$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/d235630d-546d-376b-8c63-b194c14b71a4.roa File: d235630d-546d-376b-8c63-b194c14b71a4.roa (raw, json) Hash identifier: ldb5xXet0NySiRNXF9hyf+M6EX7WJ0gB/xD3VflkoZo= Subject key identifier: 43:77:92:F1:D2:D2:1A:EC:F2:8C:0B:86:E9:B0:0B:34:04:04:7C:E8 Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584D6DF4050978C5321E4A476400 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/d235630d-546d-376b-8c63-b194c14b71a4.roa Signing time: Tue 07 Apr 2026 17:16:21 +0000 ROA not before: Tue 07 Apr 2026 17:16:21 +0000 ROA not after: Mon 06 Jul 2026 17:16:21 +0000 asID: 31898 IP address blocks: 149.47.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:f4:05:09:78:c5:32:1e:4a:47:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Apr 7 17:16:21 2026 GMT Not After : Jul 6 17:16:21 2026 GMT Subject: CN=d75c53f9-6a72-409e-94b2-bcbdec6b4c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fe:7b:24:e1:07:34:69:74:d9:78:ba:ad:87: 2e:16:bb:c1:86:68:9d:a1:04:84:9d:c6:08:27:c6: fe:f8:b9:14:e0:db:0d:54:d8:ef:4d:e4:f7:ab:5e: 2a:eb:5c:ff:9b:16:6c:46:e0:92:8c:ce:f8:d5:07: 5d:fb:7d:16:d5:9a:3c:3f:cb:2c:1b:01:5c:57:c4: c9:88:4b:91:e7:6e:cf:33:87:c5:30:fe:b5:97:1a: 40:d6:c8:48:1b:64:67:88:ec:9c:48:7e:19:0f:52: 8e:db:87:19:42:04:ac:8f:0d:70:9e:d9:c5:d6:d4: 86:80:3a:cf:e9:35:3e:a4:3d:2b:21:60:92:8e:1c: 8c:af:16:a9:57:ec:cf:a4:b0:d9:0b:ef:b3:07:a5: b8:4e:9c:90:e8:78:4e:53:5e:04:51:85:fc:5a:1b: 2e:82:f4:03:72:8f:d9:a4:9e:3b:25:05:41:9a:04: f8:d8:6b:e9:b7:41:18:39:30:94:50:62:32:ca:54: 78:7c:cd:1d:27:13:b9:ab:b3:6b:97:63:35:b7:b6: 08:e7:bd:ab:81:ff:55:60:a6:62:35:91:d1:78:10: 32:ce:1e:48:07:ec:36:de:eb:02:ce:99:9d:be:ce: 42:c9:bb:5b:24:8a:80:c5:fe:cb:02:0f:ea:77:fa: 75:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:77:92:F1:D2:D2:1A:EC:F2:8C:0B:86:E9:B0:0B:34:04:04:7C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/d235630d-546d-376b-8c63-b194c14b71a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 149.47.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f3:38:89:01:81:7d:3d:aa:b7:0a:22:f1:66:a2:60:a3:59: a2:55:63:56:63:59:2c:0d:d0:59:e6:6f:7e:19:0b:43:d9:3d: c7:c8:a0:2d:76:3d:cd:6a:67:23:28:c2:0c:6a:0b:f2:11:eb: 0a:12:1c:d8:7f:20:f3:dc:30:35:67:61:ad:41:35:b8:ca:15: bc:26:0d:e5:26:86:04:31:20:41:35:a6:37:b0:b8:23:44:8f: b0:62:a7:fd:85:39:8c:96:e6:31:ff:4c:7d:8c:a4:df:60:99: a8:9c:ec:dc:56:cb:96:1d:33:b4:1d:a2:27:10:46:e7:f9:e7: 98:75:8e:b0:2d:e7:1c:a7:ad:de:aa:6e:d6:55:d8:f8:b6:9f: 7c:8f:8d:2b:55:8d:60:6d:52:bd:6a:a2:08:06:a8:8e:67:e4: 91:1f:cd:e1:e1:e7:33:40:09:81:98:fa:5c:3f:79:02:e2:bf: 24:f4:67:8b:c6:53:7f:59:d6:6d:95:3a:7a:40:81:df:87:e9: 55:48:bf:88:54:c9:45:a7:33:4e:d7:a3:34:cc:54:27:49:59: 31:f9:5f:76:4f:5a:4f:cf:40:37:41:1e:e8:7a:38:da:90:2c: 94:af:17:c0:65:24:fa:e4:ea:15:95:d4:ad:80:ea:29:84:65: 18:ac:d5:3c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1t9AUJeMUyHkpHZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MDQwNzE3MTYyMVoXDTI2MDcwNjE3MTYyMVowLzEtMCsGA1UEAxMk ZDc1YzUzZjktNmE3Mi00MDllLTk0YjItYmNiZGVjNmI0YzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv57JOEHNGl02Xi6rYcuFrvBhmidoQSEncYI J8b++LkU4NsNVNjvTeT3q14q61z/mxZsRuCSjM741Qdd+30W1Zo8P8ssGwFcV8TJ iEuR527PM4fFMP61lxpA1shIG2RniOycSH4ZD1KO24cZQgSsjw1wntnF1tSGgDrP 6TU+pD0rIWCSjhyMrxapV+zPpLDZC++zB6W4TpyQ6HhOU14EUYX8WhsugvQDco/Z pJ47JQVBmgT42Gvpt0EYOTCUUGIyylR4fM0dJxO5q7Nrl2M1t7YI572rgf9VYKZi NZHReBAyzh5IB+w23usCzpmdvs5CybtbJIqAxf7LAg/qd/p1GQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEN3kvHS0hrs8owLhumwCzQEBHzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvZDIzNTYzMGQtNTQ2ZC0z NzZiLThjNjMtYjE5NGMxNGI3MWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlS8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADvM4iQGBfT2qtwoi8WaiYKNZolVjVmNZLA3QWeZvfhkLQ9k9x8igLXY9 zWpnIyjCDGoL8hHrChIc2H8g89wwNWdhrUE1uMoVvCYN5SaGBDEgQTWmN7C4I0SP sGKn/YU5jJbmMf9MfYyk32CZqJzs3FbLlh0ztB2iJxBG5/nnmHWOsC3nHKet3qpu 1lXY+LaffI+NK1WNYG1SvWqiCAaojmfkkR/N4eHnM0AJgZj6XD95AuK/JPRni8ZT f1nWbZU6ekCB34fpVUi/iFTJRaczTtejNMxUJ0lZMflfdk9aT89AN0Ee6Ho42pAs lK8XwGUk+uTqFZXUrYDqKYRlGKzVPA== -----END CERTIFICATE-----Generated at Mon Apr 13 14:35:04 2026 by rpki-client