$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0248e606-0272-3818-8d85-57d3bbe809af.roa File: 0248e606-0272-3818-8d85-57d3bbe809af.roa (raw, json) Hash identifier: FVxNb1qMBO97xoZI+DRVIumNk/In4G75XAWw5E8PLvY= Subject key identifier: B2:77:DD:FA:A0:57:1E:54:C7:D9:C5:61:4F:75:63:21:7A:3C:35:5B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D0A03DFD1F6C701EC92FCD640 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0248e606-0272-3818-8d85-57d3bbe809af.roa Signing time: Mon 02 Mar 2026 22:07:28 +0000 ROA not before: Mon 02 Mar 2026 22:07:28 +0000 ROA not after: Sun 31 May 2026 21:07:28 +0000 asID: 0 IP address blocks: 149.7.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:03:df:d1:f6:c7:01:ec:92:fc:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 2 22:07:28 2026 GMT Not After : May 31 21:07:28 2026 GMT Subject: CN=40aff237-e452-4178-9e0e-058f956fb1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:6d:fc:7c:76:7f:a3:4a:70:83:88:72:be: 77:aa:af:6b:b5:81:78:49:5c:8b:3c:56:72:69:3e: 74:cc:b6:63:d2:9d:00:69:22:57:0d:50:15:bd:ba: 0c:1c:b1:ec:db:8a:b5:4b:fd:3d:d6:8c:15:e0:c3: a9:ec:cb:79:b1:72:0e:0e:83:23:df:cd:07:a6:65: 37:06:92:df:f6:3d:10:51:9c:7d:85:67:0b:56:62: cd:c0:59:de:ef:d5:fe:6d:c3:04:57:dd:e4:a9:38: c5:da:9c:de:a6:de:06:c1:b6:d4:e9:73:f8:a6:6d: 6f:77:21:b3:52:a7:f1:f6:76:40:9f:b0:54:30:0d: 7f:c2:f8:db:57:65:b0:9d:52:a8:21:72:c7:72:a3: 09:6e:ba:cb:52:cc:20:52:0b:3b:2e:24:13:0c:0b: 83:f2:8a:4e:75:a0:03:b8:52:9c:28:8a:b3:fd:26: b5:89:11:b5:3d:4b:fc:01:0b:5b:20:bb:10:8c:93: 1d:ad:ce:5a:83:b8:87:8d:6a:26:3e:b2:2f:f5:7a: 7f:74:84:e1:00:ab:f3:2a:80:b3:ea:8a:d7:87:6a: c1:be:b3:de:03:88:a8:72:b6:51:b0:51:d0:8f:f7: 9e:40:13:ab:85:79:3d:2d:67:91:e5:44:12:98:8d: 34:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:77:DD:FA:A0:57:1E:54:C7:D9:C5:61:4F:75:63:21:7A:3C:35:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0248e606-0272-3818-8d85-57d3bbe809af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.7.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c9:e8:f6:3c:79:86:ed:1a:bd:8c:1f:52:7e:77:a6:91:d2: 58:a9:06:c1:58:e8:f6:3a:1b:82:bc:b1:9f:d4:86:d0:24:7b: c2:68:93:99:1b:b8:1f:37:88:fb:42:3a:ac:b9:61:0b:15:8c: 9a:87:e6:5a:87:c3:07:fb:4a:1f:f9:41:25:75:01:85:7c:e3: f9:73:7b:a4:8d:f3:2a:43:fb:0a:04:79:65:8b:b3:9a:87:34: 77:9d:45:70:df:ee:5d:7f:5e:76:c6:7a:d2:a3:ed:5b:fa:3a: a8:72:b2:3e:25:a6:7d:d7:02:d6:d3:bd:17:94:05:c7:ea:a8: 38:9a:c2:44:c4:fc:3e:15:92:c9:d9:47:84:41:a6:fc:79:9f: 29:fe:7d:7c:a9:68:e2:d4:70:47:8c:d2:84:67:84:02:09:0c: d0:ab:e0:28:9c:26:6b:bc:09:86:36:42:8e:a0:ea:86:9e:e1: f2:4f:81:78:af:05:94:2c:2e:2d:e0:77:14:dd:bd:40:17:16: 50:38:60:cb:0e:67:98:4a:d6:3c:21:64:24:48:9f:c5:c5:9f: 27:20:0e:bc:d4:ae:da:16:89:02:e6:64:29:68:3c:3f:c7:c6: cc:fe:cf:b1:ce:fe:ae:aa:f7:b4:e5:20:99:6c:a4:3d:a8:33: 37:c1:59:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0KA9/R9scB7JL81kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwMjIyMDcyOFoXDTI2MDUzMTIxMDcyOFowLzEtMCsGA1UEAxMk NDBhZmYyMzctZTQ1Mi00MTc4LTllMGUtMDU4Zjk1NmZiMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6dt/Hx2f6NKcIOIcr53qq9rtYF4SVyLPFZy aT50zLZj0p0AaSJXDVAVvboMHLHs24q1S/091owV4MOp7Mt5sXIODoMj380HpmU3 BpLf9j0QUZx9hWcLVmLNwFne79X+bcMEV93kqTjF2pzept4GwbbU6XP4pm1vdyGz Uqfx9nZAn7BUMA1/wvjbV2WwnVKoIXLHcqMJbrrLUswgUgs7LiQTDAuD8opOdaAD uFKcKIqz/Sa1iRG1PUv8AQtbILsQjJMdrc5ag7iHjWomPrIv9Xp/dIThAKvzKoCz 6orXh2rBvrPeA4iocrZRsFHQj/eeQBOrhXk9LWeR5UQSmI00gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ33fqgVx5Ux9nFYU91YyF6PDVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDI0OGU2MDYtMDI3Mi0z ODE4LThkODUtNTdkM2JiZTgwOWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlQedMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3J6PY8eYbtGr2MH1J+d6aR0lipBsFY6PY6G4K8sZ/UhtAke8Jok5kb uB83iPtCOqy5YQsVjJqH5lqHwwf7Sh/5QSV1AYV84/lze6SN8ypD+woEeWWLs5qH NHedRXDf7l1/XnbGetKj7Vv6Oqhysj4lpn3XAtbTvReUBcfqqDiawkTE/D4VksnZ R4RBpvx5nyn+fXypaOLUcEeM0oRnhAIJDNCr4CicJmu8CYY2Qo6g6oae4fJPgXiv BZQsLi3gdxTdvUAXFlA4YMsOZ5hK1jwhZCRIn8XFnycgDrzUrtoWiQLmZCloPD/H xsz+z7HO/q6q97TlIJlspD2oMzfBWXw= -----END CERTIFICATE-----Generated at Sat Mar 14 18:20:17 2026 by rpki-client