$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa File: c1af7f83-54d1-3637-b23a-1fac1823fd70.roa (raw, json) Hash identifier: lJhecn0nTRP7LUB5mMTfW6du8/B/iygOEJ7F3bXK2/0= Subject key identifier: 34:A0:AB:20:EC:0E:EC:FD:87:E0:BC:3E:24:D3:CC:B1:C5:7A:02:9D Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584D07AD20426A64D68A92E0DBE0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 21949 IP address blocks: 65.97.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:20:42:6a:64:d6:8a:92:e0:db:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=5926da10-0612-4ef5-95f1-9a423f61dfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:90:cc:68:88:40:3d:75:c9:52:2c:43:5e:c7: d0:6a:68:12:3e:11:1c:f2:cf:11:c0:2b:12:84:59: b2:87:69:4f:0e:23:f3:33:9c:82:87:93:da:23:9d: 79:93:f0:c5:af:7e:fb:19:74:29:a5:e0:a1:80:7c: 16:f6:ad:c3:02:f3:07:75:fa:18:8d:d4:c9:4e:b4: 07:14:42:d3:53:8f:d4:9c:64:75:9a:9e:08:57:69: b4:4c:5b:c5:5e:5a:d8:b7:1c:ae:14:3d:19:56:10: 59:8d:c8:43:77:2a:64:19:a8:d0:fe:74:6d:4a:52: 51:89:8d:21:d9:79:9b:c4:ae:67:da:fd:9f:74:84: 28:85:78:16:d9:cc:d0:46:8a:22:a1:c1:3b:7d:70: cf:fe:42:6d:3c:1b:88:f6:c2:e4:83:e9:a3:78:0f: f6:3b:fb:32:4e:e1:bc:dc:4e:95:cb:12:d3:88:8d: b8:9b:3c:c9:d0:8d:86:c0:e9:8e:06:eb:f8:33:12: 17:82:55:f7:47:a3:9d:ce:d2:fe:56:61:2b:77:39: 5a:31:d8:68:a8:62:aa:e7:d0:3f:52:f0:1f:68:d9: a5:ca:00:0f:de:bb:f7:b7:94:4d:74:e0:06:79:5b: 2e:b8:8b:31:1f:f1:cd:64:bc:89:d6:2f:cc:4e:1c: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A0:AB:20:EC:0E:EC:FD:87:E0:BC:3E:24:D3:CC:B1:C5:7A:02:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 65.97.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:df:7e:39:af:a6:dc:08:db:e3:73:c8:b4:e8:fb:a3:e5:9a: 55:72:ba:88:fe:e5:16:26:78:48:ee:6d:1b:9f:8a:2c:78:44: b2:60:83:13:b0:bd:16:23:6f:0a:0f:6a:36:7e:ee:56:93:10: 0d:18:db:4b:a0:ee:1f:4a:d5:22:07:ab:d9:04:fd:f0:c2:9e: c1:98:e4:31:1d:ab:cd:f2:da:4c:2c:9d:ae:cc:8c:9d:90:d4: 2b:13:67:51:08:35:4d:0c:e9:43:28:c8:4a:6d:41:7d:7f:6f: 66:4e:04:32:5b:07:5c:e9:f3:a2:1d:fd:85:d9:51:30:0c:c9: 69:a3:c1:b6:e6:6f:8b:8e:02:2a:fd:03:d5:95:2c:00:59:26: 41:72:7b:07:8a:f2:a6:3a:e2:4d:82:9d:a6:4c:a8:05:c7:f2: be:4f:fb:f9:41:21:dc:bb:62:15:0a:25:fd:ab:ae:84:fe:da: 39:86:96:6e:20:0e:07:ec:7f:6f:7c:32:30:71:19:a7:cc:f3: 5e:21:04:37:0c:78:05:c4:cc:31:76:f0:6a:20:41:8c:f0:a1: eb:62:ee:ea:6a:1c:4d:51:b8:6c:85:f6:82:e2:6b:74:6d:28: 2c:a9:d8:37:42:f5:2c:6e:08:87:50:d1:5f:db:a5:23:6d:38: 28:e5:48:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrSBCamTWipLg2+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NTkyNmRhMTAtMDYxMi00ZWY1LTk1ZjEtOWE0MjNmNjFkZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5DMaIhAPXXJUixDXsfQamgSPhEc8s8RwCsS hFmyh2lPDiPzM5yCh5PaI515k/DFr377GXQppeChgHwW9q3DAvMHdfoYjdTJTrQH FELTU4/UnGR1mp4IV2m0TFvFXlrYtxyuFD0ZVhBZjchDdypkGajQ/nRtSlJRiY0h 2XmbxK5n2v2fdIQohXgW2czQRooiocE7fXDP/kJtPBuI9sLkg+mjeA/2O/syTuG8 3E6VyxLTiI24mzzJ0I2GwOmOBuv4MxIXglX3R6OdztL+VmErdzlaMdhoqGKq59A/ UvAfaNmlygAP3rv3t5RNdOAGeVsuuIsxH/HNZLyJ1i/MThxANQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSgqyDsDuz9h+C8PiTTzLHFegKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYzFhZjdmODMtNTRkMS0z NjM3LWIyM2EtMWZhYzE4MjNmZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQWEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3ffjmvptwI2+NzyLTo+6PlmlVyuoj+5RYmeEjubRufiix4RLJggxOw vRYjbwoPajZ+7laTEA0Y20ug7h9K1SIHq9kE/fDCnsGY5DEdq83y2kwsna7MjJ2Q 1CsTZ1EINU0M6UMoyEptQX1/b2ZOBDJbB1zp86Id/YXZUTAMyWmjwbbmb4uOAir9 A9WVLABZJkFyeweK8qY64k2CnaZMqAXH8r5P+/lBIdy7YhUKJf2rroT+2jmGlm4g Dgfsf298MjBxGafM814hBDcMeAXEzDF28GogQYzwoeti7upqHE1RuGyF9oLia3Rt KCyp2DdC9SxuCIdQ0V/bpSNtOCjlSJ8= -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:52 2026 by rpki-client