$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa File: 152d19fc-a4dd-3003-8922-b7d5efb068f1.roa (raw, json) Hash identifier: zvi/gqKI+FdgBpoKzRPXy3AJmVBfVhSqADBNW35bi3I= Subject key identifier: FC:5B:8B:F2:D0:63:19:F1:E1:5E:65:26:1D:80:8B:14:E5:FA:29:59 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F20F7BAD0826FAA619E450B80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 21949 IP address blocks: 206.223.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ba:d0:82:6f:aa:61:9e:45:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=348349b7-1f80-41dc-b824-abdd4d08ab83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d2:61:80:85:fd:fd:75:ac:9d:cf:37:ca:3b: e3:1a:18:e3:17:78:f6:d7:da:74:2d:6a:07:36:96: 60:a2:7c:d1:26:cb:ab:d8:07:f5:4d:92:47:50:03: 5a:6a:fd:04:1c:7f:d0:7a:74:25:c0:7b:26:7a:8b: b8:4e:96:a1:f7:6a:40:ec:90:e5:42:9d:ca:a6:10: da:4f:58:19:c8:2a:12:51:70:b0:aa:f3:0e:9d:5d: 08:8a:c3:1c:0f:3d:5f:47:17:2b:53:0c:31:6a:fd: 92:c5:18:32:82:3a:96:e8:9a:ff:0a:85:8e:c7:00: 87:9f:47:36:cd:0a:ee:ce:7f:97:1d:4d:06:c3:30: 63:a1:d8:92:12:3d:24:7d:56:56:b4:fd:67:49:7c: 3a:a5:a9:18:2d:83:51:70:74:89:66:f0:00:67:43: de:76:b9:38:47:cc:b5:96:cc:cd:9f:08:c7:52:33: ab:8d:ff:4d:33:0c:c2:87:75:64:b5:30:c5:c1:fa: 7c:4c:ae:92:0e:e6:b3:41:58:b9:bb:62:d5:54:82: f9:90:27:eb:f1:79:43:c5:3e:74:4b:ce:f4:56:b9: de:ed:2d:2a:c1:c5:c7:bf:3d:21:e0:3b:46:37:a3: 47:8d:6b:e0:b6:d6:6b:69:7a:e9:7a:85:62:3f:11: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5B:8B:F2:D0:63:19:F1:E1:5E:65:26:1D:80:8B:14:E5:FA:29:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 206.223.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2c:57:bc:41:b2:54:b7:6b:17:d1:5f:b1:a8:61:87:3c:b1: 18:5e:b0:aa:6e:80:74:42:ae:ca:c5:27:83:22:83:e5:d5:39: df:93:ed:2b:35:2c:ae:03:dd:42:08:4f:eb:63:2d:6f:5d:60: 85:4e:54:2c:48:70:2d:c0:1c:95:77:d5:c1:6c:e7:a8:8d:c6: 23:b4:1c:e6:8e:c4:d8:c3:d0:70:31:0c:3b:e4:80:3f:4a:23: 2b:2d:22:98:e1:35:4f:f1:26:f6:8d:3c:a5:86:cb:da:ba:f7: f5:99:0f:b3:06:53:f4:f1:e7:2a:39:0f:d4:08:b5:b4:3e:c5: d6:0e:76:91:80:ab:8e:1e:bb:2f:61:a4:aa:b4:c2:52:60:fe: 30:81:0d:4f:51:9f:b9:11:03:80:22:d0:e2:59:2a:d5:d0:1d: 94:c3:a3:43:cb:c1:c8:82:69:42:cd:3b:30:12:73:81:0b:e6: f5:ba:a5:08:9b:c5:8d:a3:04:a3:fe:63:d9:34:1f:9d:43:13: 7a:65:57:0a:75:5a:ae:f7:3e:94:fe:20:2b:2b:62:3d:24:0d: ae:09:0e:b6:d3:9e:94:80:3e:55:a5:6f:53:ac:23:e3:c1:e7: d4:2e:a3:01:c5:98:2e:44:60:55:69:53:b1:91:47:64:62:f9: aa:44:eb:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97rQgm+qYZ5FC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MzQ4MzQ5YjctMWY4MC00MWRjLWI4MjQtYWJkZDRkMDhhYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dJhgIX9/XWsnc83yjvjGhjjF3j219p0LWoH NpZgonzRJsur2Af1TZJHUANaav0EHH/QenQlwHsmeou4Tpah92pA7JDlQp3KphDa T1gZyCoSUXCwqvMOnV0IisMcDz1fRxcrUwwxav2SxRgygjqW6Jr/CoWOxwCHn0c2 zQruzn+XHU0GwzBjodiSEj0kfVZWtP1nSXw6pakYLYNRcHSJZvAAZ0Pedrk4R8y1 lszNnwjHUjOrjf9NMwzCh3VktTDFwfp8TK6SDuazQVi5u2LVVIL5kCfr8XlDxT50 S870Vrne7S0qwcXHvz0h4DtGN6NHjWvgttZraXrpeoViPxF4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxbi/LQYxnx4V5lJh2AixTl+ilZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMTUyZDE5ZmMtYTRkZC0z MDAzLTg5MjItYjdkNWVmYjA2OGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzt+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0sV7xBslS3axfRX7GoYYc8sRhesKpugHRCrsrFJ4Mig+XVOd+T7Ss1 LK4D3UIIT+tjLW9dYIVOVCxIcC3AHJV31cFs56iNxiO0HOaOxNjD0HAxDDvkgD9K IystIpjhNU/xJvaNPKWGy9q69/WZD7MGU/Tx5yo5D9QItbQ+xdYOdpGAq44euy9h pKq0wlJg/jCBDU9Rn7kRA4Ai0OJZKtXQHZTDo0PLwciCaULNOzASc4EL5vW6pQib xY2jBKP+Y9k0H51DE3plVwp1Wq73PpT+ICsrYj0kDa4JDrbTnpSAPlWlb1OsI+PB 59QuowHFmC5EYFVpU7GRR2Ri+apE64I= -----END CERTIFICATE-----Generated at Sun Sep 20 23:13:22 2026 by rpki-client