$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d51f576c-1ac8-3978-82ff-a211593b08e3.roa File: d51f576c-1ac8-3978-82ff-a211593b08e3.roa (raw, json) Hash identifier: J+sDjE/Y5++8Ff+P/em3ZTo3BB/Ft9KMbXf6O6KfJ+Y= Subject key identifier: 21:9E:00:02:FE:8F:55:15:23:80:22:7B:4B:38:77:00:AF:58:80:07 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F13023759F8003ABCD49B9AC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d51f576c-1ac8-3978-82ff-a211593b08e3.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 212087 IP address blocks: 149.71.40.0/21 maxlen: 24 154.62.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:37:59:f8:00:3a:bc:d4:9b:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=08f8f3bc-b208-413b-ad29-efce9f22d89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:29:5d:f2:c3:ed:e7:fd:25:7b:7e:f8:d7: 72:59:bb:8e:20:4d:18:d1:6a:9f:b3:c9:6e:5e:8e: b7:32:bc:d1:b4:0f:50:b3:a0:e3:65:1a:6e:e9:ec: 84:4f:a7:f5:81:92:51:f1:5a:e6:89:18:53:44:c3: c0:b0:f7:b5:b6:d5:8a:c7:3f:36:5a:5c:46:22:41: c4:0a:b3:a0:19:00:eb:90:46:3d:a3:9c:e1:c2:41: f3:b4:f5:d5:f4:20:d1:45:41:6a:89:2a:0a:b6:c1: 72:e0:98:85:6f:81:2a:b9:40:4a:99:fb:5f:31:33: 52:a2:8a:00:5b:ac:8e:c8:fb:80:4f:23:94:b8:7e: 9c:fa:3c:c6:5c:76:b3:1d:2c:e5:e5:c8:41:c9:62: e3:de:1e:f6:60:d7:fc:53:70:c2:da:1c:f9:4a:ca: ed:bc:8d:36:f2:9d:50:af:bd:09:b4:2d:53:21:73: c0:95:b2:1c:0c:14:57:7d:9a:0a:b8:dd:cf:63:e7: 7a:c4:6d:6c:84:64:31:ff:04:61:96:04:04:9f:ce: 65:93:4d:4e:4a:1d:0f:6c:d0:c4:77:dd:64:3e:64: d8:ad:ea:cc:4c:6d:29:31:35:fd:af:3c:c1:30:b1: 18:c6:28:1b:fb:0c:e0:9d:f8:5c:96:71:62:eb:65: 2d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9E:00:02:FE:8F:55:15:23:80:22:7B:4B:38:77:00:AF:58:80:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d51f576c-1ac8-3978-82ff-a211593b08e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.71.40.0/21 154.62.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:96:93:5a:03:33:7f:8e:cb:1d:04:4f:7f:f7:42:1a:53:b2: d1:64:f2:08:10:f8:78:75:30:fe:54:2e:5c:25:a2:28:8d:07: 74:91:16:90:1c:2d:56:32:b1:cd:6f:12:07:6d:72:22:be:eb: 58:a2:31:0d:08:6e:17:45:3f:60:b4:df:66:f8:e9:5e:ec:d5: 0c:07:e7:33:47:17:91:c8:5a:3e:57:08:26:f5:bd:15:de:e6: 83:96:37:86:73:1c:95:fe:be:2d:98:5a:49:af:bf:d1:55:e4: c9:88:80:fc:e1:f3:08:5c:f6:6a:56:d5:af:c7:8d:51:1a:15: e6:2e:67:d6:12:00:0e:93:8b:41:e6:87:92:75:7b:7a:79:54: d9:ff:d4:da:81:b7:43:60:bc:91:79:14:72:16:aa:7e:c4:e0: 52:ab:cd:ed:03:3c:88:80:b8:60:04:cf:7b:ce:64:d4:01:45: 6f:97:58:1d:9f:6a:fa:29:40:1f:48:04:ce:75:40:3b:f5:7e: 97:b5:f5:2e:c6:0c:fe:77:5a:9f:e5:83:bc:e3:05:57:90:fe: 3b:52:27:a5:d3:6d:f2:23:8f:01:23:b5:b8:15:14:6b:f9:6f: d7:61:10:20:84:5e:30:36:18:c2:78:05:68:15:4a:dd:8e:6b: f9:51:c6:9d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8TAjdZ+AA6vNSbmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MDhmOGYzYmMtYjIwOC00MTNiLWFkMjktZWZjZTlmMjJkODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkQpXfLD7ef9JXt++NdyWbuOIE0Y0Wqfs8lu Xo63MrzRtA9Qs6DjZRpu6eyET6f1gZJR8VrmiRhTRMPAsPe1ttWKxz82WlxGIkHE CrOgGQDrkEY9o5zhwkHztPXV9CDRRUFqiSoKtsFy4JiFb4EquUBKmftfMTNSoooA W6yOyPuATyOUuH6c+jzGXHazHSzl5chByWLj3h72YNf8U3DC2hz5SsrtvI028p1Q r70JtC1TIXPAlbIcDBRXfZoKuN3PY+d6xG1shGQx/wRhlgQEn85lk01OSh0PbNDE d91kPmTYrerMTG0pMTX9rzzBMLEYxigb+wzgnfhclnFi62Ut0QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCGeAAL+j1UVI4Aie0s4dwCvWIAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDUxZjU3NmMtMWFjOC0z OTc4LTgyZmYtYTIxMTU5M2IwOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDlUcoAwQD mj5YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABCWk1oDM3+Oyx0ET3/3QhpTstFk8ggQ+Hh1MP5ULlwloiiN B3SRFpAcLVYysc1vEgdtciK+61iiMQ0IbhdFP2C032b46V7s1QwH5zNHF5HIWj5X CCb1vRXe5oOWN4ZzHJX+vi2YWkmvv9FV5MmIgPzh8whc9mpW1a/HjVEaFeYuZ9YS AA6Ti0Hmh5J1e3p5VNn/1NqBt0NgvJF5FHIWqn7E4FKrze0DPIiAuGAEz3vOZNQB RW+XWB2favopQB9IBM51QDv1fpe19S7GDP53Wp/lg7zjBVeQ/jtSJ6XTbfIjjwEj tbgVFGv5b9dhECCEXjA2GMJ4BWgVSt2Oa/lRxp0= -----END CERTIFICATE-----Generated at Wed Sep 9 21:31:11 2026 by rpki-client