$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa File: e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa (raw, json) Hash identifier: hl06VecfZozCsVgSTdEfv45qNVk2cUYwi7l/yk/stks= Subject key identifier: 25:0F:BE:5C:A0:0D:68:87:26:30:17:E7:C9:4A:22:8E:30:A9:0A:27 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584EB6E1A92EF2675C06EA36C680 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 21949 IP address blocks: 199.7.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:a9:2e:f2:67:5c:06:ea:36:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=ee199ce3-66ea-4100-b832-2767d121dad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:49:a9:d1:8f:db:74:c0:a6:e0:e9:41:c6: cb:d7:77:0c:72:e0:e7:bd:87:f5:78:99:a4:c7:dd: 2d:91:f2:39:dc:19:cd:5d:36:b3:3d:8a:5c:e2:09: 59:42:66:3b:6c:62:09:e4:39:c0:5a:b4:36:ba:27: ee:c0:50:9f:12:ae:34:d7:ac:66:6c:c6:25:97:20: 07:ad:76:a0:e9:99:c2:d2:d8:7a:df:7d:ae:da:bf: d9:6c:34:02:35:38:f5:45:f9:7d:0c:68:a7:c5:94: bc:63:04:58:3e:30:d9:60:08:8d:e9:c3:4d:9a:4b: de:df:3a:46:f6:c9:96:b5:67:1c:c6:b2:47:b7:64: 2f:b0:da:31:52:f4:ab:69:d4:9d:5e:ad:d6:fc:82: 3f:65:ca:ed:5f:d1:1d:7f:f3:6c:4a:e9:d3:a7:cb: 6f:32:8e:c0:a8:bd:58:7a:6f:bb:47:8e:cf:39:ec: d2:01:62:73:73:aa:24:da:95:f5:26:25:94:9d:bd: f7:94:a7:4b:2f:00:ed:fc:ee:f3:d3:bd:60:ee:20: 36:35:d6:06:63:28:6c:16:9b:77:cf:25:cf:9e:7a: dd:a8:01:35:b9:8b:aa:a7:1a:7e:fb:cc:10:e0:f9: e0:ec:77:7a:62:29:cc:d2:6a:24:53:4c:2f:dd:39: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0F:BE:5C:A0:0D:68:87:26:30:17:E7:C9:4A:22:8E:30:A9:0A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.7.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:70:c3:4c:56:25:0d:15:1d:3b:5b:54:3b:b0:d6:69:b2:d8: 06:57:98:d3:0b:c9:2d:c7:12:fd:b1:99:28:db:5c:23:b1:5b: 18:c0:cf:d2:4d:d0:1b:a7:73:01:14:3f:06:90:7c:bf:40:18: 90:cf:a4:f5:36:75:18:a2:3d:f6:69:97:99:74:bd:c0:f1:36: 53:6a:6f:98:6d:18:0f:f7:9e:a7:74:d3:23:e9:e8:9b:a7:a0: 87:04:df:b3:3b:25:38:57:cf:4c:14:c2:83:fd:f9:9c:4e:d8: 6a:fb:c2:3a:0a:ac:10:5f:b7:ff:fa:e1:f0:a6:f7:ad:d3:db: 6e:14:eb:f0:4e:95:5a:84:d8:0b:d2:d1:97:cc:dd:e0:01:04: 19:d0:9a:6b:ad:ad:81:e8:20:ae:81:0d:58:83:0c:04:af:c2: 2b:71:54:cc:7a:7b:13:06:87:68:6d:11:2b:18:c7:56:f3:8e: 36:7d:45:cc:94:97:f6:f1:d5:fb:b9:89:73:2d:ec:3f:8f:b2: 21:fd:b3:f9:71:1b:95:0c:ba:a0:7a:77:01:d5:42:8d:01:35: cc:7e:ed:33:c3:19:77:b8:45:21:bd:19:ee:8e:f8:71:1a:cd: be:bd:20:62:56:70:3e:41:04:a5:f5:bc:e9:2a:dd:ff:5a:cd: 76:13:a5:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624aku8mdcBuo2xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk ZWUxOTljZTMtNjZlYS00MTAwLWI4MzItMjc2N2QxMjFkYWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowBJqdGP23TApuDpQcbL13cMcuDnvYf1eJmk x90tkfI53BnNXTazPYpc4glZQmY7bGIJ5DnAWrQ2uifuwFCfEq4016xmbMYllyAH rXag6ZnC0th6332u2r/ZbDQCNTj1Rfl9DGinxZS8YwRYPjDZYAiN6cNNmkve3zpG 9smWtWccxrJHt2QvsNoxUvSradSdXq3W/II/ZcrtX9Edf/NsSunTp8tvMo7AqL1Y em+7R47POezSAWJzc6ok2pX1JiWUnb33lKdLLwDt/O7z071g7iA2NdYGYyhsFpt3 zyXPnnrdqAE1uYuqpxp++8wQ4Png7Hd6YinM0mokU0wv3TlfGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUPvlygDWiHJjAX58lKIo4wqQonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZTM0ZWZjZjAtZWE2OS0z Y2FjLWFlMmEtZTQ5ZWU4M2FhZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxweQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFww0xWJQ0VHTtbVDuw1mmy2AZXmNMLyS3HEv2xmSjbXCOxWxjAz9JN 0BuncwEUPwaQfL9AGJDPpPU2dRiiPfZpl5l0vcDxNlNqb5htGA/3nqd00yPp6Jun oIcE37M7JThXz0wUwoP9+ZxO2Gr7wjoKrBBft//64fCm963T224U6/BOlVqE2AvS 0ZfM3eABBBnQmmutrYHoIK6BDViDDASvwitxVMx6exMGh2htESsYx1bzjjZ9RcyU l/bx1fu5iXMt7D+PsiH9s/lxG5UMuqB6dwHVQo0BNcx+7TPDGXe4RSG9Ge6O+HEa zb69IGJWcD5BBKX1vOkq3f9azXYTpbc= -----END CERTIFICATE-----Generated at Sun Sep 20 23:13:16 2026 by rpki-client