$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1bb4a573-1cf5-4514-917a-0f939bbed562/c739c7dc-fcb7-3eff-a62f-3914192d5d77.roa File: c739c7dc-fcb7-3eff-a62f-3914192d5d77.roa (raw, json) Hash identifier: cnBLHSmwrUheUYD5yekO3UH8SMx3xPe6iNwKoonxn84= Subject key identifier: 91:0E:CC:4E:47:57:9D:9F:12:3B:33:D4:5B:13:32:B4:A3:04:59:11 Certificate issuer: /CN=1bb4a573-1cf5-4514-917a-0f939bbed562 Certificate serial: 010D0C9F4328584EAFE70B0A7C6194437F9EA400 Authority key identifier: B3:80:92:0E:1E:2C:77:9B:1B:6F:42:33:8A:9F:17:22:29:78:E9:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1bb4a573-1cf5-4514-917a-0f939bbed562.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1bb4a573-1cf5-4514-917a-0f939bbed562/c739c7dc-fcb7-3eff-a62f-3914192d5d77.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 1289 IP address blocks: 149.43.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1bb4a573-1cf5-4514-917a-0f939bbed562/1bb4a573-1cf5-4514-917a-0f939bbed562.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1bb4a573-1cf5-4514-917a-0f939bbed562/1bb4a573-1cf5-4514-917a-0f939bbed562.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1bb4a573-1cf5-4514-917a-0f939bbed562.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:0b:0a:7c:61:94:43:7f:9e:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bb4a573-1cf5-4514-917a-0f939bbed562 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=d0b4f1b6-1343-4772-aa21-593904528128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:a7:28:7c:21:ff:81:91:a4:8d:8d:3c:db: e5:7e:f6:2a:27:c3:c1:ab:59:a7:3b:03:a1:a6:64: bd:03:92:7b:5c:03:ab:82:89:5a:fe:d0:b6:8d:5b: 3b:ff:da:ac:a3:4e:68:f8:49:7c:ce:d9:4b:dc:94: 0c:25:a2:5e:58:76:a7:5c:c5:39:d4:41:ee:e1:b1: 12:6b:8f:03:b6:3d:c7:9e:1e:ad:de:0b:f0:0d:db: ea:b2:1c:14:47:d8:e4:a0:13:3c:ba:b5:8b:48:ca: 85:15:78:30:71:0f:bb:4d:4a:01:f6:62:24:c4:7a: 1e:5d:8b:4f:ee:a7:35:fc:1f:8a:0a:3b:35:f2:4c: fe:1b:04:60:5b:ef:45:b1:50:42:1c:99:f3:fb:b9: 8f:92:d8:ad:dd:34:34:59:64:2b:11:c3:d7:eb:e7: 58:e5:33:13:65:21:7f:bb:22:fa:21:4a:c3:88:f6: 00:75:03:ed:1b:bc:2c:f7:89:a2:30:8d:67:bf:d3: 23:b4:63:1b:e0:bf:ca:c5:67:a1:63:90:9f:6c:24: 19:89:40:13:e6:70:4f:3a:21:e6:8d:ef:cb:e0:fc: 79:1c:bf:8c:b4:20:39:7d:27:b4:d6:55:1a:69:70: 9b:9d:db:0b:d4:a1:fa:42:33:1a:e7:89:d8:bb:89: 50:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0E:CC:4E:47:57:9D:9F:12:3B:33:D4:5B:13:32:B4:A3:04:59:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1bb4a573-1cf5-4514-917a-0f939bbed562/c739c7dc-fcb7-3eff-a62f-3914192d5d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1bb4a573-1cf5-4514-917a-0f939bbed562/1bb4a573-1cf5-4514-917a-0f939bbed562.crl X509v3 Authority Key Identifier: keyid:B3:80:92:0E:1E:2C:77:9B:1B:6F:42:33:8A:9F:17:22:29:78:E9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1bb4a573-1cf5-4514-917a-0f939bbed562.cer sbgp-ipAddrBlock: critical IPv4: 149.43.