$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa File: 30a47725-29f4-31fa-88b6-51de560106ef.roa (raw, json) Hash identifier: qhONdRW0y/8LeNAB0g1QUuRU5wzkouYqp5FIEpQPsl8= Subject key identifier: FA:B1:00:B4:AE:11:07:D6:89:61:9A:78:9E:50:2E:C6:D2:1B:27:CC Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584D95F0002056ABD7FCA1B5BA80 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 396905 IP address blocks: 149.19.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:00:20:56:ab:d7:fc:a1:b5:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=68da797e-5e2f-4582-9841-a67e8c78033d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ac:33:8c:a7:14:6e:34:48:f3:ca:51:4e:21: ee:76:cc:18:a4:c6:81:d0:7b:4a:ea:f4:8e:59:88: 87:ad:dd:6b:ea:a2:dc:cd:a5:19:c0:07:9c:7e:da: 31:16:6a:b8:52:e4:55:85:58:7c:b9:6c:a3:40:51: 1c:c8:09:9b:a7:c7:28:7d:47:ac:cf:7d:7a:00:8b: 09:f2:57:49:b1:25:43:d7:f9:03:30:5c:78:45:84: 47:27:da:74:ef:79:05:a1:db:ba:57:af:8c:59:44: 55:ea:15:94:a9:e9:80:c4:78:f8:3f:25:8b:a0:90: dd:78:ca:e5:34:df:d5:b3:e9:29:71:e3:2e:c9:95: 91:65:67:6f:c2:0f:13:6e:4d:20:5c:ba:a3:dc:24: 0b:ea:b5:a5:c0:a5:8b:1b:7e:62:ca:c7:48:35:d7: a3:54:c1:2f:e9:b6:10:4f:28:86:3e:4d:02:ce:71: 64:72:c4:f7:02:d5:1a:fd:38:87:34:f7:c3:e5:e3: 23:29:8a:e2:7a:11:bc:9f:e9:46:99:47:ae:6b:77: 0b:06:45:20:c9:18:86:a2:87:23:b4:44:7a:29:0d: de:53:06:c6:49:a9:ff:f1:d6:4a:0c:00:58:9f:61: ed:f5:ca:62:0b:f7:26:9c:23:e3:0a:cd:f7:dd:1b: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B1:00:B4:AE:11:07:D6:89:61:9A:78:9E:50:2E:C6:D2:1B:27:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 149.19.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:1a:36:76:70:ee:4f:1f:73:a3:13:5e:8c:54:38:2f:8c:c0: 16:1a:fe:bf:c6:f7:29:9e:7b:bc:84:82:36:5e:82:10:ae:8a: 28:8f:aa:5f:a7:c5:d7:0d:80:9c:a7:e8:94:68:05:c0:39:d9: d7:66:5e:24:9a:0f:7f:98:24:5d:71:f4:5b:a1:64:3d:9a:43: d6:77:de:40:af:01:ec:de:94:9e:ee:ca:eb:a1:68:b2:f4:a7: ea:ea:40:11:74:b5:5f:44:dc:da:1e:c4:44:6e:96:ef:67:9d: cc:dc:db:9d:31:4f:2c:1b:4b:b8:ae:97:66:f5:56:36:af:e6: 29:99:70:17:4b:87:90:8c:4f:91:9a:b0:1d:15:cd:bb:91:46: 6c:cd:d9:6c:39:49:58:5b:f7:52:6e:fe:b1:30:2b:57:f7:ab: 57:57:0d:85:cb:5e:39:57:42:3c:dc:4a:fd:4f:ac:c9:a1:09: 05:a3:f5:11:b9:7e:9c:e3:be:cf:53:e3:fd:d2:14:19:7a:33: bb:dd:fa:61:d8:c2:ca:65:0a:0c:34:c3:bd:12:44:6d:7b:d9: c1:bc:fe:f8:60:de:86:fb:62:9a:ea:5a:f4:04:bd:dd:9d:21: 20:95:2c:c3:b0:a2:9d:a6:b1:2d:16:42:c6:2f:41:a4:06:f6: 67:7e:52:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AAgVqvX/KG1uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NjhkYTc5N2UtNWUyZi00NTgyLTk4NDEtYTY3ZThjNzgwMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26wzjKcUbjRI88pRTiHudswYpMaB0HtK6vSO WYiHrd1r6qLczaUZwAecftoxFmq4UuRVhVh8uWyjQFEcyAmbp8cofUesz316AIsJ 8ldJsSVD1/kDMFx4RYRHJ9p073kFodu6V6+MWURV6hWUqemAxHj4PyWLoJDdeMrl NN/Vs+kpceMuyZWRZWdvwg8Tbk0gXLqj3CQL6rWlwKWLG35iysdINdejVMEv6bYQ TyiGPk0CznFkcsT3AtUa/TiHNPfD5eMjKYriehG8n+lGmUeua3cLBkUgyRiGoocj tER6KQ3eUwbGSan/8dZKDABYn2Ht9cpiC/cmnCPjCs333Rs3rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqxALSuEQfWiWGaeJ5QLsbSGyfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvMzBhNDc3MjUtMjlmNC0z MWZhLTg4YjYtNTFkZTU2MDEwNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElRPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYaNnZw7k8fc6MTXoxUOC+MwBYa/r/G9ymee7yEgjZeghCuiiiPql+n xdcNgJyn6JRoBcA52ddmXiSaD3+YJF1x9FuhZD2aQ9Z33kCvAezelJ7uyuuhaLL0 p+rqQBF0tV9E3NoexERulu9nnczc250xTywbS7iul2b1Vjav5imZcBdLh5CMT5Ga sB0VzbuRRmzN2Ww5SVhb91Ju/rEwK1f3q1dXDYXLXjlXQjzcSv1PrMmhCQWj9RG5 fpzjvs9T4/3SFBl6M7vd+mHYwsplCgw0w70SRG172cG8/vhg3ob7YprqWvQEvd2d ISCVLMOwop2msS0WQsYvQaQG9md+UrU= -----END CERTIFICATE-----Generated at Wed May 13 09:58:16 2026 by rpki-client