$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f01b5650-0228-3a8b-a024-0da74338c23d.roa File: f01b5650-0228-3a8b-a024-0da74338c23d.roa (raw, json) Hash identifier: HgKsgbnAx5Z9cDnQb/md+7ykKO68zsAtksaXZWxf5f8= Subject key identifier: 13:64:94:39:63:86:4C:0C:59:D9:1C:DB:D8:7C:0C:9C:90:28:82:A0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E39646AE91D0FB3D0412F8B00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f01b5650-0228-3a8b-a024-0da74338c23d.roa Signing time: Fri 19 Jun 2026 14:11:55 +0000 ROA not before: Fri 19 Jun 2026 14:11:55 +0000 ROA not after: Thu 17 Sep 2026 14:11:55 +0000 asID: 60501 IP address blocks: 149.86.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:39:64:6a:e9:1d:0f:b3:d0:41:2f:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 19 14:11:55 2026 GMT Not After : Sep 17 14:11:55 2026 GMT Subject: CN=7d14543b-3fdb-45e6-a909-a16dde562068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:65:8e:5d:d3:56:5f:5b:8f:bf:96:7a:c1:a3: 91:3e:c7:78:6b:06:ba:7a:5f:05:13:25:c4:b8:5c: 9a:bb:0b:b0:35:50:37:42:46:ea:7b:ca:2d:bf:4a: 72:56:b6:21:a5:dc:7b:f2:c1:18:73:6b:02:6b:50: 3c:d7:91:b9:78:ac:a4:f1:4d:19:9e:18:c2:4d:18: de:6a:a3:d2:f8:65:1b:94:c1:47:0c:18:1d:26:b5: c7:bc:bf:3a:97:36:28:a0:cb:81:ff:7a:79:ff:fd: 35:8e:e7:09:ff:46:e1:f9:cf:b0:42:35:4c:7f:7e: 01:f6:21:b7:2c:a2:fb:57:2b:f2:b7:1f:a7:62:42: 2b:9a:bf:3b:6e:ff:54:e6:2c:ff:05:0a:57:09:30: 74:d0:40:9f:7a:31:04:a7:24:53:d2:79:67:a7:75: 18:4f:59:41:e2:dd:37:29:63:8f:ce:90:97:cb:2f: 5b:08:fd:e5:c2:63:70:54:9e:13:c3:dd:2c:1b:b9: 4c:0f:e3:fe:d8:1a:78:8d:7e:7b:7d:84:e7:9a:9a: 48:9c:e1:59:2f:e1:76:c8:03:f4:e0:71:21:80:6d: a3:c3:21:94:d3:f8:fe:40:f8:c3:85:32:46:53:c7: 3e:2a:35:9f:71:3c:62:d4:06:10:5d:fe:b4:c0:59: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:64:94:39:63:86:4C:0C:59:D9:1C:DB:D8:7C:0C:9C:90:28:82:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f01b5650-0228-3a8b-a024-0da74338c23d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.86.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:7b:8a:60:6c:8e:c0:f5:0c:28:ef:e1:09:8c:5c:8e:75:c2: 86:9d:9c:03:74:91:3c:3f:b0:0d:ce:d2:3a:e3:00:c4:60:ff: a6:ea:bd:20:94:c2:31:db:37:98:a2:a0:99:59:56:69:e1:71: 9b:3c:47:4f:4b:df:11:a6:c4:b6:c7:de:4b:59:25:94:d7:0b: ec:98:b6:e3:f5:fc:f2:c6:a4:ac:2d:e2:36:13:f4:8e:94:c2: a2:eb:29:96:db:b7:49:02:c6:e6:ce:ed:d4:7b:2f:61:76:58: fe:64:59:34:76:db:55:28:90:8b:22:36:7b:a8:b3:d2:15:06: 84:a7:fd:71:2a:75:bf:92:2a:17:49:fa:db:52:f5:b3:2d:66: 7e:25:fc:58:8f:cf:d8:2a:bc:9e:31:3d:a3:58:7e:eb:59:cf: 77:27:68:f5:cf:52:1c:3f:09:f3:28:87:bf:0e:7b:33:7b:49: 0d:0e:b0:af:ba:0a:06:4d:6f:0b:a8:10:29:57:af:23:3e:e7: 92:75:58:5e:11:70:07:09:74:ee:f6:af:38:46:7e:df:77:03: bf:fd:e6:53:6e:1d:97:69:dd:4d:56:f2:52:0f:01:89:92:89: 8b:6d:85:ed:9c:35:0b:08:56:71:45:ea:9f:60:39:d2:44:f2: 35:5c:3f:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE45ZGrpHQ+z0EEviwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYxOTE0MTE1NVoXDTI2MDkxNzE0MTE1NVowLzEtMCsGA1UEAxMk N2QxNDU0M2ItM2ZkYi00NWU2LWE5MDktYTE2ZGRlNTYyMDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmWOXdNWX1uPv5Z6waORPsd4awa6el8FEyXE uFyauwuwNVA3Qkbqe8otv0pyVrYhpdx78sEYc2sCa1A815G5eKyk8U0ZnhjCTRje aqPS+GUblMFHDBgdJrXHvL86lzYooMuB/3p5//01jucJ/0bh+c+wQjVMf34B9iG3 LKL7Vyvytx+nYkIrmr87bv9U5iz/BQpXCTB00ECfejEEpyRT0nlnp3UYT1lB4t03 KWOPzpCXyy9bCP3lwmNwVJ4Tw90sG7lMD+P+2Bp4jX57fYTnmppInOFZL+F2yAP0 4HEhgG2jwyGU0/j+QPjDhTJGU8c+KjWfcTxi1AYQXf60wFkh8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNklDljhkwMWdkc29h8DJyQKIKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjAxYjU2NTAtMDIyOC0z YThiLWEwMjQtMGRhNzQzMzhjMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlVbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh7imBsjsD1DCjv4QmMXI51woadnAN0kTw/sA3O0jrjAMRg/6bqvSCU wjHbN5iioJlZVmnhcZs8R09L3xGmxLbH3ktZJZTXC+yYtuP1/PLGpKwt4jYT9I6U wqLrKZbbt0kCxubO7dR7L2F2WP5kWTR221UokIsiNnuos9IVBoSn/XEqdb+SKhdJ +ttS9bMtZn4l/FiPz9gqvJ4xPaNYfutZz3cnaPXPUhw/CfMoh78OezN7SQ0OsK+6 CgZNbwuoEClXryM+55J1WF4RcAcJdO72rzhGft93A7/95lNuHZdp3U1W8lIPAYmS iYtthe2cNQsIVnFF6p9gOdJE8jVcP64= -----END CERTIFICATE-----Generated at Mon Jun 29 21:05:36 2026 by rpki-client