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:99:ec:49:c0:77:a8:c3:2c:f2:b7:d9:5e:e7:6f:4b:e7:48: a6:ae:95:e8:be:d0:17:e8:e1:87:d0:aa:cc:72:4e:51:6f:af: 97:a0:3d:cc:44:bc:0d:e3:be:fb:4d:0d:bd:50:33:d9:64:b3: 90:29:5a:03:a8:aa:a4:91:12:90:99:ea:f6:0e:37:25:a7:8d: f4:8a:88:b8:a8:70:51:34:bb:93:b5:3b:ed:c2:29:01:20:3f: d6:86:69:fa:c9:2e:66:48:e4:42:03:d2:6a:9e:fc:d9:da:90: 27:59:fb:17:dd:f0:23:14:bd:95:bd:67:c1:16:58:24:e4:a8: 6d:82:1c:09:e7:26:30:48:18:99:2e:19:2c:f9:f6:60:45:55: 1e:b1:af:da:68:05:57:6b:bf:42:f9:e0:df:fa:39:27:5c:a6: 82:d8:3f:9e:49:d1:3a:37:68:24:3d:e9:b3:b6:9d:30:25:c8: ba:b1:f0:19:62:fd:a2:84:d4:33:d6:4c:c1:15:46:8a:0f:58: 44:15:26:87:e0:a5:fc:c2:2e:07:eb:68:2e:02:fa:94:d5:c7: 18:b4:fa:5b:bc:25:81:ed:f9:ec:36:ea:95:fc:2c:58:58:88: 9b:e5:9e:d2:7a:78:92:fb:49:3d:84:ec:3a:54:44:f8:2a:ee: 3d:6a:c8:56 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6v5wsKfGGUQ3+epAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJiNGE1NzMtMWNmNS00NTE0LTkxN2EtMGY5MzliYmVk NTYyMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZDBiNGYxYjYtMTM0My00NzcyLWFhMjEtNTkzOTA0NTI4MTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljqnKHwh/4GRpI2NPNvlfvYqJ8PBq1mnOwOh pmS9A5J7XAOrgola/tC2jVs7/9qso05o+El8ztlL3JQMJaJeWHanXMU51EHu4bES a48Dtj3Hnh6t3gvwDdvqshwUR9jkoBM8urWLSMqFFXgwcQ+7TUoB9mIkxHoeXYtP 7qc1/B+KCjs18kz+GwRgW+9FsVBCHJnz+7mPktit3TQ0WWQrEcPX6+dY5TMTZSF/ uyL6IUrDiPYAdQPtG7ws94miMI1nv9MjtGMb4L/KxWehY5CfbCQZiUAT5nBPOiHm je/L4Px5HL+MtCA5fSe01lUaaXCbndsL1KH6QjMa54nYu4lQ0wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJEOzE5HV52fEjsz1FsTMrSjBFkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xYmI0 YTU3My0xY2Y1LTQ1MTQtOTE3YS0wZjkzOWJiZWQ1NjIvYzczOWM3ZGMtZmNiNy0z ZWZmLWE2MmYtMzkxNDE5MmQ1ZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWJiNGE1NzMtMWNmNS00NTE0LTkx N2EtMGY5MzliYmVkNTYyLzFiYjRhNTczLTFjZjUtNDUxNC05MTdhLTBmOTM5YmJl ZDU2Mi5jcmwwHwYDVR0jBBgwFoAUs4CSDh4sd5sbb0Izip8XIil46VkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xYmI0YTU3My0xY2Y1LTQ1MTQtOTE3YS0wZjkz OWJiZWQ1NjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlSswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKJnsScB3qMMs8rfZXudvS+dIpq6V6L7QF+jhh9CqzHJOUW+vl6A9zES8 DeO++00NvVAz2WSzkClaA6iqpJESkJnq9g43JaeN9IqIuKhwUTS7k7U77cIpASA/ 1oZp+skuZkjkQgPSap782dqQJ1n7F93wIxS9lb1nwRZYJOSobYIcCecmMEgYmS4Z LPn2YEVVHrGv2mgFV2u/Qvng3/o5J1ymgtg/nknROjdoJD3ps7adMCXIurHwGWL9 ooTUM9ZMwRVGig9YRBUmh+Cl/MIuB+toLgL6lNXHGLT6W7wlge357DbqlfwsWFiI m+We0np4kvtJPYTsOlRE+CruPWrIVg== -----END CERTIFICATE-----Generated at Sat Sep 5 00:59:19 2026 by rpki-client