$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa File: c1af7f83-54d1-3637-b23a-1fac1823fd70.roa (raw, json) Hash identifier: XflxbC0KroH6i0R7ucCbKte01MPCTzeCCh/MQ57zIXE= Subject key identifier: DF:96:0E:49:5D:B0:6E:26:A3:CF:9C:78:32:56:D1:3E:76:5C:9E:5C Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584DE84B5BEC2F7546C1FCEDB500 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 21949 IP address blocks: 65.97.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:5b:ec:2f:75:46:c1:fc:ed:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=3a313eea-2a54-4374-833e-4a077b879425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bc:5d:af:85:57:0f:aa:b2:04:00:32:7c:e1: 2e:d1:dc:e7:ed:b1:36:95:66:93:ed:3d:ae:3e:96: 8a:f0:13:86:9b:e7:55:2e:59:4c:b1:4a:bd:2f:99: 0f:73:5e:77:4c:60:07:01:8e:f2:9d:1d:18:36:a9: cc:5b:15:e4:5f:72:d9:5d:5d:b8:2a:0a:fe:cb:eb: 51:ef:2c:4b:dc:8f:54:e0:da:36:cb:6b:cd:11:60: 85:f6:ca:cd:7f:ee:93:eb:06:6a:12:9b:6d:af:5a: 52:eb:96:d0:2f:d6:fd:86:60:1e:6f:a6:34:bb:e7: 37:0a:76:9c:5f:8d:b3:1a:c7:50:ff:fd:6d:d2:42: ae:8b:51:4b:fa:d8:c6:da:84:21:f3:dc:0a:b2:d6: 73:0f:76:fb:4e:5a:87:6c:41:90:07:1f:88:ab:06: 96:4d:01:b9:f6:1e:00:39:ad:98:83:8f:a0:f3:2c: 98:9f:70:db:18:4f:bc:34:f7:6c:67:b3:e8:7b:6b: ca:89:e8:74:40:2a:bb:53:b0:d3:d3:c2:11:9b:96: d7:ad:3a:7d:3a:54:8f:17:e8:97:d6:2e:4a:76:e2: f8:04:47:ac:1f:19:53:cf:9e:5c:95:17:48:54:21: 84:3d:2f:f4:30:57:92:8e:23:4e:a1:15:39:43:0d: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:96:0E:49:5D:B0:6E:26:A3:CF:9C:78:32:56:D1:3E:76:5C:9E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 65.97.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c7:42:ce:6c:04:f5:0b:23:e6:96:a7:38:30:31:ca:9e:b5: 55:62:2f:9d:8a:29:19:ed:e0:7c:d6:4c:52:94:b9:ef:b0:75: af:7d:06:a8:30:24:20:57:a9:fc:28:36:32:83:fb:d9:24:67: 38:22:41:fe:d8:53:7f:62:28:a5:43:60:c8:36:4a:85:86:1f: 8a:49:fe:7f:18:de:f7:ba:d0:2f:5c:96:f0:b9:ec:41:bf:39: de:1d:31:fa:85:c1:bf:23:de:7f:78:9e:93:79:2e:7e:e0:bf: 59:95:d9:35:03:2f:64:34:ab:5f:fa:e1:ce:e4:ca:a2:24:dc: b6:d5:c3:f0:b0:1b:41:6a:3a:b2:c2:58:6c:50:42:7b:38:08: 55:49:7b:a7:47:eb:9d:2f:23:26:d6:e5:d6:5b:4f:b5:2a:1f: 22:e6:91:a5:70:14:6e:7a:d6:8b:4b:2c:b2:20:9f:39:54:ba: 8f:7b:54:b4:1f:6e:bc:95:54:a0:28:71:01:89:c5:ad:1b:77: 15:9f:72:9e:d9:e6:45:93:fd:5a:5a:23:92:c0:1c:82:e5:57: 02:e7:ed:08:81:fa:b2:e8:9b:02:d8:b9:ef:c7:8c:d6:bf:62: d8:4c:a4:7b:49:a9:2d:31:6f:b9:23:b1:ed:02:2e:80:4b:95: 73:d8:99:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oS1vsL3VGwfzttQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk M2EzMTNlZWEtMmE1NC00Mzc0LTgzM2UtNGEwNzdiODc5NDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLxdr4VXD6qyBAAyfOEu0dzn7bE2lWaT7T2u PpaK8BOGm+dVLllMsUq9L5kPc153TGAHAY7ynR0YNqnMWxXkX3LZXV24Kgr+y+tR 7yxL3I9U4No2y2vNEWCF9srNf+6T6wZqEpttr1pS65bQL9b9hmAeb6Y0u+c3Cnac X42zGsdQ//1t0kKui1FL+tjG2oQh89wKstZzD3b7TlqHbEGQBx+IqwaWTQG59h4A Oa2Yg4+g8yyYn3DbGE+8NPdsZ7Poe2vKieh0QCq7U7DT08IRm5bXrTp9OlSPF+iX 1i5KduL4BEesHxlTz55clRdIVCGEPS/0MFeSjiNOoRU5Qw2gXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+WDkldsG4mo8+ceDJW0T52XJ5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYzFhZjdmODMtNTRkMS0z NjM3LWIyM2EtMWZhYzE4MjNmZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQWEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnHQs5sBPULI+aWpzgwMcqetVViL52KKRnt4HzWTFKUue+wda99Bqgw JCBXqfwoNjKD+9kkZzgiQf7YU39iKKVDYMg2SoWGH4pJ/n8Y3ve60C9clvC57EG/ Od4dMfqFwb8j3n94npN5Ln7gv1mV2TUDL2Q0q1/64c7kyqIk3LbVw/CwG0FqOrLC WGxQQns4CFVJe6dH650vIybW5dZbT7UqHyLmkaVwFG561otLLLIgnzlUuo97VLQf bryVVKAocQGJxa0bdxWfcp7Z5kWT/VpaI5LAHILlVwLn7QiB+rLomwLYue/HjNa/ YthMpHtJqS0xb7kjse0CLoBLlXPYmdM= -----END CERTIFICATE-----Generated at Thu Jun 4 13:29:40 2026 by rpki-client