$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa File: 33b25462-3f2f-33b4-ab16-bb27bccd452c.roa (raw, json) Hash identifier: GTWyVYBZeHg/UTWCI1Pms4ZV7PFmX7xIthoy+FCk1j4= Subject key identifier: FF:D2:5E:00:EC:79:E1:DA:16:9D:4B:42:4F:41:AE:C2:C6:C7:A3:A3 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584E059B42038DFF53AF7E542780 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 21949 IP address blocks: 198.22.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:42:03:8d:ff:53:af:7e:54:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=2d861568-e7bc-4dbc-ba83-3cda5839da50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:66:5e:8e:2c:d3:6e:f3:a4:a0:62:d2:38:e1: 92:47:c7:53:73:38:16:13:e7:37:50:3c:1d:c6:9a: 6a:5c:0d:41:25:56:5e:e9:26:a2:4b:df:75:38:90: 23:4e:70:2a:4b:b7:d0:94:4e:81:fb:04:39:7f:36: 9e:1f:c6:49:57:6e:bf:d1:9a:1f:60:b2:ff:47:b7: 8b:c1:60:26:e3:45:aa:2b:62:68:30:58:39:a8:5c: 23:65:9a:22:ff:cb:3c:e1:4d:dc:c4:ba:e5:77:f3: 9f:e8:21:3d:56:0c:66:19:67:d1:64:62:c2:e5:54: 0e:79:5a:68:0f:d8:a5:6a:2d:33:da:3a:50:f0:0b: fb:56:05:e6:72:54:d3:58:3f:b0:43:f3:e7:44:bd: c5:39:2a:56:f5:32:34:59:ba:9c:d1:82:9e:8d:5d: 43:ef:dd:5d:3d:df:0a:95:57:0f:b7:d5:fa:90:d9: c1:b6:e7:18:82:8c:d9:31:b9:f5:8c:4e:82:f5:c8: 45:2d:da:cc:43:a1:b3:e9:41:ea:14:fb:1b:3e:d4: f4:c2:d5:40:d0:ca:ee:ab:8d:09:25:bb:89:03:53: a3:2a:01:f2:7e:20:44:60:1b:46:98:2a:ff:c1:d1: 11:d7:2c:e4:a0:ef:d8:b7:a5:fb:6e:33:be:30:f8: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D2:5E:00:EC:79:E1:DA:16:9D:4B:42:4F:41:AE:C2:C6:C7:A3:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 198.22.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:24:45:2c:53:68:f0:41:13:2c:fb:29:dc:b2:75:c4:a8:86: 05:25:98:7c:27:0d:f3:f7:9b:3b:54:9e:ce:68:57:0b:d4:a8: 80:1b:14:2b:c8:1a:5d:33:34:99:f9:72:51:34:32:6d:b6:03: 9f:23:0a:75:07:22:1a:97:67:d0:bd:75:4a:df:3f:21:d6:07: a8:18:aa:1c:62:9b:0c:6d:dd:a2:cd:5e:d9:11:ba:d9:2e:6d: 97:8f:d8:ae:91:3d:29:1b:5e:ea:11:d3:e8:ae:21:eb:3e:1a: ed:dd:d3:fb:ac:fe:37:ca:58:13:c4:45:5a:7f:ba:90:6d:a5: e3:0e:e9:b7:f2:32:a8:17:ea:92:03:7a:c7:69:2b:70:36:17: 9c:90:0f:64:2f:45:58:1c:b5:b2:0f:7e:c8:0b:59:43:7b:b8: eb:b7:8a:2d:cc:c7:a9:56:54:f8:2e:7d:1f:fa:e7:cc:eb:aa: 70:d3:e9:e1:d6:39:0c:d2:26:3e:e3:19:25:2f:47:2f:e7:5d: e7:0e:b0:08:49:a2:ee:d7:34:ce:7a:ee:b4:54:b5:22:6e:de: 16:08:59:d4:18:ef:fb:82:3e:95:fe:92:e2:d2:83:92:1e:b9: 4d:4c:fb:eb:ae:d5:29:5d:f5:f2:4e:b8:1d:87:ba:c8:a5:9e: 9b:ce:91:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm0IDjf9Tr35UJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MmQ4NjE1NjgtZTdiYy00ZGJjLWJhODMtM2NkYTU4MzlkYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGZejizTbvOkoGLSOOGSR8dTczgWE+c3UDwd xppqXA1BJVZe6SaiS991OJAjTnAqS7fQlE6B+wQ5fzaeH8ZJV26/0ZofYLL/R7eL wWAm40WqK2JoMFg5qFwjZZoi/8s84U3cxLrld/Of6CE9VgxmGWfRZGLC5VQOeVpo D9ilai0z2jpQ8Av7VgXmclTTWD+wQ/PnRL3FOSpW9TI0Wbqc0YKejV1D791dPd8K lVcPt9X6kNnBtucYgozZMbn1jE6C9chFLdrMQ6Gz6UHqFPsbPtT0wtVA0Mruq40J JbuJA1OjKgHyfiBEYBtGmCr/wdER1yzkoO/Yt6X7bjO+MPgWYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/SXgDseeHaFp1LQk9BrsLGx6OjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMzNiMjU0NjItM2YyZi0z M2I0LWFiMTYtYmIyN2JjY2Q0NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwkRSxTaPBBEyz7KdyydcSohgUlmHwnDfP3mztUns5oVwvUqIAbFCvI Gl0zNJn5clE0Mm22A58jCnUHIhqXZ9C9dUrfPyHWB6gYqhximwxt3aLNXtkRutku bZeP2K6RPSkbXuoR0+iuIes+Gu3d0/us/jfKWBPERVp/upBtpeMO6bfyMqgX6pID esdpK3A2F5yQD2QvRVgctbIPfsgLWUN7uOu3ii3Mx6lWVPgufR/658zrqnDT6eHW OQzSJj7jGSUvRy/nXecOsAhJou7XNM567rRUtSJu3hYIWdQY7/uCPpX+kuLSg5Ie uU1M++uu1Sld9fJOuB2HusilnpvOkeY= -----END CERTIFICATE-----Generated at Thu Jun 4 13:27:52 2026 by rpki-client