$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/02699de9-91f7-314a-8f61-1792c5455d9c.roa File: 02699de9-91f7-314a-8f61-1792c5455d9c.roa (raw, json) Hash identifier: EXbj0tw/mSa4384TxJlLQ3HIDySbtE2kdzjMu3Jj868= Subject key identifier: 23:25:CD:F9:9F:81:FD:2A:8F:75:F5:5E:DA:29:45:6A:37:2C:C1:C5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EAFE6EE0B83A905E4EA906400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/02699de9-91f7-314a-8f61-1792c5455d9c.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 395559 IP address blocks: 149.2.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:ee:0b:83:a9:05:e4:ea:90:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=7601e7c4-7fc7-4f32-ac9e-58a1568479da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:af:09:81:64:ba:54:05:72:48:2f:64:85:e0: 49:47:9f:bd:13:f1:89:45:90:1e:6f:86:0f:23:41: dd:f6:9b:80:31:d7:6d:26:94:92:56:37:b9:24:84: a5:ff:18:63:78:f3:4a:c5:32:fb:8c:d3:d0:08:71: 31:c4:c5:62:d5:e8:84:14:09:ea:1e:ea:0c:85:3d: 67:1b:76:98:79:32:77:e4:ce:04:5e:d0:a5:d7:26: c8:8c:58:e5:ba:a8:da:ee:3e:d4:53:62:4a:dc:67: ad:ea:45:62:24:c0:70:a4:25:a3:7c:cf:97:0e:a7: 62:f3:a7:e2:0f:b4:70:14:bf:c9:cd:cd:f1:ec:97: bb:99:f6:c1:4f:a1:de:62:46:ae:ee:52:17:b1:7b: 87:3e:72:6e:83:48:15:b9:65:1a:c5:55:e3:e9:b6: 08:1e:c6:95:14:ef:9f:4a:3a:91:6d:2b:0a:af:c5: a2:a0:c0:25:81:02:05:85:59:0c:aa:cf:76:8b:1f: 72:b5:88:e2:b6:1c:19:54:9d:90:f8:43:58:90:d9: 5f:8d:eb:ed:f9:32:24:85:fb:57:06:c2:35:76:37: 40:b1:c8:07:6c:dc:d8:36:4a:91:18:03:21:8a:09: 39:6a:60:15:e0:40:b6:bf:4f:1e:14:9f:d3:67:ae: b0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:25:CD:F9:9F:81:FD:2A:8F:75:F5:5E:DA:29:45:6A:37:2C:C1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/02699de9-91f7-314a-8f61-1792c5455d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.2.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:39:ca:23:fd:ed:c3:f2:71:21:16:f5:2b:f3:0c:f6:17:d7: 37:1d:4b:0d:05:52:63:17:ef:89:c1:7e:be:69:9a:b0:9c:f8: a9:f1:c2:81:49:93:38:23:ae:5a:d8:a2:8e:51:f4:51:9a:f5: 39:62:cf:20:92:c1:ac:ef:40:6c:8b:93:01:ec:05:69:0d:67: 0d:df:88:4b:5c:70:fd:93:22:3d:44:42:b2:ba:91:25:db:f8: b1:39:96:3a:83:0b:89:57:56:d9:c3:66:b9:e0:da:65:f7:00: 7d:5a:3f:0b:6d:b5:78:04:fd:2e:cd:00:07:12:b6:44:a3:46: 38:d9:9d:c2:b3:7f:c0:1a:6a:89:e2:39:75:dd:54:74:05:cb: bb:c3:7c:77:8f:6e:ec:33:4f:93:a9:60:76:11:6f:36:ae:31: bc:9c:e0:ea:3a:7d:2e:fb:96:fb:bc:8d:08:4a:84:f3:a5:8f: f9:88:93:3e:9b:18:35:dd:22:35:72:12:d4:6b:9b:fb:1a:33: 4d:ac:ee:74:bb:a0:53:47:c5:6a:a8:b1:4f:92:ae:52:61:4b: 01:f7:73:02:80:89:8d:f5:f9:f5:6c:96:11:77:e2:c5:48:24: 53:1b:40:5c:dd:6c:e1:8a:38:cf:d0:4c:3d:a2:29:19:71:85: c6:29:c7:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5u4Lg6kF5OqQZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NzYwMWU3YzQtN2ZjNy00ZjMyLWFjOWUtNThhMTU2ODQ3OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh68JgWS6VAVySC9kheBJR5+9E/GJRZAeb4YP I0Hd9puAMddtJpSSVje5JISl/xhjePNKxTL7jNPQCHExxMVi1eiEFAnqHuoMhT1n G3aYeTJ35M4EXtCl1ybIjFjluqja7j7UU2JK3Get6kViJMBwpCWjfM+XDqdi86fi D7RwFL/Jzc3x7Je7mfbBT6HeYkau7lIXsXuHPnJug0gVuWUaxVXj6bYIHsaVFO+f SjqRbSsKr8WioMAlgQIFhVkMqs92ix9ytYjithwZVJ2Q+ENYkNlfjevt+TIkhftX BsI1djdAscgHbNzYNkqRGAMhigk5amAV4EC2v08eFJ/TZ66wrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMlzfmfgf0qj3X1XtopRWo3LMHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDI2OTlkZTktOTFmNy0z MTRhLThmNjEtMTc5MmM1NDU1ZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlQIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw5yiP97cPycSEW9SvzDPYX1zcdSw0FUmMX74nBfr5pmrCc+KnxwoFJ kzgjrlrYoo5R9FGa9TlizyCSwazvQGyLkwHsBWkNZw3fiEtccP2TIj1EQrK6kSXb +LE5ljqDC4lXVtnDZrng2mX3AH1aPwtttXgE/S7NAAcStkSjRjjZncKzf8Aaaoni OXXdVHQFy7vDfHePbuwzT5OpYHYRbzauMbyc4Oo6fS77lvu8jQhKhPOlj/mIkz6b GDXdIjVyEtRrm/saM02s7nS7oFNHxWqosU+SrlJhSwH3cwKAiY31+fVslhF34sVI JFMbQFzdbOGKOM/QTD2iKRlxhcYpx0s= -----END CERTIFICATE-----Generated at Tue Sep 8 12:01:55 2026 by rpki-client