$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa File: f920443e-ab0e-3df1-beae-30701559a976.roa (raw, json) Hash identifier: veEQsZ4Onedz289hRpL3eMx8o26LS+gawEbAZyWPTs4= Subject key identifier: 34:06:72:50:27:BD:9C:7B:08:22:F0:96:97:3A:E8:8A:2A:42:13:18 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584E7E94F0E039CF30DD6D4A4080 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 21949 IP address blocks: 198.98.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f0:e0:39:cf:30:dd:6d:4a:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=531afae6-4113-44fb-8b5e-b9bd50948f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a3:35:89:78:48:19:fc:e1:ac:14:6c:83:d9: 01:c1:f4:2d:a1:ee:b8:15:54:34:96:ae:ba:4b:c1: c4:66:87:ed:5c:d7:33:80:c8:03:44:a0:c2:31:3c: 78:87:c5:0f:a1:ac:b2:10:8a:de:f6:31:e0:85:61: d4:22:b2:27:f0:33:db:d3:e8:3c:45:d3:9f:a0:69: 1a:f2:7b:3c:11:da:d8:47:d5:04:a4:1d:56:f5:d6: 04:8b:f7:bd:ff:3d:a1:19:48:9b:94:ae:43:f5:da: 63:d4:b5:94:68:0c:cd:68:9a:fb:99:f4:70:cb:a6: 76:e3:7a:39:6f:75:18:69:7c:fe:7d:9b:df:b5:77: 14:b6:d4:59:99:e0:34:05:a7:76:0c:bb:db:79:db: 0f:42:b3:95:ed:ef:ff:82:58:82:d3:d0:b9:c0:27: ca:18:f7:29:6d:c8:1d:ea:68:e8:c8:b3:7f:34:39: 29:fa:e3:18:c3:6b:75:16:07:b6:7e:da:88:ba:5c: e7:23:3a:e4:e5:03:5e:90:34:fe:dc:4c:43:49:a1: 94:5f:51:8e:83:57:85:fc:e0:7f:a6:3d:dc:1d:22: 2e:8f:c2:76:ea:30:e6:56:b0:4d:9a:76:37:47:15: 2e:a5:0a:37:e9:c1:37:38:1f:3b:66:70:52:fc:9e: ae:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:06:72:50:27:BD:9C:7B:08:22:F0:96:97:3A:E8:8A:2A:42:13:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 198.98.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:99:53:87:37:97:13:69:4a:2e:14:34:de:0e:ad:55:63:17: 8f:b4:17:ca:c6:7b:eb:5c:16:45:44:d1:51:a0:bc:24:39:0e: d2:60:db:b6:43:4a:04:3a:ac:2e:03:83:19:01:06:9d:86:3c: 55:89:26:af:3c:e9:25:34:25:6f:cd:e8:45:f3:37:ae:6d:d3: 85:3a:35:80:bd:7e:e3:69:84:5f:19:37:59:04:6c:e2:0c:be: 82:65:0a:55:00:8f:4b:25:2d:e9:fa:bb:81:db:c9:2a:ec:ba: 17:28:0f:0b:66:71:99:1c:0c:ac:40:16:8b:6b:58:04:4e:98: 4e:72:eb:9e:f8:5c:59:76:76:43:ed:ac:60:2d:ef:ff:a7:f9: 3f:b8:23:a2:ec:53:b9:74:67:ab:98:83:7e:af:c8:2c:0f:2f: ec:48:e2:86:36:35:0a:77:19:b5:fd:fc:45:0f:6f:d1:ac:16: 7e:0a:90:dd:18:67:e7:c7:70:ef:c8:a9:e5:b4:e3:7b:50:64: cc:88:cf:af:48:ac:24:7e:b3:f2:40:c3:75:9e:dd:04:8b:dc: 23:c8:da:c4:21:4e:48:c7:4e:4b:f1:5d:cc:20:a8:4f:e9:e6: 93:69:ff:b2:12:49:5f:69:fb:03:1f:98:f9:77:89:c7:99:e6: be:1a:4c:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPDgOc8w3W1KQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NTMxYWZhZTYtNDExMy00NGZiLThiNWUtYjliZDUwOTQ4Zjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqM1iXhIGfzhrBRsg9kBwfQtoe64FVQ0lq66 S8HEZoftXNczgMgDRKDCMTx4h8UPoayyEIre9jHghWHUIrIn8DPb0+g8RdOfoGka 8ns8EdrYR9UEpB1W9dYEi/e9/z2hGUiblK5D9dpj1LWUaAzNaJr7mfRwy6Z243o5 b3UYaXz+fZvftXcUttRZmeA0Bad2DLvbedsPQrOV7e//gliC09C5wCfKGPcpbcgd 6mjoyLN/NDkp+uMYw2t1Fge2ftqIulznIzrk5QNekDT+3ExDSaGUX1GOg1eF/OB/ pj3cHSIuj8J26jDmVrBNmnY3RxUupQo36cE3OB87ZnBS/J6ujQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQGclAnvZx7CCLwlpc66IoqQhMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjkyMDQ0M2UtYWIwZS0z ZGYxLWJlYWUtMzA3MDE1NTlhOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxmJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeZU4c3lxNpSi4UNN4OrVVjF4+0F8rGe+tcFkVE0VGgvCQ5DtJg27ZD SgQ6rC4DgxkBBp2GPFWJJq886SU0JW/N6EXzN65t04U6NYC9fuNphF8ZN1kEbOIM voJlClUAj0slLen6u4HbySrsuhcoDwtmcZkcDKxAFotrWAROmE5y6574XFl2dkPt rGAt7/+n+T+4I6LsU7l0Z6uYg36vyCwPL+xI4oY2NQp3GbX9/EUPb9GsFn4KkN0Y Z+fHcO/IqeW043tQZMyIz69IrCR+s/JAw3We3QSL3CPI2sQhTkjHTkvxXcwgqE/p 5pNp/7ISSV9p+wMfmPl3iceZ5r4aTPA= -----END CERTIFICATE-----Generated at Tue Jul 21 13:02:13 2026 by rpki-client