$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa File: d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa (raw, json) Hash identifier: usFWt+LOFTfhNMX9URCapD4PH2KoQRnQUJUq8rWIgX0= Subject key identifier: 2A:6E:90:81:49:EC:24:B2:AD:92:FB:47:BD:DD:44:D2:BA:BA:B1:90 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EC7A1C24C04BA0124AB8CB880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 196954 IP address blocks: 149.107.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:c2:4c:04:ba:01:24:ab:8c:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=22bf3bcb-79f0-4766-8e49-ee9bb96d3f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:af:87:55:fa:0d:65:d6:11:5a:f2:34:c3: 6d:c3:08:1a:bd:ce:49:96:c9:fa:7e:10:1f:a7:97: 40:f5:6c:8f:d7:fc:48:1c:f3:ac:69:5a:db:89:2b: 61:8d:e0:ee:e6:87:a2:7e:c4:a5:16:0e:3c:6d:6c: 43:54:9a:22:58:0d:ba:bd:5a:4d:8e:15:9c:cd:3f: aa:a7:e7:4d:35:2c:48:76:3b:b0:29:93:02:11:27: ce:7d:21:e0:21:13:96:b9:44:82:66:54:a7:62:2f: 0c:06:13:65:2c:2f:e7:60:20:6a:a8:ea:d0:5e:a6: e4:2d:8c:a4:14:83:68:b6:48:66:aa:28:6e:38:d8: 15:d9:38:e7:e7:ec:98:ca:57:ca:57:6c:65:d8:01: d7:a8:9c:a2:aa:a7:47:f3:56:80:97:6f:fa:9c:b6: 34:71:b3:23:7c:9f:b4:99:b1:d1:65:36:a4:85:75: 08:aa:82:0f:d1:d9:a4:f7:21:82:d2:cf:b5:9f:76: ba:88:3f:6c:72:2a:87:87:06:49:3a:aa:27:7c:8c: 3c:8a:d8:43:61:7e:5e:09:0e:42:37:76:6d:4b:a5: 18:b3:d2:06:d0:bc:d0:f2:6a:b5:10:6c:4c:5f:5c: 51:87:f7:64:c6:7a:09:75:f1:4a:0a:c6:5a:1e:00: 9c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6E:90:81:49:EC:24:B2:AD:92:FB:47:BD:DD:44:D2:BA:BA:B1:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.107.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ed:40:ba:17:ef:f1:2c:cb:e9:64:d2:c6:6c:2e:18:47:ff: fe:ea:56:a8:3d:a1:54:3d:79:2a:b2:cd:e0:65:52:24:d3:d4: a5:db:33:62:43:a7:10:b4:92:65:2d:da:50:f2:0e:df:47:e2: fe:39:5e:3d:82:b9:90:2f:a5:e1:f6:0f:6d:93:50:e2:b2:7e: 98:b1:1f:32:00:56:87:73:fa:28:29:33:2c:f8:20:7d:a5:dd: dd:d3:cd:bb:ce:bf:e2:de:23:f3:b5:ec:5a:a2:b7:75:76:9b: d1:ea:ae:99:bb:4c:7f:c9:05:0c:a9:9c:03:ee:f7:36:ae:23: 70:8f:7a:c4:59:05:78:59:e6:9e:e7:19:69:b9:5b:09:da:a3: ea:aa:a9:25:72:7a:0f:84:87:14:44:c8:58:d5:ad:51:f9:e4: 95:94:7d:3d:e6:a9:39:78:56:a8:85:ff:92:02:e0:bd:a3:98: b9:7a:99:7a:6d:0f:25:f8:00:c9:f4:21:a5:10:a2:6b:aa:e4: b6:aa:81:29:f0:70:65:84:20:d2:09:55:ca:b2:09:6c:8c:7e: 49:0d:df:ae:5b:ca:64:0b:3d:71:69:af:e7:d6:7c:bd:28:a1: f8:d7:5b:81:09:1e:10:dc:17:19:f9:70:18:cc:38:dd:5c:7d: 62:4f:16:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HocJMBLoBJKuMuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk MjJiZjNiY2ItNzlmMC00NzY2LThlNDktZWU5YmI5NmQzZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEmvh1X6DWXWEVryNMNtwwgavc5Jlsn6fhAf p5dA9WyP1/xIHPOsaVrbiSthjeDu5oeifsSlFg48bWxDVJoiWA26vVpNjhWczT+q p+dNNSxIdjuwKZMCESfOfSHgIROWuUSCZlSnYi8MBhNlLC/nYCBqqOrQXqbkLYyk FINotkhmqihuONgV2Tjn5+yYylfKV2xl2AHXqJyiqqdH81aAl2/6nLY0cbMjfJ+0 mbHRZTakhXUIqoIP0dmk9yGC0s+1n3a6iD9sciqHhwZJOqonfIw8ithDYX5eCQ5C N3ZtS6UYs9IG0LzQ8mq1EGxMX1xRh/dkxnoJdfFKCsZaHgCczQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpukIFJ7CSyrZL7R73dRNK6urGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDRhYTBlM2ItNTNkOC0z NzIzLTg5NjctOGE0N2ViNGQ4ZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLtQLoX7/Esy+lk0sZsLhhH//7qVqg9oVQ9eSqyzeBlUiTT1KXbM2JD pxC0kmUt2lDyDt9H4v45Xj2CuZAvpeH2D22TUOKyfpixHzIAVodz+igpMyz4IH2l 3d3TzbvOv+LeI/O17Fqit3V2m9Hqrpm7TH/JBQypnAPu9zauI3CPesRZBXhZ5p7n GWm5Wwnao+qqqSVyeg+EhxREyFjVrVH55JWUfT3mqTl4VqiF/5IC4L2jmLl6mXpt DyX4AMn0IaUQomuq5LaqgSnwcGWEINIJVcqyCWyMfkkN365bymQLPXFpr+fWfL0o ofjXW4EJHhDcFxn5cBjMON1cfWJPFmo= -----END CERTIFICATE-----Generated at Fri Sep 11 13:51:07 2026 by rpki-client