$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa File: b468f5d9-7a72-39a4-a972-97bfc3b63415.roa (raw, json) Hash identifier: 1AZ5QwC9EUNDbNbCRc5uVz/qRVhIFF2eLkBKNeKt6VI= Subject key identifier: 09:8E:7E:7C:5C:A7:3E:27:BA:80:E3:C5:C6:ED:48:F1:2A:49:80:AC Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584CD6D20ABD5E09578506879260 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 21949 IP address blocks: 192.69.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:0a:bd:5e:09:57:85:06:87:92:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=249c49b0-f89d-4c0d-aefa-bfbb5be7f367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:84:3a:7b:30:1f:0b:fe:c8:c8:6b:dc:45:d3: 15:b0:6a:73:a6:16:de:68:54:7b:6b:0b:4d:e3:31: 57:8f:5a:bd:1b:91:4d:f1:95:83:88:96:3b:20:8d: 6c:8f:e5:8c:bf:3c:4b:15:4b:a1:1a:29:05:63:04: fb:09:41:a5:19:23:ee:ed:09:a1:5f:1a:5d:8e:40: 7c:a2:68:ef:d8:0a:0a:d1:51:32:ff:cb:a6:a4:b3: 80:92:0f:e9:d0:b8:ff:e4:56:c3:95:dc:ee:ea:c6: 7d:2e:b0:fa:88:bd:35:d9:2d:84:23:2f:a6:0b:f6: 3a:76:7b:7f:bd:3b:1c:9f:bc:79:08:e3:db:0b:6e: a6:e2:da:a1:bf:c7:d6:46:72:eb:e2:ad:6b:20:20: 29:83:9b:d0:15:02:0a:98:ff:41:01:2b:16:8f:53: 8d:25:07:14:43:66:73:30:a8:bd:70:38:cd:21:d5: 37:25:59:c1:2f:f8:82:e0:ad:39:10:18:31:71:9c: 3b:50:a3:1d:fe:10:28:7d:6e:91:e0:5a:06:0c:63: b7:8a:70:61:20:3a:aa:59:48:e8:4f:24:93:e3:9a: 03:9c:06:fc:69:eb:a4:23:1a:73:06:27:d5:2e:8e: 5e:20:96:04:e6:77:43:3a:4f:e8:52:24:eb:8b:02: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8E:7E:7C:5C:A7:3E:27:BA:80:E3:C5:C6:ED:48:F1:2A:49:80:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 192.69.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:54:0d:9f:ff:3f:b3:f1:ed:6e:ce:5a:1f:90:76:9c:5a:6d: f1:66:48:35:62:c0:1f:82:ba:fc:30:e9:6c:23:ac:60:43:99: a3:0b:99:10:75:99:ff:1d:4c:86:1f:1b:f4:a5:44:c9:9c:8b: ed:1d:83:86:f4:30:44:e2:a6:13:6e:2d:eb:08:7d:61:14:d3: 83:e4:13:11:34:c8:59:5b:8b:6e:9d:e3:95:cc:57:c1:86:98: 52:f1:7a:9f:b0:1e:72:24:2f:41:a2:25:b0:d4:cd:51:ee:bf: 8c:d7:fc:b2:77:b2:17:7f:b0:a8:5c:b1:ca:80:52:0f:6e:98: c6:36:8c:da:3e:1d:44:61:65:e5:ce:b5:e8:45:49:1d:0a:a4: f3:07:f1:3c:6c:64:0c:7c:71:eb:1f:81:b0:e3:69:da:80:c5: f8:9f:42:fc:97:b4:16:ec:ba:f7:7d:a5:96:7d:ca:2d:b7:e3: fd:80:31:be:00:9c:3c:cf:25:1d:ce:ef:6c:1c:c4:49:00:82: 73:9a:39:97:63:50:50:02:66:0c:74:ec:4f:45:9b:06:5b:b8: 52:42:3e:9e:a9:9d:c8:8c:be:79:4a:b5:e2:85:08:97:84:66: 50:ae:7b:e2:de:93:56:9a:8f:dc:eb:97:0e:62:ce:40:51:6d: 2c:91:ca:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0gq9XglXhQaHkmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk MjQ5YzQ5YjAtZjg5ZC00YzBkLWFlZmEtYmZiYjViZTdmMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioQ6ezAfC/7IyGvcRdMVsGpzphbeaFR7awtN 4zFXj1q9G5FN8ZWDiJY7II1sj+WMvzxLFUuhGikFYwT7CUGlGSPu7QmhXxpdjkB8 omjv2AoK0VEy/8umpLOAkg/p0Lj/5FbDldzu6sZ9LrD6iL012S2EIy+mC/Y6dnt/ vTscn7x5COPbC26m4tqhv8fWRnLr4q1rICApg5vQFQIKmP9BASsWj1ONJQcUQ2Zz MKi9cDjNIdU3JVnBL/iC4K05EBgxcZw7UKMd/hAofW6R4FoGDGO3inBhIDqqWUjo TyST45oDnAb8aeukIxpzBifVLo5eIJYE5ndDOk/oUiTriwK15wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmOfnxcpz4nuoDjxcbtSPEqSYCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYjQ2OGY1ZDktN2E3Mi0z OWE0LWE5NzItOTdiZmMzYjYzNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdUDZ//P7Px7W7OWh+QdpxabfFmSDViwB+Cuvww6WwjrGBDmaMLmRB1 mf8dTIYfG/SlRMmci+0dg4b0METiphNuLesIfWEU04PkExE0yFlbi26d45XMV8GG mFLxep+wHnIkL0GiJbDUzVHuv4zX/LJ3shd/sKhcscqAUg9umMY2jNo+HURhZeXO tehFSR0KpPMH8TxsZAx8cesfgbDjadqAxfifQvyXtBbsuvd9pZZ9yi234/2AMb4A nDzPJR3O72wcxEkAgnOaOZdjUFACZgx07E9FmwZbuFJCPp6pnciMvnlKteKFCJeE ZlCue+Lek1aaj9zrlw5izkBRbSyRyiY= -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:00 2026 by rpki-client