roa File: f30a06bf-a0c7-3beb-812a-8449ff6f4db7.roa (raw, json) Hash identifier: yC4z2eWrGRn9D1JN6AL8bX2yAfAU9DXqsPSCpoa8bJo= Subject key identifier: 4A:94:18:35:17:7A:A2:AC:8A:0B:5D:EB:7C:26:26:E0:9F:09:79:47 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584E7E94F0C9FCFD2E1FB271F200 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f30a06bf-a0c7-3beb-812a-8449ff6f4db7.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 21949 IP address blocks: 142.59.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f0:c9:fc:fd:2e:1f:b2:71:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=b38e2885-8c06-4cc6-b510-77d8107aa67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:96:06:81:67:e8:69:f8:10:8e:df:3b:50:69: fc:cb:a4:1d:a7:03:52:12:ee:76:25:cb:eb:d2:89: ce:c3:a2:82:65:8a:0a:05:cd:59:8c:15:72:04:ee: e5:8c:98:30:a1:03:04:d9:0e:f4:ad:da:b2:bb:d4: b6:d0:a3:fb:c4:1c:21:a5:bd:dc:6f:e5:99:d9:84: c3:09:a0:bc:d7:49:5f:d9:79:0c:88:d2:7f:44:44: 78:48:a9:93:4a:53:d5:dc:41:20:67:59:d6:ba:16: f4:33:c5:c3:b5:df:60:f8:7a:7e:c9:83:1d:a3:b2: 47:24:aa:0d:11:54:fa:ac:f4:a0:4b:a6:46:cf:81: 3b:b1:62:43:e6:1f:bd:f4:fa:2d:e9:19:6e:77:b1: 6d:7b:3b:5b:fd:48:3d:70:a5:83:71:58:a1:8a:ee: 38:b3:c8:2d:32:02:cf:52:f0:0d:a7:30:77:f8:07: c9:a1:92:31:50:cf:82:1d:b0:27:bf:bd:2a:03:05: 7d:5a:4d:f6:14:4d:b4:58:ec:23:26:6d:1d:eb:83: a8:16:6b:8e:c9:0e:66:25:b8:0f:32:56:5d:88:4c: 34:13:d6:a1:8a:8f:78:1f:72:1b:3a:14:fa:63:45: 5c:f7:d4:7b:35:0c:96:52:8a:ef:fb:c7:0f:e3:a0: d7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:94:18:35:17:7A:A2:AC:8A:0B:5D:EB:7C:26:26:E0:9F:09:79:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f30a06bf-a0c7-3beb-812a-8449ff6f4db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 142.59.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:4d:26:79:19:be:4b:67:76:c8:ab:df:c1:10:17:5c:d6:12: cf:a2:a7:9d:3f:03:06:a6:e1:18:56:db:27:ce:d5:80:b0:2f: 7b:0e:d0:c5:77:b4:67:58:b1:7b:b0:5d:80:d5:85:28:1c:fb: 00:2c:24:73:c1:e5:25:9f:6f:6f:df:d7:8e:0a:3b:05:13:2b: 8c:4f:79:c0:55:ce:e5:18:93:6f:05:2d:30:7f:0b:04:28:58: ee:b1:26:57:a3:06:43:c1:57:ec:49:06:16:36:ad:84:73:29: bb:aa:1a:42:18:8e:b4:91:63:dd:de:30:ed:ff:c3:8c:3d:9e: 8a:af:a5:28:9d:1e:33:15:ba:95:1e:65:1f:0d:89:91:5c:c0: d5:f3:16:6c:cc:da:52:aa:6e:49:63:b3:66:14:ef:e2:0b:a1: 05:3e:fc:40:9c:16:4f:9f:f4:5a:9a:1b:f2:bb:a4:79:a6:80: 84:83:5c:50:f7:f0:50:1e:f9:30:d2:f2:0d:eb:a6:e8:2e:58: 5d:a2:56:15:26:8d:62:cc:98:d0:b7:4f:ff:7b:c0:d2:c1:33: fb:9c:90:01:17:41:ae:60:8c:8d:46:1b:ab:8d:08:47:d1:13: 87:16:a5:03:7b:dc:b8:dc:71:d1:c3:58:f9:38:3f:9a:ba:5b: 08:5e:85:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPDJ/P0uH7Jx8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YjM4ZTI4ODUtOGMwNi00Y2M2LWI1MTAtNzdkODEwN2FhNjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpYGgWfoafgQjt87UGn8y6QdpwNSEu52Jcvr 0onOw6KCZYoKBc1ZjBVyBO7ljJgwoQME2Q70rdqyu9S20KP7xBwhpb3cb+WZ2YTD CaC810lf2XkMiNJ/RER4SKmTSlPV3EEgZ1nWuhb0M8XDtd9g+Hp+yYMdo7JHJKoN EVT6rPSgS6ZGz4E7sWJD5h+99Pot6Rlud7Fteztb/Ug9cKWDcVihiu44s8gtMgLP UvANpzB3+AfJoZIxUM+CHbAnv70qAwV9Wk32FE20WOwjJm0d64OoFmuOyQ5mJbgP MlZdiEw0E9ahio94H3IbOhT6Y0Vc99R7NQyWUorv+8cP46DX2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqUGDUXeqKsigtd63wmJuCfCXlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjMwYTA2YmYtYTBjNy0z YmViLTgxMmEtODQ0OWZmNmY0ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjjugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlNJnkZvktndsir38EQF1zWEs+ip50/Awam4RhW2yfO1YCwL3sO0MV3 tGdYsXuwXYDVhSgc+wAsJHPB5SWfb2/f144KOwUTK4xPecBVzuUYk28FLTB/CwQo WO6xJlejBkPBV+xJBhY2rYRzKbuqGkIYjrSRY93eMO3/w4w9noqvpSidHjMVupUe ZR8NiZFcwNXzFmzM2lKqbkljs2YU7+ILoQU+/ECcFk+f9FqaG/K7pHmmgISDXFD3 8FAe+TDS8g3rpuguWF2iVhUmjWLMmNC3T/97wNLBM/uckAEXQa5gjI1GG6uNCEfR E4cWpQN73LjccdHDWPk4P5q6WwhehWU= -----END CERTIFICATE-----Generated at Tue Jul 21 13:01:25 2026 by rpki-client