$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa File: 7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa (raw, json) Hash identifier: 1yXYcLn08FPOk6hqrFkTtGg7UKPq2158Y++BB3Mb55E= Subject key identifier: 8F:43:DB:2E:28:B9:B5:DC:77:FF:63:3B:EE:A8:04:59:D6:ED:05:DD Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D8EF57F3FBB563245F8E94F40 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 21949 IP address blocks: 134.128.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7f:3f:bb:56:32:45:f8:e9:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d6b86b21-be4e-47c4-9935-b2f17a31e812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:0b:ad:1b:59:79:20:d3:3c:e3:c2:1a:ba: 48:d5:19:25:70:76:8a:8e:d0:d3:73:b2:38:47:98: 68:0a:7c:9f:8c:51:a2:9d:80:22:8a:a8:6a:75:6d: 90:48:f2:aa:7f:0b:4d:c2:f7:4c:63:a1:d3:1a:d2: be:2b:35:fb:73:9f:3e:95:c6:e7:aa:bf:35:50:01: 94:fc:5c:aa:2f:6e:09:67:d1:40:93:d8:62:2e:a6: 4b:fb:0d:d8:15:41:1d:e7:0e:12:75:fe:81:d2:f4: 9c:79:20:04:6d:61:64:8d:01:5f:a2:f2:65:e3:4d: 1d:05:ac:f6:ea:16:a3:14:8c:d7:2a:f1:1d:b8:26: 95:a8:34:2d:a9:dc:d2:bc:19:06:10:4c:90:d5:6a: 09:f2:5b:f2:50:b1:cb:f0:5e:e8:34:bd:5d:31:a0: f9:2c:cf:a5:89:39:ca:4a:89:26:c7:79:18:cc:a1: 89:3a:88:04:85:a1:8b:c9:e4:5b:b9:2b:e4:43:d4: 24:92:5a:42:2c:c4:e8:a3:73:42:75:44:63:e2:da: 58:80:d6:d6:4e:eb:77:ab:65:ca:96:71:99:43:20: 72:10:75:6e:c2:90:bd:cd:fa:f1:48:ab:29:30:03: d7:0e:56:3a:6a:9c:31:06:a0:9e:4f:47:0b:fc:b5: e7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:43:DB:2E:28:B9:B5:DC:77:FF:63:3B:EE:A8:04:59:D6:ED:05:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 134.128.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:20:77:c2:6a:b4:30:5e:4b:0a:f2:2c:b8:00:d0:6e:0d:e2: 1f:89:74:3b:15:cf:b4:cf:49:3a:d7:49:f8:30:04:73:a6:35: 28:37:4e:cc:65:62:e5:8b:c1:9c:38:f9:bc:59:44:19:0b:02: fe:b0:d6:32:48:51:04:85:7e:18:9a:e5:fd:c8:ec:56:ae:cf: 5b:1f:c9:1c:f4:f7:75:4e:c4:b0:e3:66:70:25:08:89:2a:50: 6a:a7:0e:45:a3:80:c2:99:53:40:51:8e:ec:f8:d3:82:80:2f: 94:c7:37:30:37:67:00:dd:43:c9:de:72:5b:ac:25:62:c2:a8: b5:20:83:2c:d5:54:ee:e0:c1:e8:bd:9b:15:9f:75:3b:86:74: 40:58:d5:80:25:73:03:22:6c:37:b2:43:54:13:ef:dd:90:84: 83:d4:6d:65:c8:5c:ea:64:ff:0a:cb:39:ff:b7:da:40:db:3f: 24:39:7a:ef:0e:09:ea:a2:7c:f4:64:f6:f1:35:22:11:86:40: 62:09:7e:9d:9a:45:e7:de:71:7e:8b:7c:72:fc:75:3e:55:97: 7a:fa:b2:fa:61:51:e2:d8:34:6d:5e:7f:61:ab:8b:31:2e:f6: 43:b1:e9:e3:b7:cb:aa:43:29:13:5d:a7:c8:99:eb:5d:e3:4a: 6f:9a:0e:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9X8/u1YyRfjpT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDZiODZiMjEtYmU0ZS00N2M0LTk5MzUtYjJmMTdhMzFlODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrULrRtZeSDTPOPCGrpI1RklcHaKjtDTc7I4 R5hoCnyfjFGinYAiiqhqdW2QSPKqfwtNwvdMY6HTGtK+KzX7c58+lcbnqr81UAGU /FyqL24JZ9FAk9hiLqZL+w3YFUEd5w4Sdf6B0vSceSAEbWFkjQFfovJl400dBaz2 6hajFIzXKvEduCaVqDQtqdzSvBkGEEyQ1WoJ8lvyULHL8F7oNL1dMaD5LM+liTnK Sokmx3kYzKGJOogEhaGLyeRbuSvkQ9QkklpCLMToo3NCdURj4tpYgNbWTut3q2XK lnGZQyByEHVuwpC9zfrxSKspMAPXDlY6apwxBqCeT0cL/LXn7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9D2y4oubXcd/9jO+6oBFnW7QXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvN2I2OWRkODItNWQ3Yi0z ZWY4LWJkOWItZWMwMDZmZGM4OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFhoDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMgd8JqtDBeSwryLLgA0G4N4h+JdDsVz7TPSTrXSfgwBHOmNSg3Tsxl YuWLwZw4+bxZRBkLAv6w1jJIUQSFfhia5f3I7Fauz1sfyRz093VOxLDjZnAlCIkq UGqnDkWjgMKZU0BRjuz404KAL5THNzA3ZwDdQ8neclusJWLCqLUggyzVVO7gwei9 mxWfdTuGdEBY1YAlcwMibDeyQ1QT792QhIPUbWXIXOpk/wrLOf+32kDbPyQ5eu8O CeqifPRk9vE1IhGGQGIJfp2aRefecX6LfHL8dT5Vl3r6svphUeLYNG1ef2GrizEu 9kOx6eO3y6pDKRNdp8iZ613jSm+aDjA= -----END CERTIFICATE-----Generated at Mon Apr 20 09:41:00 2026 by rpki-client