$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa File: 55c10b42-1e3f-391a-803f-94a6efd0d529.roa (raw, json) Hash identifier: 9Ym8pC30gRngD35xobOnpB7YBc/r7hIXtk4k56vUNNk= Subject key identifier: F1:B2:39:AA:85:BE:D8:C6:FA:4C:8D:61:04:17:96:1D:CC:92:96:CB Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584CD6D2079D437DE72585718B00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 21949 IP address blocks: 173.243.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:07:9d:43:7d:e7:25:85:71:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=099cb311-f827-4073-953d-afaa42814c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:24:18:97:45:08:87:22:bf:32:0a:24:ec: 8e:da:5e:29:d9:37:75:c3:34:74:a9:0a:61:3d:85: f5:ae:f5:31:bc:54:af:4c:c0:dc:24:33:67:b6:96: a3:39:fc:21:c9:02:a7:fd:c6:3c:23:55:29:f2:0a: 7b:d7:42:4e:da:c0:47:51:e3:04:b1:12:b7:5d:ef: eb:86:fd:3f:b5:f5:27:e3:71:ec:fa:fa:23:25:81: a8:fb:21:b2:d4:7f:a1:73:8c:5b:3f:58:44:d5:61: a4:3c:cf:b7:e9:d4:96:ff:44:18:16:66:db:ea:f6: 1b:97:67:40:22:07:1f:c1:43:c5:d8:68:30:20:31: bf:69:b2:c4:d1:17:59:47:f6:32:18:52:57:c8:aa: cd:25:97:70:65:4b:d8:79:a9:0d:4a:4f:48:86:e1: 11:ab:73:f6:21:5f:73:e0:37:9e:68:c8:87:df:32: aa:54:83:d9:78:27:fd:f6:b0:bf:e2:52:f4:a6:f4: c1:ae:70:13:1d:e6:ef:c4:cb:9b:f8:37:3b:16:79: 89:6c:d3:45:41:b6:1a:1d:7e:45:35:33:13:fb:ea: 56:68:be:75:41:59:b0:c8:7c:c7:8b:bb:4b:8b:25: 81:9b:02:f0:18:7c:15:48:25:64:e0:c4:1e:38:f4: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B2:39:AA:85:BE:D8:C6:FA:4C:8D:61:04:17:96:1D:CC:92:96:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 173.243.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ff:d6:49:f2:41:32:9e:92:c5:c1:dc:fa:bc:10:1c:ad:0e: 5d:b9:59:f5:c0:9f:b8:2d:47:e1:1d:d7:eb:05:81:5f:2a:ec: d7:73:fd:0f:b2:68:fd:80:6a:f9:6e:ad:75:a3:6b:d8:a4:eb: fd:23:5c:6c:b8:07:5d:eb:f2:a2:22:57:e2:8f:c7:fd:1a:7b: 87:41:c9:69:48:cd:37:e5:c1:0c:3a:ba:01:ea:ac:03:ee:99: 0d:35:90:60:91:5a:c7:07:3c:03:57:5d:4e:48:ae:d9:c1:82: b3:c0:38:84:29:d3:67:05:c0:60:34:ff:63:d6:a2:ad:f5:f9: 56:4b:7e:d4:0b:66:61:73:a3:a7:2f:e7:a5:75:c1:f5:42:6d: 90:6d:a2:a9:37:6d:de:8e:7b:59:4d:4a:d9:ee:3f:3a:80:ef: 20:f5:12:47:58:c8:3b:e9:e2:6f:f5:59:3c:65:d7:e8:53:6d: 44:f4:aa:5b:68:71:29:84:19:7b:46:02:45:1d:31:a2:41:fb: cb:ce:17:61:03:52:3f:d7:9d:f2:99:61:a9:44:a1:d0:14:e2: 84:9a:d5:bc:14:06:43:bc:d7:47:21:d2:eb:08:06:9a:78:ed: 06:48:e6:51:c7:d8:51:37:41:93:df:30:4e:f0:79:f5:3c:07: 72:26:0e:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0gedQ33nJYVxiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk MDk5Y2IzMTEtZjgyNy00MDczLTk1M2QtYWZhYTQyODE0YzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllwkGJdFCIcivzIKJOyO2l4p2Td1wzR0qQph PYX1rvUxvFSvTMDcJDNntpajOfwhyQKn/cY8I1Up8gp710JO2sBHUeMEsRK3Xe/r hv0/tfUn43Hs+vojJYGo+yGy1H+hc4xbP1hE1WGkPM+36dSW/0QYFmbb6vYbl2dA IgcfwUPF2GgwIDG/abLE0RdZR/YyGFJXyKrNJZdwZUvYeakNSk9IhuERq3P2IV9z 4DeeaMiH3zKqVIPZeCf99rC/4lL0pvTBrnATHebvxMub+Dc7FnmJbNNFQbYaHX5F NTMT++pWaL51QVmwyHzHi7tLiyWBmwLwGHwVSCVk4MQeOPS4rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGyOaqFvtjG+kyNYQQXlh3MkpbLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNTVjMTBiNDItMWUzZi0z OTFhLTgwM2YtOTRhNmVmZDBkNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD/1knyQTKeksXB3Pq8EBytDl25WfXAn7gtR+Ed1+sFgV8q7Ndz/Q+y aP2AavlurXWja9ik6/0jXGy4B13r8qIiV+KPx/0ae4dByWlIzTflwQw6ugHqrAPu mQ01kGCRWscHPANXXU5IrtnBgrPAOIQp02cFwGA0/2PWoq31+VZLftQLZmFzo6cv 56V1wfVCbZBtoqk3bd6Oe1lNStnuPzqA7yD1EkdYyDvp4m/1WTxl1+hTbUT0qlto cSmEGXtGAkUdMaJB+8vOF2EDUj/XnfKZYalEodAU4oSa1bwUBkO810ch0usIBpp4 7QZI5lHH2FE3QZPfME7wefU8B3ImDkU= -----END CERTIFICATE-----Generated at Mon Mar 2 11:23:05 2026 by rpki-client