$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73ddd44a-b27f-3ea4-bcd3-7512a2dc55f2.roa File: 73ddd44a-b27f-3ea4-bcd3-7512a2dc55f2.roa (raw, json) Hash identifier: bwMcO1IYtfphXbG0l81TM4mbAPKTcG11H/Fxwm/TGhg= Subject key identifier: 8B:3A:69:0A:8B:73:82:55:5A:0B:5A:56:9D:F3:4C:C6:2B:8B:FC:4F Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D4D5A4529EE4FBE069A4FB800 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73ddd44a-b27f-3ea4-bcd3-7512a2dc55f2.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 21949 IP address blocks: 208.122.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:45:29:ee:4f:be:06:9a:4f:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=6c42b10b-7c2d-4bc8-839b-4ea85425a286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f5:0b:4c:9a:95:25:e0:1b:78:f3:c6:d8:40: d3:f8:46:fa:0e:ca:0b:6f:04:d3:d6:68:a2:66:82: 6e:dc:79:80:8b:89:eb:99:45:9e:a2:72:8f:82:a8: 0a:f0:2a:f2:0e:4c:e1:82:c7:ab:61:af:b1:5b:ed: bb:30:37:78:f0:58:69:68:c4:dd:a3:83:73:c3:93: fc:97:43:31:e5:b5:91:86:74:72:23:d2:54:de:21: b8:cb:e5:fc:d1:e9:c0:32:70:46:07:46:6b:a9:8d: 9b:6c:25:77:e3:1a:94:ca:4d:02:60:79:d1:ea:00: 39:fb:91:95:8d:c8:7d:6d:02:92:94:9c:90:b8:68: 69:a8:4f:64:a3:5c:d0:33:50:59:4c:b2:1b:cd:15: 81:04:e5:d8:5c:91:38:9f:0b:90:c8:e2:d7:85:9e: 7a:6a:f7:a1:c1:a9:c5:68:2f:3b:7d:54:a5:d5:04: 1b:37:b8:66:71:ca:1c:70:fd:5f:77:d1:5d:f0:f5: 1c:e6:58:86:3a:4d:ad:9f:67:dc:0c:b2:35:50:b8: e6:3b:1d:0a:42:b1:f4:fa:b2:a1:d1:5a:dd:33:3b: 16:ec:ec:8f:9c:94:77:ac:36:32:c7:b9:f3:b9:55: e6:bf:31:43:9f:2e:69:13:56:51:59:e6:79:88:85: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3A:69:0A:8B:73:82:55:5A:0B:5A:56:9D:F3:4C:C6:2B:8B:FC:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73ddd44a-b27f-3ea4-bcd3-7512a2dc55f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 208.122.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8f:a5:6b:b7:2b:35:7c:e3:15:2e:1b:d9:db:f7:1c:8e:7e: c4:84:68:c1:e6:9a:ea:0b:13:84:66:6a:7c:15:ae:2e:f6:96: 8b:92:d7:a7:38:4a:7a:a7:ac:99:18:66:00:f3:49:cc:fa:3f: 74:97:7f:e5:db:c6:c8:25:21:0b:10:9b:30:41:fe:d6:ba:8c: b7:6b:01:e9:a5:81:b3:69:f5:77:3f:33:07:45:be:2b:d5:35: d8:66:c4:77:8f:41:9d:09:04:11:e1:bd:58:a1:3f:55:af:8a: 91:98:4d:5a:c3:ec:90:34:2f:31:f6:25:ed:3b:8b:cb:05:ec: 70:f4:a7:65:41:ef:db:1b:e5:e5:bb:d1:23:e2:5d:f3:fc:ea: 08:f6:79:5e:bd:e9:aa:b9:4e:0f:22:c2:29:fb:08:1e:76:29: d1:50:d7:be:9e:84:f6:fd:4e:4d:a1:dc:84:66:87:f4:75:9a: f5:13:b2:2f:d4:83:b9:ae:6e:e3:4f:8f:ae:74:fd:c9:20:57: 5c:29:c2:16:37:93:09:24:8e:25:bc:46:93:e4:74:58:7f:9f: 24:a7:b3:12:8a:b9:f7:e4:91:e5:47:ad:64:15:35:6a:6c:83: e6:43:83:b8:99:38:64:f7:7b:ca:13:5b:6d:55:fa:cc:58:cb: df:c7:5c:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWkUp7k++BppPuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NmM0MmIxMGItN2MyZC00YmM4LTgzOWItNGVhODU0MjVhMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PULTJqVJeAbePPG2EDT+Eb6DsoLbwTT1mii ZoJu3HmAi4nrmUWeonKPgqgK8CryDkzhgserYa+xW+27MDd48FhpaMTdo4Nzw5P8 l0Mx5bWRhnRyI9JU3iG4y+X80enAMnBGB0ZrqY2bbCV34xqUyk0CYHnR6gA5+5GV jch9bQKSlJyQuGhpqE9ko1zQM1BZTLIbzRWBBOXYXJE4nwuQyOLXhZ56avehwanF aC87fVSl1QQbN7hmccoccP1fd9Fd8PUc5liGOk2tn2fcDLI1ULjmOx0KQrH0+rKh 0VrdMzsW7OyPnJR3rDYyx7nzuVXmvzFDny5pE1ZRWeZ5iIV5QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs6aQqLc4JVWgtaVp3zTMYri/xPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNzNkZGQ0NGEtYjI3Zi0z ZWE0LWJjZDMtNzUxMmEyZGM1NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0HoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuPpWu3KzV84xUuG9nb9xyOfsSEaMHmmuoLE4RmanwVri72louS16c4 SnqnrJkYZgDzScz6P3SXf+XbxsglIQsQmzBB/ta6jLdrAemlgbNp9Xc/MwdFvivV NdhmxHePQZ0JBBHhvVihP1WvipGYTVrD7JA0LzH2Je07i8sF7HD0p2VB79sb5eW7 0SPiXfP86gj2eV696aq5Tg8iwin7CB52KdFQ176ehPb9Tk2h3IRmh/R1mvUTsi/U g7mubuNPj650/ckgV1wpwhY3kwkkjiW8RpPkdFh/nySnsxKKuffkkeVHrWQVNWps g+ZDg7iZOGT3e8oTW21V+sxYy9/HXB0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:01 2026 by rpki-client