$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa File: 1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa (raw, json) Hash identifier: uwbN9/QZ3QvQU5R7Gd/njESRwEXUmlyGPjnVLyoh3XM= Subject key identifier: F8:A6:05:E3:80:51:4B:31:7A:7A:4F:4F:51:CA:29:63:B1:89:4C:38 Certificate issuer: /CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Certificate serial: 010D0C9F4328584DAAE0363C7958C532AA5D7DC0 Authority key identifier: 1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 0 IP address blocks: 149.112.0.0/24 maxlen: 32 2001:504:104::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:36:3c:79:58:c5:32:aa:5d:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=5cadb6f5-8fe0-44bb-bb54-6cc4125ae7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:74:20:0f:6a:c5:29:79:a4:7e:e2:34:4b: 79:29:40:e9:f2:f4:04:b2:ad:8e:36:04:a5:1f:68: 30:ba:d5:58:4b:a8:af:c6:cb:f9:74:66:20:86:db: ad:cb:7a:89:a1:e2:5e:0a:f9:a7:3b:a1:75:29:ac: a7:e8:96:55:70:47:0a:71:af:91:b2:39:ed:cc:2b: c7:93:f3:ad:9c:f8:ab:11:77:c7:bf:92:7f:70:0b: 92:04:66:ec:84:37:14:8f:59:c2:b0:a4:99:19:bf: 08:84:a9:b4:a9:cd:d5:59:4b:63:45:d5:ed:f5:b7: 5f:ac:ac:65:6e:21:2e:8c:20:df:89:2e:69:eb:fd: a9:30:7c:d9:7a:e0:35:03:62:ac:42:bf:6f:64:62: f8:78:29:ad:fd:53:fb:2d:5c:08:8c:e8:f1:82:68: ea:9e:4f:d7:21:ce:43:8f:51:7d:fd:d6:c3:df:1d: 83:dd:91:be:67:7a:5a:36:42:01:95:82:dd:43:b9: bf:42:69:2c:07:50:33:b5:99:d0:83:ee:a1:ca:50: 13:f8:67:3a:6d:c0:32:0e:a5:d5:94:c5:7e:d8:d9: 88:65:a7:c9:de:5d:cc:f2:a6:bc:43:8c:1c:b6:b3: 2a:27:22:b4:3e:a6:b3:3c:e3:9b:4e:ea:6a:64:6e: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A6:05:E3:80:51:4B:31:7A:7A:4F:4F:51:CA:29:63:B1:89:4C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl X509v3 Authority Key Identifier: keyid:1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer sbgp-ipAddrBlock: critical IPv4: 149.112.0.0/24 IPv6: 2001:504:104::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f9:0d:47:40:f1:ea:2d:d5:69:ea:a4:3a:69:65:5c:b2:9b: 45:df:88:6d:94:19:20:02:b1:c3:2f:e9:24:94:8f:3c:ff:87: 37:f2:5b:6a:1b:c0:3e:51:0c:f1:ee:a9:60:5e:0f:79:55:c9: 99:40:9b:ef:62:c9:a9:d5:c7:24:7c:3e:08:b4:ae:03:a1:4a: f5:b7:f4:f5:65:a8:2e:7d:de:8c:1d:49:99:5b:da:ba:83:e0: 1a:c9:96:a9:3f:34:aa:68:44:94:e3:22:7c:4e:ef:19:8f:f5: ec:7b:10:7b:0d:6c:80:20:c4:42:e6:ff:77:63:a2:2b:d0:fb: 5b:fd:87:af:7d:25:b5:7b:c7:df:21:45:90:06:79:70:01:f2: ca:d0:0d:0e:26:45:c6:08:aa:d9:67:e3:92:9f:d9:ad:d5:f9: 81:c1:5b:43:26:cf:c3:7f:8f:87:72:10:22:00:e9:37:b9:31: 81:23:6e:57:0b:c0:ef:bd:b2:97:1c:04:d5:b2:f9:e5:0b:09: d8:bc:93:b4:8a:9a:00:21:29:c6:f6:7b:26:64:fe:cc:be:8e: 38:cf:5b:65:a6:42:5b:de:6d:d4:89:09:74:3b:c7:1e:ee:26: f5:29:68:63:2f:4f:0e:69:8f:fb:eb:db:c4:f7:d1:bb:da:11: af:bf:2c:4e -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE2q4DY8eVjFMqpdfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxMmY5NmEtMmFmNS00YmIwLTljOTgtZGI4YjlhOGE5 YzQ4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NWNhZGI2ZjUtOGZlMC00NGJiLWJiNTQtNmNjNDEyNWFlN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm550IA9qxSl5pH7iNEt5KUDp8vQEsq2ONgSl H2gwutVYS6ivxsv5dGYghtuty3qJoeJeCvmnO6F1Kayn6JZVcEcKca+RsjntzCvH k/OtnPirEXfHv5J/cAuSBGbshDcUj1nCsKSZGb8IhKm0qc3VWUtjRdXt9bdfrKxl biEujCDfiS5p6/2pMHzZeuA1A2KsQr9vZGL4eCmt/VP7LVwIjOjxgmjqnk/XIc5D j1F9/dbD3x2D3ZG+Z3paNkIBlYLdQ7m/QmksB1AztZnQg+6hylAT+Gc6bcAyDqXV lMV+2NmIZafJ3l3M8qa8Q4wctrMqJyK0PqazPOObTupqZG5M7QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPimBeOAUUsxenpPT1HKKWOxiUw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDEy Zjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhiOWE4YTljNDgvMWYzMTA3NzktOWIyYS0z Y2M0LWFlYTQtZTMxNTIxZDI4ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxMmY5NmEtMmFmNS00YmIwLTlj OTgtZGI4YjlhOGE5YzQ4LzUwMTJmOTZhLTJhZjUtNGJiMC05Yzk4LWRiOGI5YThh OWM0OC5jcmwwHwYDVR0jBBgwFoAUHl+PVLvCW2Sa4uFRL+U2SPr1+i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDEyZjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhi OWE4YTljNDguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlXAAMA8E AgACMAkDBwAgAQUEAQQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARPkNR0Dx6i3VaeqkOmllXLKbRd+IbZQZ IAKxwy/pJJSPPP+HN/JbahvAPlEM8e6pYF4PeVXJmUCb72LJqdXHJHw+CLSuA6FK 9bf09WWoLn3ejB1JmVvauoPgGsmWqT80qmhElOMifE7vGY/17HsQew1sgCDEQub/ d2OiK9D7W/2Hr30ltXvH3yFFkAZ5cAHyytANDiZFxgiq2Wfjkp/ZrdX5gcFbQybP w3+Ph3IQIgDpN7kxgSNuVwvA772ylxwE1bL55QsJ2LyTtIqaACEpxvZ7JmT+zL6O OM9bZaZCW95t1IkJdDvHHu4m9SloYy9PDmmP++vbxPfRu9oRr78sTg== -----END CERTIFICATE-----Generated at Wed May 13 03:36:50 2026 by rpki-client