$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa File: 21975138-cf92-36b8-8d76-cc6b2ac602dd.roa (raw, json) Hash identifier: kZ3w32eoCc5JB8u3B8+sDzF3PT/eZfIXtgdaEzC1xss= Subject key identifier: D1:E3:97:59:63:5B:5E:57:1C:7A:AE:C5:89:BB:F6:00:F2:62:78:38 Certificate issuer: /CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Certificate serial: 010D0C9F4328584DD35B139B9062032DEC199C80 Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 40401 IP address blocks: 149.137.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 18 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:13:9b:90:62:03:2d:ec:19:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=6ed7f4b5-81e2-444d-8d1b-1f65be7a418b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:e8:7b:23:80:9a:42:25:eb:2c:7d:6c:8a: 15:4f:e2:3f:cc:1f:03:08:ae:e1:ec:55:fb:55:e3: 57:f8:bd:5f:74:ab:74:75:e1:6d:32:2f:c2:c4:ff: cd:a1:4d:cc:c0:49:63:d7:51:c4:56:de:28:f9:78: b1:bf:e1:7e:b0:22:18:c3:8b:54:60:43:6f:8d:41: 15:df:00:58:7c:cd:60:09:eb:e8:80:6a:99:1d:58: fb:8c:e6:30:aa:a1:c7:38:c0:89:1b:10:74:86:ff: 94:45:2d:62:70:c2:ea:ea:97:c9:4a:51:26:68:d4: 70:1d:52:42:3d:c9:0b:0a:e4:52:c4:c5:27:cc:d2: bb:43:2a:b1:42:5b:6b:8c:8a:0a:81:8c:79:a2:ed: 65:f1:f1:19:f5:46:a6:24:9b:bf:67:76:e5:62:37: 2e:88:2f:ea:2f:08:9d:68:22:c9:6c:12:3b:03:62: 45:f6:c4:c6:62:f3:66:bb:a3:79:0e:9b:c2:16:82: 43:31:94:1d:9f:05:fd:58:19:69:8f:9a:e3:a4:98: f1:79:59:17:a2:0b:dd:89:19:9b:c9:10:1a:4a:10: c4:c5:ee:62:59:bb:76:9f:a4:40:0a:fa:5c:05:ff: d4:99:80:37:60:23:7f:fa:64:e8:3e:a4:5e:d2:b3: d6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E3:97:59:63:5B:5E:57:1C:7A:AE:C5:89:BB:F6:00:F2:62:78:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl X509v3 Authority Key Identifier: keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer sbgp-ipAddrBlock: critical IPv4: 149.137.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:9b:ff:ef:d0:e3:7a:f1:f6:ac:df:d5:55:93:ee:a6:2c:62: cd:09:30:7b:22:63:d1:f3:a9:07:8a:39:25:c7:d0:73:dc:52: 21:f6:64:30:61:ba:16:3f:ff:cc:65:fa:3f:dc:42:a2:3e:80: 06:d2:8b:ea:4c:88:2b:00:3c:c3:d1:72:c2:21:f3:e4:a8:8f: 8d:ba:11:13:69:93:11:31:a5:18:f9:ac:b3:93:a6:d5:9e:51: f6:69:c5:9d:3c:f2:7f:46:5c:27:af:21:f6:b4:1d:64:7f:57: c5:7b:f2:2e:e4:a7:b1:ae:e9:48:57:9a:59:e8:8a:2a:fd:3d: 22:42:0d:8b:ad:2d:9c:07:95:dc:05:da:68:55:b7:56:8f:f9: 08:97:d0:ad:85:84:68:fd:13:91:be:67:38:76:52:a7:c0:08: 98:24:4e:a3:15:1e:a6:49:92:9d:e8:92:52:52:5e:99:e8:5b: 61:bb:32:fa:06:6f:fc:74:90:59:3e:9e:d7:a7:e7:de:15:92: 25:3e:a6:3b:7f:dc:e9:05:83:8d:54:29:bc:c0:61:f7:29:ef: 62:c2:4d:65:06:20:e4:e6:80:0d:f1:f8:fd:7a:1b:a6:3e:07: ff:d6:cb:72:b4:fc:c5:74:29:2f:f5:b5:74:9b:fe:72:ea:13: 66:e9:40:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWxObkGIDLewZnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll Mjg3MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk NmVkN2Y0YjUtODFlMi00NDRkLThkMWItMWY2NWJlN2E0MThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQToeyOAmkIl6yx9bIoVT+I/zB8DCK7h7FX7 VeNX+L1fdKt0deFtMi/CxP/NoU3MwElj11HEVt4o+Xixv+F+sCIYw4tUYENvjUEV 3wBYfM1gCevogGqZHVj7jOYwqqHHOMCJGxB0hv+URS1icMLq6pfJSlEmaNRwHVJC PckLCuRSxMUnzNK7QyqxQltrjIoKgYx5ou1l8fEZ9UamJJu/Z3blYjcuiC/qLwid aCLJbBI7A2JF9sTGYvNmu6N5DpvCFoJDMZQdnwX9WBlpj5rjpJjxeVkXogvdiRmb yRAaShDExe5iWbt2n6RACvpcBf/UmYA3YCN/+mToPqRe0rPWVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHjl1ljW15XHHquxYm79gDyYng4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvMjE5NzUxMzgtY2Y5Mi0z NmI4LThkNzYtY2M2YjJhYzYwMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5 ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz YTQyOWUyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElYmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeb/+/Q43rx9qzf1VWT7qYsYs0JMHsiY9HzqQeKOSXH0HPcUiH2ZDBh uhY//8xl+j/cQqI+gAbSi+pMiCsAPMPRcsIh8+Soj426ERNpkxExpRj5rLOTptWe UfZpxZ088n9GXCevIfa0HWR/V8V78i7kp7Gu6UhXmlnoiir9PSJCDYutLZwHldwF 2mhVt1aP+QiX0K2FhGj9E5G+Zzh2UqfACJgkTqMVHqZJkp3oklJSXpnoW2G7MvoG b/x0kFk+nten594VkiU+pjt/3OkFg41UKbzAYfcp72LCTWUGIOTmgA3x+P16G6Y+ B//Wy3K0/MV0KS/1tXSb/nLqE2bpQHg= -----END CERTIFICATE-----Generated at Sat May 16 23:31:31 2026 by rpki-client