$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa File: d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa (raw, json) Hash identifier: WBb15ACr4LawSjcP2+t5DKznTU+6nYXW0woxA8p+uK8= Subject key identifier: 77:06:97:47:62:F2:86:A2:82:76:AB:6D:F9:35:28:CE:8E:F8:DD:41 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F698D72BF2782B2072ABEF640 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 196954 IP address blocks: 149.107.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:72:bf:27:82:b2:07:2a:be:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=a38c7153-d38b-4cf8-8753-b89ccb0a2c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:2a:b1:43:c4:70:1d:7f:92:5d:1e:75:1a: 79:57:fc:3d:e8:3e:6f:f5:21:09:24:0a:06:84:1d: cc:2d:bd:b3:97:15:29:51:e3:dc:20:85:c8:a2:0f: d0:ba:cb:e4:da:e2:a3:db:fb:b9:90:11:9f:4d:41: 44:20:13:4a:12:c8:93:35:94:e0:4c:0e:62:f2:de: e5:5f:6c:67:f3:45:8b:ec:90:1e:ae:df:58:6f:88: f7:9e:56:59:25:e0:d2:7a:0d:67:28:15:6f:ba:e4: 75:a3:4e:05:a1:bb:e2:4b:f8:47:2b:75:8f:07:47: a7:7c:b7:71:7a:71:25:90:92:64:12:c5:ea:c5:97: f5:4a:1c:f0:e8:e7:d2:97:01:83:c2:3c:dc:28:43: 5f:3c:9b:29:d0:b2:64:cb:66:4b:63:93:cf:c9:38: 5b:00:37:a9:df:3c:ad:92:00:3a:76:4a:73:e9:c2: 23:b0:da:5b:de:52:f5:b3:27:79:f2:90:73:70:a2: 7d:1c:93:fa:77:21:fd:78:59:0f:2f:8d:b8:78:13: 9c:53:80:35:7c:71:ca:00:62:4c:fb:22:a4:21:1d: e6:12:e2:6f:d5:fb:6a:dc:69:db:92:ab:df:b8:01: 72:70:66:41:4a:c8:56:0b:66:b5:82:69:f0:43:51: 84:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:06:97:47:62:F2:86:A2:82:76:AB:6D:F9:35:28:CE:8E:F8:DD:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.107.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:e9:b7:60:26:76:5e:1e:c7:6e:b2:c0:1c:7f:a7:22:55:ae: fa:3c:47:8c:22:36:64:1a:23:95:e5:19:57:7d:97:22:ab:19: e7:65:93:b3:55:65:12:53:c5:12:dd:7c:84:b4:ee:e3:e2:8a: f0:cf:60:6c:f9:b8:11:37:d3:47:c3:6f:3b:dc:ff:16:f7:a6: 0b:94:17:af:b8:10:af:39:13:29:f7:56:53:de:bc:ba:be:e8: b2:e8:a2:05:52:97:0d:29:8a:cf:b4:20:35:55:21:0e:11:3d: e0:d1:58:a6:5a:95:05:30:13:b3:52:0d:3a:fa:38:ad:c5:30: 1b:70:6a:d1:5b:13:c0:89:62:5d:70:1f:db:f7:d8:b5:60:69: e9:9e:7f:64:e1:4e:0d:13:d7:29:fc:6e:d1:f6:11:30:b8:44: a6:43:13:e5:d9:0f:80:42:49:65:06:a3:3f:1b:43:ce:20:89: fb:cd:f7:11:ca:4a:99:bd:1b:dd:d3:60:bd:2e:ca:c5:5c:8a: 1a:8a:9b:4c:62:12:d0:27:02:4d:2a:d3:27:2f:8c:06:e6:bb: 40:24:46:7c:2f:f2:c8:6e:bb:d5:39:b3:37:bc:4f:79:35:9b: aa:eb:91:75:ab:ed:f2:d6:56:73:ab:97:0d:d2:93:5b:6c:7c: d5:cd:71:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXK/J4KyByq+9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk YTM4YzcxNTMtZDM4Yi00Y2Y4LTg3NTMtYjg5Y2NiMGEyYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMsqsUPEcB1/kl0edRp5V/w96D5v9SEJJAoG hB3MLb2zlxUpUePcIIXIog/Qusvk2uKj2/u5kBGfTUFEIBNKEsiTNZTgTA5i8t7l X2xn80WL7JAert9Yb4j3nlZZJeDSeg1nKBVvuuR1o04FobviS/hHK3WPB0enfLdx enElkJJkEsXqxZf1Shzw6OfSlwGDwjzcKENfPJsp0LJky2ZLY5PPyThbADep3zyt kgA6dkpz6cIjsNpb3lL1syd58pBzcKJ9HJP6dyH9eFkPL424eBOcU4A1fHHKAGJM +yKkIR3mEuJv1ftq3GnbkqvfuAFycGZBSshWC2a1gmnwQ1GEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcGl0di8oaignarbfk1KM6O+N1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDRhYTBlM2ItNTNkOC0z NzIzLTg5NjctOGE0N2ViNGQ4ZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnpt2Amdl4ex26ywBx/pyJVrvo8R4wiNmQaI5XlGVd9lyKrGedlk7NV ZRJTxRLdfIS07uPiivDPYGz5uBE300fDbzvc/xb3pguUF6+4EK85Eyn3VlPevLq+ 6LLoogVSlw0pis+0IDVVIQ4RPeDRWKZalQUwE7NSDTr6OK3FMBtwatFbE8CJYl1w H9v32LVgaemef2ThTg0T1yn8btH2ETC4RKZDE+XZD4BCSWUGoz8bQ84gifvN9xHK Spm9G93TYL0uysVcihqKm0xiEtAnAk0q0ycvjAbmu0AkRnwv8shuu9U5sze8T3k1 m6rrkXWr7fLWVnOrlw3Sk1tsfNXNcWY= -----END CERTIFICATE-----Generated at Tue Oct 27 22:42:59 2026 by rpki-client