$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa File: 1c8cfd90-1e45-3ca8-865a-284e8261e043.roa (raw, json) Hash identifier: krmKnsdcEsc2c/DgX2kUedlA+JR58f7uaYbQJqCqFTs= Subject key identifier: FC:58:E8:D0:5D:D6:24:FD:02:C4:03:6B:BA:8B:41:BA:9F:A1:2B:3A Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584AFC1C02C2F90181237EFFC2A0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 21949 IP address blocks: 199.68.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:02:c2:f9:01:81:23:7e:ff:c2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=ab9fab1d-0e0f-41f4-b9e0-c8fdde9cc536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:75:26:a1:1a:36:83:e8:74:a6:9e:f6:53:a9: 89:d2:af:01:c7:1b:3a:aa:b8:09:30:f2:3a:c6:39: 43:44:1d:73:57:fe:89:b8:5c:50:1f:06:44:1c:c4: c4:fb:57:ac:82:05:df:0e:cf:cd:ff:5b:51:13:49: dd:1e:ed:b1:08:01:da:25:9f:2d:ee:f7:a4:5f:60: 61:b0:5a:ba:44:90:bd:8d:0d:37:3b:15:f4:3b:a3: c1:d8:1d:ea:d0:81:86:4e:86:2f:10:49:a1:29:aa: ad:70:6c:b2:69:f8:b6:6d:fd:74:4c:c9:b1:ae:f8: 4a:f4:85:6d:b5:60:02:ba:4d:82:ed:e7:91:c6:f2: 80:20:c5:b8:d8:03:8c:2f:81:a3:dd:02:a7:64:5d: 5b:2f:e0:b2:b8:62:cf:35:06:d4:c1:57:fa:0a:f4: 81:13:91:04:03:7e:11:13:b7:1d:3d:74:11:9a:31: 22:fc:3d:01:ab:89:4a:12:28:9e:90:27:2f:c4:d3: aa:97:85:1c:f1:66:1d:d0:95:de:4e:09:6c:90:ef: 75:80:85:a8:f4:84:b2:c8:22:4b:55:42:a9:28:e8: f4:cc:bd:d5:c1:9e:57:f4:55:13:65:db:b7:45:f1: c8:55:af:c3:bc:cc:b5:a4:84:10:27:da:3e:48:04: 01:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:58:E8:D0:5D:D6:24:FD:02:C4:03:6B:BA:8B:41:BA:9F:A1:2B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.68.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:65:98:48:e1:88:cc:a8:a8:59:d5:fc:f9:6f:83:18:d7:c1: a6:a9:96:ba:03:aa:45:de:07:c2:99:81:02:71:30:37:e8:c0: c6:30:3b:f0:6b:e0:23:c3:de:c3:b4:b3:81:b9:d7:fc:b8:1f: b1:d5:54:31:93:e0:4f:73:2f:be:82:f6:2e:67:3e:7a:96:21: e1:f5:6b:be:8c:8d:8d:f6:ab:e4:46:ed:fe:74:6b:90:8b:3c: 69:7f:d1:70:10:27:9a:f6:db:1c:2d:4f:a8:62:cc:46:8b:38: e9:5c:9d:62:97:fb:04:fc:a6:0f:4d:6b:da:2c:de:b8:ad:1e: 57:81:6d:c4:3e:32:87:24:34:f4:ef:38:e4:bb:5a:9e:2d:39: 7e:cb:d4:6f:e6:e0:eb:d2:4f:b0:4d:76:83:35:4a:6b:7f:a1: 51:9d:ee:8a:b9:fd:94:f2:cf:c8:19:3f:3d:44:a2:76:c4:13: be:5c:62:f1:b7:d9:1f:e1:83:30:80:07:fd:70:19:77:38:b8: db:f2:13:ad:e9:d5:75:5e:77:e3:65:79:36:3d:49:14:54:9c: 21:a3:47:7c:62:81:fa:85:f1:93:0e:41:12:5f:16:96:61:94: 0c:d4:03:cd:4c:5a:16:17:77:08:51:e7:eb:2e:f8:d7:87:1e: 2f:84:62:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HALC+QGBI37/wqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YWI5ZmFiMWQtMGUwZi00MWY0LWI5ZTAtYzhmZGRlOWNjNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3UmoRo2g+h0pp72U6mJ0q8Bxxs6qrgJMPI6 xjlDRB1zV/6JuFxQHwZEHMTE+1esggXfDs/N/1tRE0ndHu2xCAHaJZ8t7vekX2Bh sFq6RJC9jQ03OxX0O6PB2B3q0IGGToYvEEmhKaqtcGyyafi2bf10TMmxrvhK9IVt tWACuk2C7eeRxvKAIMW42AOML4Gj3QKnZF1bL+CyuGLPNQbUwVf6CvSBE5EEA34R E7cdPXQRmjEi/D0Bq4lKEiiekCcvxNOql4Uc8WYd0JXeTglskO91gIWo9ISyyCJL VUKpKOj0zL3VwZ5X9FUTZdu3RfHIVa/DvMy1pIQQJ9o+SAQBiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxY6NBd1iT9AsQDa7qLQbqfoSs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMWM4Y2ZkOTAtMWU0NS0z Y2E4LTg2NWEtMjg0ZTgyNjFlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEplmEjhiMyoqFnV/PlvgxjXwaaplroDqkXeB8KZgQJxMDfowMYwO/Br 4CPD3sO0s4G51/y4H7HVVDGT4E9zL76C9i5nPnqWIeH1a76MjY32q+RG7f50a5CL PGl/0XAQJ5r22xwtT6hizEaLOOlcnWKX+wT8pg9Na9os3ritHleBbcQ+MockNPTv OOS7Wp4tOX7L1G/m4OvST7BNdoM1Smt/oVGd7oq5/ZTyz8gZPz1EonbEE75cYvG3 2R/hgzCAB/1wGXc4uNvyE63p1XVed+NleTY9SRRUnCGjR3xigfqF8ZMOQRJfFpZh lAzUA81MWhYXdwhR5+su+NeHHi+EYgU= -----END CERTIFICATE-----Generated at Mon Sep 15 17:08:22 2025 by rpki-client