$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/20317159-9aca-3178-8c8a-6141107ab5a4.roa File: 20317159-9aca-3178-8c8a-6141107ab5a4.roa (raw, json) Hash identifier: nQx8Dj1c+PRlnxzibJ1jrA2j1lDk5zi8U7LOEwfIF3E= Subject key identifier: 2F:E2:87:6E:44:22:B5:24:11:48:BC:9D:C9:49:85:F0:FA:40:97:E8 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584DF4DB891DE556A6BF4D007400 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/20317159-9aca-3178-8c8a-6141107ab5a4.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 21949 IP address blocks: 199.33.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:89:1d:e5:56:a6:bf:4d:00:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=53eeb1c8-01f1-47c7-8ec0-48a59c900d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:b7:c3:61:71:13:ff:0f:09:24:c8:61:d9: 02:bd:07:79:73:84:c5:7f:2d:e8:45:fc:e9:ba:0b: 52:e3:e6:59:4f:c0:85:03:fd:27:c1:ed:44:09:5c: 39:cd:ed:1f:8d:31:f8:3f:50:38:5e:08:b4:dc:47: 65:d2:99:e1:94:03:3d:2f:ed:0d:4d:37:fb:52:db: 7f:da:77:a5:25:71:75:f0:ae:03:b2:29:34:17:0f: e5:0f:3f:70:b3:b9:dd:15:d7:7b:c4:d5:37:f1:5d: 08:a5:45:2c:b6:5e:ae:81:c6:90:a9:73:58:de:a5: 8d:cb:5f:cb:e5:be:15:70:75:9f:25:68:23:cb:23: 8c:98:64:b9:ea:af:9e:84:8d:b7:b2:c4:36:68:53: 05:b2:9e:40:61:d6:58:37:c6:61:79:9e:19:54:57: f6:4d:34:24:73:c4:41:cc:a0:49:1a:17:68:c0:f6: 60:13:e7:ec:67:e1:ae:af:4d:44:ff:03:a3:e0:56: aa:04:84:e2:7c:8b:c2:ab:1c:da:c9:72:23:00:dd: d2:3a:3a:99:6e:e0:af:c0:3a:f0:57:b2:95:c7:ab: 3b:45:8a:c4:16:55:27:c8:db:c3:08:78:7e:56:f7: 24:92:59:b3:a1:81:86:a9:e5:8b:ad:8c:38:0b:95: 1e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E2:87:6E:44:22:B5:24:11:48:BC:9D:C9:49:85:F0:FA:40:97:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/20317159-9aca-3178-8c8a-6141107ab5a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:18:bd:2e:ca:a7:03:d2:7c:b6:63:50:22:23:cf:3c:60:36: 46:b3:37:c2:07:d1:32:3f:c2:ed:8c:0a:c6:5e:25:b4:3d:67: 2e:5a:d7:3b:39:dd:a9:25:e7:18:2f:4e:6b:5f:c8:f7:02:92: 77:d8:6b:39:9b:c5:b6:c9:2d:0b:b1:50:f6:03:97:a1:69:8e: 2b:90:d4:7d:0f:12:13:ce:d8:d8:2c:4d:70:5d:f3:88:8a:c7: a2:a0:74:f5:c1:cf:8c:c6:77:84:25:d9:47:a3:5f:a2:73:3d: ea:c8:e5:15:68:86:d4:05:ec:6a:1f:9b:38:90:56:d4:f1:b5: 47:73:ac:c0:cb:92:ca:69:63:a8:3d:ed:ab:d7:13:6c:a9:62: 91:25:3f:e9:de:42:fc:54:ee:40:da:3c:7d:17:f6:15:9f:ae: 59:7e:0b:b1:8a:63:7f:39:e7:3f:d3:d0:69:fe:66:ce:b6:d2: 0a:a8:67:81:d9:e0:00:22:e2:cd:f3:68:98:0a:8e:71:cd:81: 19:f9:bf:11:52:18:97:d4:53:c5:8d:dd:cd:ca:30:62:b6:0b: d0:e5:f2:ed:77:74:e0:a3:b5:10:e9:32:32:76:df:c5:61:a6: 06:45:3e:05:36:82:fe:4c:ec:8c:de:7f:2c:e3:2c:84:42:44: c2:10:62:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3024kd5Vamv00AdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NTNlZWIxYzgtMDFmMS00N2M3LThlYzAtNDhhNTljOTAwZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOi3w2FxE/8PCSTIYdkCvQd5c4TFfy3oRfzp ugtS4+ZZT8CFA/0nwe1ECVw5ze0fjTH4P1A4Xgi03Edl0pnhlAM9L+0NTTf7Utt/ 2nelJXF18K4Dsik0Fw/lDz9ws7ndFdd7xNU38V0IpUUstl6ugcaQqXNY3qWNy1/L 5b4VcHWfJWgjyyOMmGS56q+ehI23ssQ2aFMFsp5AYdZYN8ZheZ4ZVFf2TTQkc8RB zKBJGhdowPZgE+fsZ+Gur01E/wOj4FaqBITifIvCqxzayXIjAN3SOjqZbuCvwDrw V7KVx6s7RYrEFlUnyNvDCHh+VvckklmzoYGGqeWLrYw4C5UeKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/ih25EIrUkEUi8nclJhfD6QJfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMjAzMTcxNTktOWFjYS0z MTc4LThjOGEtNjE0MTEwN2FiNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQYvS7KpwPSfLZjUCIjzzxgNkazN8IH0TI/wu2MCsZeJbQ9Zy5a1zs5 3akl5xgvTmtfyPcCknfYazmbxbbJLQuxUPYDl6FpjiuQ1H0PEhPO2NgsTXBd84iK x6KgdPXBz4zGd4Ql2UejX6JzPerI5RVohtQF7GofmziQVtTxtUdzrMDLksppY6g9 7avXE2ypYpElP+neQvxU7kDaPH0X9hWfrll+C7GKY3855z/T0Gn+Zs620gqoZ4HZ 4AAi4s3zaJgKjnHNgRn5vxFSGJfUU8WN3c3KMGK2C9Dl8u13dOCjtRDpMjJ238Vh pgZFPgU2gv5M7IzefyzjLIRCRMIQYtU= -----END CERTIFICATE-----Generated at Thu Jun 4 13:27:52 2026 by rpki-client