$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ecf06cb-52e5-39b0-a843-5bed771c2761.roa File: 4ecf06cb-52e5-39b0-a843-5bed771c2761.roa (raw, json) Hash identifier: c8Fn3mN46BWuY+CuZmsLJIYA5wifzRB5vMRSqvWpTF4= Subject key identifier: 87:78:17:3B:82:73:0A:6D:D0:7F:C3:FE:11:C8:1A:C7:A0:DF:A7:A7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E9031DF9D7D0CD24C5F5C4E80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ecf06cb-52e5-39b0-a843-5bed771c2761.roa Signing time: Mon 20 Jul 2026 16:25:24 +0000 ROA not before: Mon 20 Jul 2026 16:25:24 +0000 ROA not after: Sun 18 Oct 2026 16:25:24 +0000 asID: 27823 IP address blocks: 149.78.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:31:df:9d:7d:0c:d2:4c:5f:5c:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 20 16:25:24 2026 GMT Not After : Oct 18 16:25:24 2026 GMT Subject: CN=bc409637-77e2-423e-b56e-ada28bdf4e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f0:b6:87:d3:cf:18:2b:38:3a:bc:c8:78:60: 8a:08:fa:b0:8c:2b:53:54:54:75:f7:14:ac:33:7f: 46:a4:45:16:44:ae:67:60:b5:bb:fe:b1:3a:69:c9: 70:be:3f:03:6e:a1:e1:dc:1f:2a:cf:33:56:20:1e: 97:3c:17:ca:4f:1c:31:14:9a:c7:5c:86:3c:f5:93: f5:ac:4b:34:3e:24:b4:f3:b8:42:e9:dd:45:54:de: 7c:4f:46:51:a1:f7:83:ab:61:7a:7f:ee:a3:a9:3a: 29:62:52:87:69:d9:e0:01:98:98:5f:cb:7e:49:18: d5:d8:9e:ff:1f:34:47:69:10:1e:ae:f6:7b:cb:aa: a9:5c:61:3e:0b:77:69:34:15:50:35:f1:89:09:cc: c4:bd:f2:7e:a7:a3:16:fd:de:07:3b:5b:16:8f:e1: 64:f4:ea:b5:a2:22:e9:01:4f:0b:50:be:fc:51:f0: 7d:2c:85:72:6b:5e:92:cf:2b:6f:3e:c0:3a:c4:d2: 37:f1:29:c6:ea:60:f6:3c:06:7b:7f:ce:39:e6:07: 5b:e6:1f:a9:52:18:36:a2:76:6e:67:0d:0c:c7:02: cb:91:8b:8e:5d:aa:44:18:cf:ff:f7:9a:96:4b:fb: 24:ef:2c:d9:fb:91:ce:4c:b8:90:ff:46:46:a1:da: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:78:17:3B:82:73:0A:6D:D0:7F:C3:FE:11:C8:1A:C7:A0:DF:A7:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ecf06cb-52e5-39b0-a843-5bed771c2761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.78.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:53:e6:66:d2:68:86:4a:81:af:a1:55:f5:ba:2c:1b:e0:67: 16:90:d2:c8:99:5a:cd:61:a6:c7:9b:4a:5d:76:d3:41:54:d0: cf:f8:fa:1f:ac:e6:7e:d2:76:b4:28:23:bc:52:2d:7d:bc:79: e8:d1:c7:81:58:4b:07:a2:ee:fd:a2:b7:09:b9:2e:64:ad:cb: b8:9b:89:77:77:45:1b:04:c7:9e:73:0d:03:8a:a0:43:f6:00: 1f:cd:27:5a:82:10:15:5b:4c:82:00:f8:d1:77:5f:80:bd:ee: 63:e5:3c:dd:fa:ab:53:64:b6:7d:71:0e:eb:49:e6:16:bf:0c: 8f:23:0a:33:9c:c6:33:50:8a:a8:94:8d:22:6b:e2:a3:0e:fa: 36:c7:ac:30:36:32:04:a5:a1:81:9e:f7:76:7f:43:c6:1e:48: dd:1b:d7:a1:72:eb:2d:34:46:64:15:6b:77:c7:6b:82:3d:98: f6:01:f2:28:ae:c3:74:94:7d:75:17:6f:79:b7:7e:60:60:a1: 07:78:0a:8b:ce:d6:10:44:6e:81:19:89:b4:37:4e:21:88:32: 5e:bd:a6:fb:69:6a:22:8c:bd:67:3e:5c:6e:99:5a:e6:55:92: cf:00:d2:95:02:0c:2d:63:b0:64:9e:d9:d9:0b:18:26:0e:e7: 7f:59:d9:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QMd+dfQzSTF9cToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyMDE2MjUyNFoXDTI2MTAxODE2MjUyNFowLzEtMCsGA1UEAxMk YmM0MDk2MzctNzdlMi00MjNlLWI1NmUtYWRhMjhiZGY0ZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/C2h9PPGCs4OrzIeGCKCPqwjCtTVFR19xSs M39GpEUWRK5nYLW7/rE6aclwvj8DbqHh3B8qzzNWIB6XPBfKTxwxFJrHXIY89ZP1 rEs0PiS087hC6d1FVN58T0ZRofeDq2F6f+6jqTopYlKHadngAZiYX8t+SRjV2J7/ HzRHaRAervZ7y6qpXGE+C3dpNBVQNfGJCczEvfJ+p6MW/d4HO1sWj+Fk9Oq1oiLp AU8LUL78UfB9LIVya16SzytvPsA6xNI38SnG6mD2PAZ7f8455gdb5h+pUhg2onZu Zw0MxwLLkYuOXapEGM//95qWS/sk7yzZ+5HOTLiQ/0ZGodquoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId4FzuCcwpt0H/D/hHIGseg36enMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGVjZjA2Y2ItNTJlNS0z OWIwLWE4NDMtNWJlZDc3MWMyNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlU6DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJT5mbSaIZKga+hVfW6LBvgZxaQ0siZWs1hpsebSl1200FU0M/4+h+s 5n7SdrQoI7xSLX28eejRx4FYSwei7v2itwm5LmSty7ibiXd3RRsEx55zDQOKoEP2 AB/NJ1qCEBVbTIIA+NF3X4C97mPlPN36q1Nktn1xDutJ5ha/DI8jCjOcxjNQiqiU jSJr4qMO+jbHrDA2MgSloYGe93Z/Q8YeSN0b16Fy6y00RmQVa3fHa4I9mPYB8iiu w3SUfXUXb3m3fmBgoQd4CovO1hBEboEZibQ3TiGIMl69pvtpaiKMvWc+XG6ZWuZV ks8A0pUCDC1jsGSe2dkLGCYO539Z2Xo= -----END CERTIFICATE-----Generated at Wed Jul 22 05:04:16 2026 by rpki-client