$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa File: 33b25462-3f2f-33b4-ab16-bb27bccd452c.roa (raw, json) Hash identifier: 3WVzc6+Gh/0iCjNG69f2MXvFBJmySNNQr18L9/M1oIs= Subject key identifier: 5F:43:03:06:C5:6C:C6:F3:22:08:6F:87:A9:16:B0:9E:1A:D3:C9:D5 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584EA79D0ECB0739DF76B97BCB40 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21949 IP address blocks: 198.22.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:0e:cb:07:39:df:76:b9:7b:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dd605929-1084-4b73-9ec4-6829092b64b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:82:6f:34:8f:84:94:54:cc:3f:e5:ae:23: 3a:bc:2a:80:ae:49:0b:08:47:bc:83:15:5b:8b:36: cb:fa:d7:fd:0e:29:aa:8c:3c:c3:fb:85:a8:b3:27: 50:be:67:2e:0d:3f:29:5d:0f:a2:c1:67:f9:de:84: b4:59:a0:aa:c1:e2:af:84:ef:92:4f:a5:e5:50:aa: 6a:5e:35:c2:d7:9c:84:ed:81:cb:8a:cd:85:f7:70: e3:84:90:d7:9e:7c:c8:db:2b:72:6c:b4:53:b8:69: 86:d3:d8:6d:51:13:94:ab:a2:0a:35:7d:08:93:d6: 93:a2:46:b0:f0:3b:68:d9:7a:17:9c:bc:31:25:0b: 95:4b:86:e1:43:0f:fc:b1:73:75:39:82:a0:36:2b: 1d:62:5c:ef:f8:53:0c:a7:55:98:38:db:81:98:fa: 9b:79:db:ca:b6:a8:ab:3e:01:d7:f6:9a:2c:fa:11: c8:b1:f8:c4:9c:db:c0:fc:60:66:89:73:a9:6e:cb: f0:7c:be:c6:b4:d5:43:ba:c8:d6:ae:e9:eb:37:88: 1d:58:68:08:7f:3b:c7:59:c0:eb:5a:2b:9f:b8:28: 26:a9:fa:dc:e3:38:73:68:31:98:a1:b8:5c:3e:71: 80:bc:b8:dc:7a:dc:74:44:d7:f5:f8:e6:74:d3:9f: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:43:03:06:C5:6C:C6:F3:22:08:6F:87:A9:16:B0:9E:1A:D3:C9:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 198.22.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ee:d9:e2:e6:a9:94:65:9b:26:a0:18:be:e1:35:61:eb:e7: 5f:e7:cb:5e:11:5f:03:d9:b5:03:21:71:7a:a0:a0:c3:0a:cc: 39:e8:85:3a:39:92:fe:37:bb:d3:6d:f1:76:00:65:02:af:ad: f3:c1:3d:f3:52:ef:98:11:89:61:d6:a6:82:f6:df:61:80:91: fa:64:59:0f:f2:4e:ba:f2:36:0d:08:35:07:43:11:1e:8e:ff: 28:97:70:69:15:12:e8:4c:b5:d0:69:2f:b0:55:f4:96:82:0d: 40:3e:4b:55:9d:40:51:21:97:a7:94:d6:ac:0b:a4:a4:45:22: 0b:59:3c:bc:7d:4f:db:bd:64:21:35:1d:0d:35:e1:c0:b7:c0: 48:0b:5c:5a:e1:15:7b:1b:32:f4:34:02:03:93:24:00:4c:73: da:15:5d:60:7a:89:76:9a:d0:d5:43:4e:2d:0f:2a:04:01:d2: cf:a0:75:db:97:19:d4:76:b1:68:dd:56:be:14:c7:e3:a3:a5: ca:ef:83:a2:12:b4:e8:6a:26:74:eb:a8:a7:ed:e6:65:e9:61: 0f:fb:06:02:6d:4f:1d:25:ed:4a:96:05:3d:c9:d9:dc:2d:26: cf:f5:66:c5:80:15:b1:1a:6b:87:78:62:bc:99:63:96:63:f3: b6:28:17:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnQ7LBznfdrl7y0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGQ2MDU5MjktMTA4NC00YjczLTllYzQtNjgyOTA5MmI2NGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA6CbzSPhJRUzD/lriM6vCqArkkLCEe8gxVb izbL+tf9DimqjDzD+4WosydQvmcuDT8pXQ+iwWf53oS0WaCqweKvhO+ST6XlUKpq XjXC15yE7YHLis2F93DjhJDXnnzI2ytybLRTuGmG09htUROUq6IKNX0Ik9aTokaw 8Dto2XoXnLwxJQuVS4bhQw/8sXN1OYKgNisdYlzv+FMMp1WYONuBmPqbedvKtqir PgHX9pos+hHIsfjEnNvA/GBmiXOpbsvwfL7GtNVDusjWrunrN4gdWGgIfzvHWcDr WiufuCgmqfrc4zhzaDGYobhcPnGAvLjcetx0RNf1+OZ005+cqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9DAwbFbMbzIghvh6kWsJ4a08nVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMzNiMjU0NjItM2YyZi0z M2I0LWFiMTYtYmIyN2JjY2Q0NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHu2eLmqZRlmyagGL7hNWHr51/ny14RXwPZtQMhcXqgoMMKzDnohTo5 kv43u9Nt8XYAZQKvrfPBPfNS75gRiWHWpoL232GAkfpkWQ/yTrryNg0INQdDER6O /yiXcGkVEuhMtdBpL7BV9JaCDUA+S1WdQFEhl6eU1qwLpKRFIgtZPLx9T9u9ZCE1 HQ014cC3wEgLXFrhFXsbMvQ0AgOTJABMc9oVXWB6iXaa0NVDTi0PKgQB0s+gdduX GdR2sWjdVr4Ux+Ojpcrvg6IStOhqJnTrqKft5mXpYQ/7BgJtTx0l7UqWBT3J2dwt Js/1ZsWAFbEaa4d4YryZY5Zj87YoF18= -----END CERTIFICATE-----Generated at Mon Sep 21 16:44:35 2026 by rpki-client