$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa File: c1af7f83-54d1-3637-b23a-1fac1823fd70.roa (raw, json) Hash identifier: 8/fK1Jm50KUwXlFreFVeJv6EgWq00YGsddN0T+Qa+xQ= Subject key identifier: 73:7B:B2:22:E9:8A:08:1A:D9:53:15:70:8B:8C:D2:43:03:AF:8B:3A Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584EA7920360C69BB4A9426F5D30 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21949 IP address blocks: 65.97.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:03:60:c6:9b:b4:a9:42:6f:5d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0175e1bc-a065-4246-8474-e9b706cfe187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:10:a2:ea:30:98:09:4e:78:cc:63:0e:df:d1: fc:ed:74:7f:63:15:8e:1a:38:68:b5:00:83:41:cf: 34:a9:2d:4b:82:e5:6d:30:40:9d:9d:d3:92:88:3c: 50:f3:07:a6:bb:e1:f7:7e:6e:3f:19:c9:d3:f9:e9: ce:15:b7:f3:e2:f3:d0:86:16:0d:0d:30:6b:a7:9d: fc:da:b6:01:bb:45:fd:06:2d:37:d3:59:2a:bb:36: f6:45:ce:8a:17:66:b6:36:1b:bc:90:17:06:2c:20: 95:e5:41:0f:58:2a:b7:64:4c:66:1c:53:a6:2e:a0: 94:00:7a:67:8e:63:52:19:0f:8e:47:4c:1b:98:82: 2c:6b:38:4a:c5:2f:54:ef:ec:f7:31:3f:df:df:69: ab:3a:bb:38:45:6e:0f:12:9c:65:2b:ea:d4:a6:08: 97:6e:29:d9:1f:f9:95:21:97:d9:33:c6:68:b3:2c: b1:52:21:63:31:cc:58:93:a4:b0:f9:af:bf:71:90: b6:0e:54:b8:b0:3f:3a:4d:98:4a:75:ad:1c:bc:77: 7f:c8:7e:ac:4b:48:17:95:e6:2f:e6:e1:92:48:5c: de:81:c7:d4:80:06:1b:98:af:6c:31:20:ca:1c:bf: fb:ca:e3:ff:cf:7f:9a:2f:a9:f9:4d:2a:b4:a7:4a: b7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7B:B2:22:E9:8A:08:1A:D9:53:15:70:8B:8C:D2:43:03:AF:8B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 65.97.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:dd:62:fa:7e:26:be:78:37:2b:60:ce:72:db:06:73:31:18: 6e:ed:64:25:57:5a:82:dd:25:cb:72:3a:09:6b:15:ec:68:18: 12:32:2c:0b:a6:91:09:fb:2a:28:61:89:b9:f9:71:22:f0:88: 75:85:c4:b3:ae:20:f3:10:22:82:17:9a:d0:88:d3:f0:79:02: eb:bb:7c:7f:8d:ff:99:bd:4f:b7:96:7a:d1:c2:09:19:e0:05: 74:2c:df:67:0e:7f:34:73:74:e1:11:ad:90:a8:0d:a4:b3:69: 0e:8f:86:ca:3b:8f:57:0d:4b:35:03:68:06:83:81:ab:b3:26: c1:a3:4a:9c:46:2c:ea:f9:03:1a:21:30:a8:27:c1:d2:f4:f6: 35:25:aa:cf:dd:0a:ef:6b:df:10:4a:5c:c6:5f:f5:79:b6:69: 97:e0:85:1b:97:9d:de:6a:bc:0b:ba:30:6c:a9:70:67:be:e0: 12:84:a1:bd:2c:70:83:b3:53:a1:1d:0b:46:23:71:8e:0d:b4: 53:78:4e:b3:a9:df:29:1b:08:46:49:b4:8e:81:cd:ed:83:15: ce:49:9e:3b:ea:19:81:d4:c5:f4:17:b3:ca:62:5b:99:59:70: 58:c3:58:32:7f:d7:83:9e:ad:92:48:9a:ac:03:fd:db:93:2c: 1b:b3:fe:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkgNgxpu0qUJvXTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDE3NWUxYmMtYTA2NS00MjQ2LTg0NzQtZTliNzA2Y2ZlMTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRCi6jCYCU54zGMO39H87XR/YxWOGjhotQCD Qc80qS1LguVtMECdndOSiDxQ8wemu+H3fm4/GcnT+enOFbfz4vPQhhYNDTBrp538 2rYBu0X9Bi0301kquzb2Rc6KF2a2Nhu8kBcGLCCV5UEPWCq3ZExmHFOmLqCUAHpn jmNSGQ+OR0wbmIIsazhKxS9U7+z3MT/f32mrOrs4RW4PEpxlK+rUpgiXbinZH/mV IZfZM8ZosyyxUiFjMcxYk6Sw+a+/cZC2DlS4sD86TZhKda0cvHd/yH6sS0gXleYv 5uGSSFzegcfUgAYbmK9sMSDKHL/7yuP/z3+aL6n5TSq0p0q3qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN7siLpigga2VMVcIuM0kMDr4s6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYzFhZjdmODMtNTRkMS0z NjM3LWIyM2EtMWZhYzE4MjNmZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQWEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATdYvp+Jr54NytgznLbBnMxGG7tZCVXWoLdJctyOglrFexoGBIyLAum kQn7Kihhibn5cSLwiHWFxLOuIPMQIoIXmtCI0/B5Auu7fH+N/5m9T7eWetHCCRng BXQs32cOfzRzdOERrZCoDaSzaQ6Phso7j1cNSzUDaAaDgauzJsGjSpxGLOr5Axoh MKgnwdL09jUlqs/dCu9r3xBKXMZf9Xm2aZfghRuXnd5qvAu6MGypcGe+4BKEob0s cIOzU6EdC0YjcY4NtFN4TrOp3ykbCEZJtI6Bze2DFc5JnjvqGYHUxfQXs8piW5lZ cFjDWDJ/14OerZJImqwD/duTLBuz/qM= -----END CERTIFICATE-----Generated at Wed Jul 29 05:56:56 2026 by rpki-client