$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa File: 7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa (raw, json) Hash identifier: Ku/D+VgtTsTeuleYXvMnkySLvpsexrLlEVn/MN4+nf8= Subject key identifier: 10:49:20:B3:BA:22:11:BA:A3:5D:4A:CE:74:39:3C:EA:30:18:0C:2E Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D04E23F5919B3758404D07600 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 21949 IP address blocks: 134.231.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:3f:59:19:b3:75:84:04:d0:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=189a983f-b0a0-43f8-8423-f92fddb9129d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cb:ea:b1:cc:8f:39:1f:43:b8:96:40:2b:24: 4d:86:c2:b3:e9:68:eb:2f:01:c4:b1:62:dc:ae:4a: 16:1c:d2:24:e4:42:fe:62:15:0d:80:00:e2:4e:87: c2:fb:cf:10:13:2a:ca:5f:be:bb:72:19:c9:62:e3: 9d:13:7c:8d:34:2b:3c:1a:d9:90:9e:3f:0f:9d:7c: 40:49:1b:61:96:ad:03:0a:ab:6e:64:48:66:d9:c7: 64:87:3e:a2:9e:a1:d0:77:72:68:f9:94:9c:b1:dc: ff:20:0a:0e:f1:00:be:43:39:56:47:dc:f4:0d:a3: bd:91:6e:30:87:1c:c2:f7:c6:77:1a:0c:78:3b:e1: 4d:89:2c:3c:8b:2b:b8:20:0b:01:82:5f:28:7e:c3: 78:04:c5:d6:c0:0e:21:07:b2:41:aa:12:1a:b8:36: 5b:c6:76:f1:0e:fb:9c:ab:0b:d1:76:51:54:15:2c: 6e:f9:af:69:a2:ee:0d:86:c8:a7:ca:c7:99:ac:46: f0:32:fe:d2:da:d4:97:b5:04:69:81:ef:96:a2:a9: 60:5f:1d:b6:62:17:8d:85:79:bd:21:68:54:a6:42: 5c:10:1e:70:db:8f:c1:40:e9:c5:68:06:16:f7:63: 1d:5d:bd:e4:2a:01:60:25:bf:64:9e:1e:58:2d:9c: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:49:20:B3:BA:22:11:BA:A3:5D:4A:CE:74:39:3C:EA:30:18:0C:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 134.231.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f6:97:dc:68:d5:d0:b8:cd:1c:cb:5d:34:32:ba:30:b9:70: 1e:b7:55:4c:18:67:2e:34:e4:d1:67:85:97:bd:38:fe:fb:77: d2:0b:2a:f9:39:f9:3f:62:ac:bb:8b:3c:e6:16:3e:7a:7b:11: 92:cb:ab:fd:f7:a4:f7:e6:66:fe:12:df:29:c0:a9:0d:5d:4f: f3:c7:c0:b0:0b:42:51:54:39:83:88:1a:71:fd:18:75:ad:b0: ae:9b:2a:f3:67:82:d2:b5:97:be:96:65:a1:9a:3e:35:81:b9: 96:20:f0:e3:b2:74:65:73:db:06:98:cd:81:df:96:c7:0f:1b: 97:be:8a:13:7b:eb:64:0e:a6:aa:97:eb:5e:12:60:26:de:67: 32:ad:9a:a2:5d:2e:c1:ba:9f:dc:8a:38:42:12:2c:55:70:30: 3e:6e:e7:98:8d:98:23:5a:a7:81:29:e5:1b:2d:31:2d:81:3d: 67:f2:86:1c:5d:76:6b:e3:42:80:d0:e4:15:50:c9:c1:bb:d7: 0c:bb:6d:e2:a3:53:db:cc:6f:03:77:15:05:a6:bc:21:a9:31: af:2b:a2:e9:bb:a6:24:09:4b:31:8a:75:2d:59:70:a9:5b:3c: c2:33:06:ed:0d:27:e8:1c:ab:dd:e9:f7:bd:37:bd:92:da:c7: d4:ba:e8:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4j9ZGbN1hATQdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk MTg5YTk4M2YtYjBhMC00M2Y4LTg0MjMtZjkyZmRkYjkxMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcvqscyPOR9DuJZAKyRNhsKz6WjrLwHEsWLc rkoWHNIk5EL+YhUNgADiTofC+88QEyrKX767chnJYuOdE3yNNCs8GtmQnj8PnXxA SRthlq0DCqtuZEhm2cdkhz6inqHQd3Jo+ZScsdz/IAoO8QC+QzlWR9z0DaO9kW4w hxzC98Z3Ggx4O+FNiSw8iyu4IAsBgl8ofsN4BMXWwA4hB7JBqhIauDZbxnbxDvuc qwvRdlFUFSxu+a9pou4NhsinyseZrEbwMv7S2tSXtQRpge+WoqlgXx22YheNhXm9 IWhUpkJcEB5w24/BQOnFaAYW92MdXb3kKgFgJb9knh5YLZzotQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBJILO6IhG6o11KznQ5POowGAwuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvN2QyNWJiNmMtZmE0OC0z YzQ0LTkyYjEtZjU4MjczOTU5ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFhucgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH2l9xo1dC4zRzLXTQyujC5cB63VUwYZy405NFnhZe9OP77d9ILKvk5 +T9irLuLPOYWPnp7EZLLq/33pPfmZv4S3ynAqQ1dT/PHwLALQlFUOYOIGnH9GHWt sK6bKvNngtK1l76WZaGaPjWBuZYg8OOydGVz2waYzYHflscPG5e+ihN762QOpqqX 614SYCbeZzKtmqJdLsG6n9yKOEISLFVwMD5u55iNmCNap4Ep5RstMS2BPWfyhhxd dmvjQoDQ5BVQycG71wy7beKjU9vMbwN3FQWmvCGpMa8roum7piQJSzGKdS1ZcKlb PMIzBu0NJ+gcq93p9703vZLax9S66HI= -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:51 2026 by rpki-client