$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa File: e05980ac-da96-32ce-98dc-c394a2925f26.roa (raw, json) Hash identifier: M5ZZH+JrNZ+Z/YncX2srlZ6iF0NYaeMjU0HkwbLFn7M= Subject key identifier: 84:B8:FD:71:21:1C:B0:92:88:24:6E:27:46:72:6E:26:78:0E:EB:C1 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584AFC1C0319B5201ECFE947BA00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 21949 IP address blocks: 207.66.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:03:19:b5:20:1e:cf:e9:47:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=d1aec7f4-2c5c-4c41-be73-9910461b20a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4d:13:f4:4c:1d:c2:0b:fd:09:87:1d:83:d8: ec:67:ff:0c:24:3d:f8:8b:fb:8c:22:f9:7e:12:20: 88:01:e7:ae:c3:e9:bf:4f:fe:63:00:96:c8:41:5b: 8b:8b:e0:0b:55:0e:44:c3:00:21:bf:4a:2d:c7:9e: 88:96:6d:87:36:99:02:1e:31:c2:03:bb:77:02:21: 4a:9d:cb:60:db:0c:f1:07:32:5e:f6:d9:6a:5a:6e: e3:5a:4f:be:c1:2d:21:97:06:a4:e3:14:53:ca:00: e3:a6:13:c3:b6:f0:cd:4b:2f:9e:54:2a:41:ec:ec: bc:b0:6f:7e:17:a3:80:4c:c8:9c:3e:ab:6d:48:d3: 1b:0c:d0:15:64:db:c9:d8:d5:95:bb:87:a3:10:2d: 98:bd:dc:37:9c:ea:e7:8b:c2:43:2d:91:20:06:2c: a5:aa:98:49:1e:69:e3:45:db:03:56:41:a0:91:82: d7:ff:0d:da:86:fc:87:0e:f2:bf:26:6e:96:fb:06: d4:bd:84:a5:d2:d8:f5:5a:27:68:19:35:f0:b0:1a: 5d:c9:e9:04:0a:6a:a3:52:b4:f0:8a:8f:27:ad:b2: 49:0a:13:e0:ad:0a:8a:00:20:6c:6a:ea:30:75:92: f5:27:eb:e7:7f:9f:80:52:aa:0b:b4:7f:69:1f:e1: e7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B8:FD:71:21:1C:B0:92:88:24:6E:27:46:72:6E:26:78:0E:EB:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 207.66.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:65:ed:65:4e:7f:9b:6c:f6:53:48:d4:01:4c:22:2a:b2:02: bb:0b:c5:f0:5e:f7:05:95:f6:3f:d5:0d:31:fd:04:35:ce:b5: b4:12:2b:53:01:00:84:9a:03:89:4c:55:db:6f:85:36:1b:4e: 52:be:8f:13:3c:a9:ff:12:21:97:93:0f:00:64:6f:c1:ce:9d: 70:09:cd:a1:8b:e6:08:ff:e5:90:4b:e1:45:d2:4b:eb:77:73: 69:4f:b1:03:9b:85:83:74:91:4c:28:58:21:a6:d7:38:b3:04: 92:d8:3c:b6:ea:c5:70:4d:50:ef:cf:c9:c2:20:f5:e2:99:07: 35:72:5d:28:95:87:ac:49:31:1d:9a:6a:92:2c:25:1c:72:00: 82:5d:61:25:63:e9:77:29:63:82:2f:18:7f:c0:5f:ad:19:9a: c4:ff:04:c3:ac:cb:5d:6c:f1:94:3f:03:e4:3c:a4:dc:bc:14: 89:1a:60:98:0b:e4:25:cb:a1:f6:6d:55:58:e0:4f:16:24:2c: ca:4d:00:32:7f:61:ea:21:24:d4:8a:de:bd:8e:63:58:8a:62: 4a:b8:8b:41:17:b2:b0:e7:cf:b6:9f:a7:1b:a9:e0:2a:64:54: ed:b6:f3:d1:ec:c0:30:cb:ba:29:c5:18:5b:0d:9f:e9:94:32: 1b:6b:43:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAMZtSAez+lHugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDFhZWM3ZjQtMmM1Yy00YzQxLWJlNzMtOTkxMDQ2MWIyMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU0T9Ewdwgv9CYcdg9jsZ/8MJD34i/uMIvl+ EiCIAeeuw+m/T/5jAJbIQVuLi+ALVQ5EwwAhv0otx56Ilm2HNpkCHjHCA7t3AiFK nctg2wzxBzJe9tlqWm7jWk++wS0hlwak4xRTygDjphPDtvDNSy+eVCpB7Oy8sG9+ F6OATMicPqttSNMbDNAVZNvJ2NWVu4ejEC2Yvdw3nOrni8JDLZEgBiylqphJHmnj RdsDVkGgkYLX/w3ahvyHDvK/Jm6W+wbUvYSl0tj1WidoGTXwsBpdyekECmqjUrTw io8nrbJJChPgrQqKACBsauowdZL1J+vnf5+AUqoLtH9pH+HnZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS4/XEhHLCSiCRuJ0ZybiZ4DuvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZTA1OTgwYWMtZGE5Ni0z MmNlLTk4ZGMtYzM5NGEyOTI1ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz0J4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBl7WVOf5ts9lNI1AFMIiqyArsLxfBe9wWV9j/VDTH9BDXOtbQSK1MB AISaA4lMVdtvhTYbTlK+jxM8qf8SIZeTDwBkb8HOnXAJzaGL5gj/5ZBL4UXSS+t3 c2lPsQObhYN0kUwoWCGm1zizBJLYPLbqxXBNUO/PycIg9eKZBzVyXSiVh6xJMR2a apIsJRxyAIJdYSVj6XcpY4IvGH/AX60ZmsT/BMOsy11s8ZQ/A+Q8pNy8FIkaYJgL 5CXLofZtVVjgTxYkLMpNADJ/YeohJNSK3r2OY1iKYkq4i0EXsrDnz7afpxup4Cpk VO2289HswDDLuinFGFsNn+mUMhtrQz8= -----END CERTIFICATE-----Generated at Sat Nov 1 02:28:24 2025 by rpki-client