$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa File: 3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa (raw, json) Hash identifier: V7fTN9zghRf8SpGTyGGWjB2GffOxjpx55bHC+nW7eOs= Subject key identifier: FD:49:E8:9B:B9:2F:57:F1:C8:57:F6:2A:6A:D6:CE:EC:B9:09:F7:4A Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584DC4005635970777D8F1770300 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 153371 IP address blocks: 149.112.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:56:35:97:07:77:d8:f1:77:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=57c9c366-c21d-4f4f-a14d-c82d41228857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:65:f6:ff:05:43:57:9b:74:96:d4:b5:0c: e1:8d:66:cc:f1:55:e3:ee:0e:45:ff:65:61:09:92: 5a:eb:58:e3:16:14:da:d2:d0:e7:b3:40:7c:4e:39: 52:03:9c:a1:37:a8:06:e9:86:ca:79:4d:37:93:ae: d4:22:3b:72:f4:30:4c:1c:9d:ac:07:72:be:35:8e: 03:47:46:35:77:c4:53:c9:34:1f:c3:d2:0e:e0:5e: 63:aa:1b:a2:13:14:91:b2:fd:ca:4a:0c:c5:f2:dc: 38:6e:bd:16:a9:e8:22:b9:a1:08:2f:f5:cd:c0:65: c3:1f:d4:a2:8f:41:8a:60:eb:8a:b1:69:be:59:79: 77:02:00:5f:36:4a:bc:29:c9:e9:32:75:8b:28:64: d6:8e:19:e4:98:3d:35:15:5d:cb:42:09:eb:05:50: 08:18:0d:83:fa:a3:ed:ac:dd:82:4e:e6:f3:4f:94: f2:ef:76:07:1d:f5:66:09:4d:76:86:8a:4e:5d:70: 97:83:29:fd:0b:a3:22:cb:c0:9b:50:c7:c2:56:cf: 7c:7e:27:cd:b0:8c:94:ba:5e:4d:8e:ee:73:a8:aa: de:39:68:73:a3:61:70:4b:99:ed:30:db:c2:98:f5: b7:15:e8:0c:37:c7:27:00:b5:38:7f:78:3a:b1:5a: fe:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:49:E8:9B:B9:2F:57:F1:C8:57:F6:2A:6A:D6:CE:EC:B9:09:F7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 149.112.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a0:fb:a2:e5:5c:01:89:8d:04:93:55:9c:90:72:7a:d3:3f: 19:d2:73:02:58:90:72:ea:94:9f:d5:d9:5e:c4:6c:4b:d4:17: 22:89:2b:b7:b3:16:aa:1f:b9:8f:83:6c:94:14:36:41:7d:9c: 66:8e:1f:9f:b9:5b:4d:fd:84:3d:65:56:a7:6f:35:f2:42:c1: 81:03:7d:e6:7d:96:e7:7f:c6:56:b1:70:b4:a2:84:14:64:dd: de:63:91:88:37:4d:30:7d:2c:62:35:b2:1e:cb:98:57:56:f7: 8e:b6:84:e6:29:2e:58:ea:67:95:08:e3:93:18:a8:e8:2c:5a: a4:e8:0d:ed:c3:6d:7b:2e:b2:d2:6b:d6:d8:e7:e3:3b:c3:4f: 81:17:ec:b1:0a:44:2a:db:4b:ea:09:23:9f:00:71:22:76:b8: a6:9c:71:f2:a2:60:ad:df:33:2a:11:3c:8e:09:bd:61:42:ee: 4e:76:4d:06:48:6e:2c:cd:66:8b:a1:5b:4d:41:e2:9a:73:3a: fc:80:cc:d8:bb:d2:0d:f3:94:bf:fc:01:ea:c5:b9:b5:29:aa: f2:3b:00:96:c0:f5:db:4b:47:30:9f:17:9b:f4:a8:12:d6:df: 0e:83:26:6f:c9:03:ea:72:47:de:77:42:2d:55:b2:8b:f9:d3: 51:0c:84:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAFY1lwd32PF3AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk NTdjOWMzNjYtYzIxZC00ZjRmLWExNGQtYzgyZDQxMjI4ODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu35l9v8FQ1ebdJbUtQzhjWbM8VXj7g5F/2Vh CZJa61jjFhTa0tDns0B8TjlSA5yhN6gG6YbKeU03k67UIjty9DBMHJ2sB3K+NY4D R0Y1d8RTyTQfw9IO4F5jqhuiExSRsv3KSgzF8tw4br0WqegiuaEIL/XNwGXDH9Si j0GKYOuKsWm+WXl3AgBfNkq8KcnpMnWLKGTWjhnkmD01FV3LQgnrBVAIGA2D+qPt rN2CTubzT5Ty73YHHfVmCU12hopOXXCXgyn9C6Miy8CbUMfCVs98fifNsIyUul5N ju5zqKreOWhzo2FwS5ntMNvCmPW3FegMN8cnALU4f3g6sVr+VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1J6Ju5L1fxyFf2KmrWzuy5CfdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvM2QzZjg4ODYtOWM5YS0z YzI2LThjMDktOTk1NjlmNWJmNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOg+6LlXAGJjQSTVZyQcnrTPxnScwJYkHLqlJ/V2V7EbEvUFyKJK7ez FqofuY+DbJQUNkF9nGaOH5+5W039hD1lVqdvNfJCwYEDfeZ9lud/xlaxcLSihBRk 3d5jkYg3TTB9LGI1sh7LmFdW9462hOYpLljqZ5UI45MYqOgsWqToDe3DbXsustJr 1tjn4zvDT4EX7LEKRCrbS+oJI58AcSJ2uKaccfKiYK3fMyoRPI4JvWFC7k52TQZI bizNZouhW01B4ppzOvyAzNi70g3zlL/8AerFubUpqvI7AJbA9dtLRzCfF5v0qBLW 3w6DJm/JA+pyR953Qi1Vsov501EMhEs= -----END CERTIFICATE-----Generated at Wed May 13 10:13:04 2026 by rpki-client