$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa File: b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa (raw, json) Hash identifier: ksJlnCkskM88YMAjehmH60IXSE9q/bawhq/e81XNGGg= Subject key identifier: C1:AB:EC:A9:87:3F:99:94:54:20:26:2C:6F:4E:43:D0:1A:93:CA:75 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584DF21085E3D08EE68542DD7E80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 21949 IP address blocks: 199.45.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:85:e3:d0:8e:e6:85:42:dd:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=4ec00196-364b-4209-b7d3-5ecd6cadff00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:27:e3:50:28:5e:f0:b3:10:05:2c:cc:ea:87: 93:6d:e7:fa:39:f4:f6:b9:6d:28:cf:ad:74:dc:a7: 43:c8:4b:22:86:87:e8:2f:11:a2:f4:0c:ce:58:2a: fc:b0:c1:36:69:46:99:9a:63:eb:bd:72:b9:8c:4c: 19:5f:e1:0c:6b:f8:32:0c:07:b5:0a:d3:6b:57:16: 79:e8:d1:56:df:fc:fe:f2:26:40:1c:e4:bd:32:64: 63:92:e1:b2:62:77:a0:6b:19:c8:8d:78:eb:24:a7: 29:40:8b:f8:35:8a:ee:6c:9a:51:9b:7c:b0:f6:a8: 1f:32:fc:5b:54:8a:75:11:a4:a7:69:8c:5f:b9:7d: 01:ae:54:bd:e1:b1:6f:6b:46:0b:a0:0a:c6:5c:b2: bb:47:af:c8:b0:8f:85:d5:3c:91:49:64:47:f8:f2: ee:be:bd:56:34:8c:51:5f:32:68:17:c4:79:b1:7f: f4:7d:b8:3f:c8:bb:db:3c:f2:6a:e0:fb:23:21:bb: 8c:03:51:c7:9b:48:18:75:5b:64:36:2f:67:c7:11: a6:a4:5c:29:d9:4c:75:ef:47:1c:31:0e:fa:b5:bb: ea:0f:ea:db:23:30:4d:35:35:be:ef:b3:16:6e:7c: 62:57:18:d4:f0:8f:83:e6:9c:d4:37:a3:b3:e1:7b: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AB:EC:A9:87:3F:99:94:54:20:26:2C:6F:4E:43:D0:1A:93:CA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.45.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a2:16:fb:68:b9:5e:b2:32:83:35:ca:c9:bc:8c:54:7d:df: 69:14:84:d0:62:c4:3e:fa:70:6d:5d:08:08:ba:cc:51:38:97: e8:b0:e5:62:e7:02:ee:d5:8c:91:4d:16:89:23:5e:ac:b3:07: 90:d3:1a:32:6f:76:5b:6b:08:5e:25:ed:dc:ff:d9:2e:16:ad: 7f:d0:d4:99:cb:fb:21:5d:86:01:12:09:13:40:64:bb:d1:05: 8c:f5:28:b0:8c:d2:18:77:1a:57:b7:9a:08:f9:8b:e2:85:1e: 8d:58:93:1e:ec:27:12:92:01:c3:6f:22:24:0d:81:b4:56:7b: 4f:20:b1:3d:fb:21:c5:46:3c:01:5e:db:4c:4b:f9:0b:45:f0: 1b:e6:96:5a:92:ad:49:18:2f:a5:b8:56:a8:4c:31:f5:65:26: 5e:da:e2:60:81:fc:e9:20:f7:b3:60:0c:31:a2:50:84:39:75: 63:4d:a7:7c:f1:33:00:77:2f:a0:70:c2:0a:69:04:43:64:8b: 90:98:b9:ef:03:f5:ad:c9:bc:1c:1b:47:8e:89:a4:ea:51:da: d3:c9:76:7c:b4:3c:71:c0:cf:c0:f2:6c:66:a2:44:22:d6:5a: e1:1d:f1:ed:ef:2e:85:13:bc:46:78:55:49:6a:f0:31:2e:42: 8b:23:d9:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEIXj0I7mhULdfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk NGVjMDAxOTYtMzY0Yi00MjA5LWI3ZDMtNWVjZDZjYWRmZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyfjUChe8LMQBSzM6oeTbef6OfT2uW0oz610 3KdDyEsihofoLxGi9AzOWCr8sME2aUaZmmPrvXK5jEwZX+EMa/gyDAe1CtNrVxZ5 6NFW3/z+8iZAHOS9MmRjkuGyYnegaxnIjXjrJKcpQIv4NYrubJpRm3yw9qgfMvxb VIp1EaSnaYxfuX0BrlS94bFva0YLoArGXLK7R6/IsI+F1TyRSWRH+PLuvr1WNIxR XzJoF8R5sX/0fbg/yLvbPPJq4PsjIbuMA1HHm0gYdVtkNi9nxxGmpFwp2Ux170cc MQ76tbvqD+rbIzBNNTW+77MWbnxiVxjU8I+D5pzUN6Oz4Xu5mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGr7KmHP5mUVCAmLG9OQ9Aak8p1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYjBkZmNjNmQtZjNkZi0z MjU2LWJlNzMtMGU5Njk0ZThlNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+iFvtouV6yMoM1ysm8jFR932kUhNBixD76cG1dCAi6zFE4l+iw5WLn Au7VjJFNFokjXqyzB5DTGjJvdltrCF4l7dz/2S4WrX/Q1JnL+yFdhgESCRNAZLvR BYz1KLCM0hh3Gle3mgj5i+KFHo1Ykx7sJxKSAcNvIiQNgbRWe08gsT37IcVGPAFe 20xL+QtF8BvmllqSrUkYL6W4VqhMMfVlJl7a4mCB/Okg97NgDDGiUIQ5dWNNp3zx MwB3L6BwwgppBENki5CYue8D9a3JvBwbR46JpOpR2tPJdny0PHHAz8DybGaiRCLW WuEd8e3vLoUTvEZ4VUlq8DEuQosj2To= -----END CERTIFICATE-----Generated at Thu Jun 4 13:27:52 2026 by rpki-client