$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f408b35b-7d79-343d-9128-fbe87b068b71.roa File: f408b35b-7d79-343d-9128-fbe87b068b71.roa (raw, json) Hash identifier: NArHmYweQ49w/k2WOIA/V7EmjvaAIkd6AfbpLoGerzI= Subject key identifier: 5C:7D:F9:91:24:5B:09:36:31:38:E7:EE:DF:D5:0F:5E:80:D9:58:49 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D9A92EF03335BBE1043C5CE40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f408b35b-7d79-343d-9128-fbe87b068b71.roa Signing time: Thu 23 Apr 2026 16:52:07 +0000 ROA not before: Thu 23 Apr 2026 16:52:07 +0000 ROA not after: Wed 22 Jul 2026 16:52:07 +0000 asID: 16509 IP address blocks: 149.57.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:92:ef:03:33:5b:be:10:43:c5:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 23 16:52:07 2026 GMT Not After : Jul 22 16:52:07 2026 GMT Subject: CN=6ab245db-74f9-47d4-8eec-e3aef6677daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3f:04:65:09:4f:3c:e8:e3:4e:2c:42:2f:31: bf:bc:25:91:94:8c:66:4e:cd:16:ca:fe:0a:44:61: 1e:99:76:6c:ba:14:1a:23:84:a9:b7:44:40:27:c2: d8:58:c9:f6:21:d2:c2:9b:5e:b7:1b:c9:f4:34:b2: 84:a0:7a:09:4f:15:20:d8:48:2f:43:5c:0b:54:f6: 00:58:10:05:7e:65:ba:84:71:f0:0f:80:48:c6:25: 6e:53:be:02:84:7a:b7:58:5e:ad:dc:d8:56:a1:08: dd:fa:f7:bf:86:ec:df:f3:8f:f9:f7:17:3f:d3:0f: b1:02:86:ab:1b:70:91:99:61:a8:96:9e:a0:9e:b5: 87:05:4d:ef:cd:0c:cd:e6:74:13:8b:77:c4:8b:70: 7c:24:fc:b5:ce:12:0b:8f:9f:65:09:08:c8:cf:71: 78:a7:0c:0d:6c:b2:ba:cd:ee:75:1b:8d:d8:92:f5: b2:a2:e8:2d:b4:25:c3:86:1f:00:eb:6d:f0:a5:71: c9:dd:39:f9:c6:d1:93:c1:9a:60:e6:a2:23:63:c5: a2:52:0a:7e:d6:1e:d8:0c:68:ad:b5:35:5f:52:ca: cd:89:78:d4:94:7a:ab:01:31:92:61:80:e9:99:99: 6d:c1:8c:aa:b1:6b:a4:91:98:10:26:64:05:14:86: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7D:F9:91:24:5B:09:36:31:38:E7:EE:DF:D5:0F:5E:80:D9:58:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f408b35b-7d79-343d-9128-fbe87b068b71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.57.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:16:e3:f5:a2:6d:f2:ca:cd:6b:1e:a8:a7:63:1f:1b:1e:a0: 7a:4c:50:d6:2a:a5:34:fc:85:f8:c0:e7:74:98:76:ce:6b:c9: c7:5f:f0:89:be:f2:4b:da:18:71:98:87:34:22:2d:0f:d2:87: d0:9d:a5:99:f7:7a:71:35:6c:60:ed:b2:6d:97:0e:13:8a:bf: 03:c4:c2:c8:dd:00:eb:ae:13:79:c0:48:1d:04:eb:18:e8:30: 42:f2:ed:3a:ae:46:b4:e3:74:a2:98:2e:3e:c8:66:06:f4:5e: 3b:74:a0:79:2f:b1:6a:ef:3f:1c:35:f4:ad:6e:10:ee:4a:b8: b1:17:57:53:0b:23:6b:50:89:80:f5:de:4d:e4:53:f0:23:96: b1:e5:db:56:e2:3c:b7:ec:db:d2:98:9a:d2:9c:a7:7b:70:e8: dd:2d:fc:19:7d:f2:47:87:93:2c:d9:15:10:fb:2d:3a:37:94: 66:da:a3:0e:15:8d:da:d6:05:9f:57:e7:d0:09:d8:8e:6a:e2: 49:f4:99:0c:f4:29:d0:4d:92:2e:fb:46:42:ac:ef:85:99:62: 79:50:b4:8e:11:3f:e8:33:50:ff:f1:80:47:6f:a9:01:d0:c7: cf:a2:0f:e9:e5:4d:c3:93:cd:ea:63:b6:b8:6d:23:34:5a:88: f2:97:65:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aku8DM1u+EEPFzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMzE2NTIwN1oXDTI2MDcyMjE2NTIwN1owLzEtMCsGA1UEAxMk NmFiMjQ1ZGItNzRmOS00N2Q0LThlZWMtZTNhZWY2Njc3ZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T8EZQlPPOjjTixCLzG/vCWRlIxmTs0Wyv4K RGEemXZsuhQaI4Spt0RAJ8LYWMn2IdLCm163G8n0NLKEoHoJTxUg2EgvQ1wLVPYA WBAFfmW6hHHwD4BIxiVuU74ChHq3WF6t3NhWoQjd+ve/huzf84/59xc/0w+xAoar G3CRmWGolp6gnrWHBU3vzQzN5nQTi3fEi3B8JPy1zhILj59lCQjIz3F4pwwNbLK6 ze51G43YkvWyougttCXDhh8A623wpXHJ3Tn5xtGTwZpg5qIjY8WiUgp+1h7YDGit tTVfUsrNiXjUlHqrATGSYYDpmZltwYyqsWukkZgQJmQFFIYi8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFx9+ZEkWwk2MTjn7t/VD16A2VhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjQwOGIzNWItN2Q3OS0z NDNkLTkxMjgtZmJlODdiMDY4YjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlTnNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYW4/WibfLKzWseqKdjHxseoHpMUNYqpTT8hfjA53SYds5rycdf8Im+ 8kvaGHGYhzQiLQ/Sh9CdpZn3enE1bGDtsm2XDhOKvwPEwsjdAOuuE3nASB0E6xjo MELy7TquRrTjdKKYLj7IZgb0Xjt0oHkvsWrvPxw19K1uEO5KuLEXV1MLI2tQiYD1 3k3kU/AjlrHl21biPLfs29KYmtKcp3tw6N0t/Bl98keHkyzZFRD7LTo3lGbaow4V jdrWBZ9X59AJ2I5q4kn0mQz0KdBNki77RkKs74WZYnlQtI4RP+gzUP/xgEdvqQHQ x8+iD+nlTcOTzepjtrhtIzRaiPKXZcs= -----END CERTIFICATE-----Generated at Tue Apr 28 21:11:58 2026 by rpki-client