$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b0dbd453-4b6f-36f0-a271-fd92e482a208.roa File: b0dbd453-4b6f-36f0-a271-fd92e482a208.roa (raw, json) Hash identifier: tm/jkzXYDUi46PNNxVfKoCYW0PRFBCTkRMgtHG95Rg4= Subject key identifier: 3C:9A:CB:FA:4F:6C:E1:BF:43:94:D6:4D:C3:CD:74:4F:7F:2F:05:29 Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584F92089318619FA636019FCD40 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b0dbd453-4b6f-36f0-a271-fd92e482a208.roa Signing time: Wed 21 Oct 2026 01:00:12 +0000 ROA not before: Wed 21 Oct 2026 01:00:12 +0000 ROA not after: Tue 19 Jan 2027 02:00:12 +0000 asID: 198949 IP address blocks: 149.47.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:08:93:18:61:9f:a6:36:01:9f:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Oct 21 01:00:12 2026 GMT Not After : Jan 19 02:00:12 2027 GMT Subject: CN=aab79274-2a37-4a28-b5fd-ed84cbf78cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:be:cb:18:91:ca:5c:80:ae:52:df:88:ec: 07:f1:86:5b:fd:b8:d0:0c:90:32:4a:ad:d0:4d:94: d7:25:67:6a:6f:b5:96:11:46:8d:9e:a6:29:85:e1: cc:3f:8e:12:58:e3:e3:57:b3:62:21:4a:9f:02:81: db:25:b5:43:26:60:f1:20:b1:5e:3d:2e:90:eb:72: fa:82:26:ed:7f:2b:a5:07:59:36:ec:12:40:96:fe: 6e:1d:b3:83:06:01:ed:1a:2a:48:d3:fd:cb:1c:49: a9:14:cb:fd:40:fa:c0:6f:2b:ef:e7:c2:1b:8f:cd: 5f:d8:f0:ee:f1:a9:a0:03:51:1e:dd:c4:6b:e2:6c: b8:e4:69:7f:7d:49:28:33:13:3a:af:c2:7c:d2:b6: ef:ba:b4:d9:7d:58:c3:8a:cf:45:a6:b5:a6:c3:ac: 06:cf:d0:3a:27:dc:9d:3f:37:e2:b7:56:5a:aa:5d: 89:e9:46:65:09:c6:72:4c:bd:5d:3c:17:c1:9c:45: d9:f1:0e:cd:f6:f0:a2:2d:31:99:78:dd:53:98:32: a7:f5:2d:de:7f:ef:8e:1b:43:5f:e5:00:69:5b:99: 72:7f:f2:76:8a:3e:f1:65:6a:db:95:f7:85:64:18: 45:7a:02:f4:17:f1:4b:05:bf:91:9d:34:ba:ad:ee: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9A:CB:FA:4F:6C:E1:BF:43:94:D6:4D:C3:CD:74:4F:7F:2F:05:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b0dbd453-4b6f-36f0-a271-fd92e482a208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 149.47.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:94:ae:41:e1:41:3f:0c:9c:c7:c9:99:24:79:89:22:e4:c1: 49:14:e2:57:9c:fd:7a:7e:ef:19:2d:7d:ca:de:b8:d5:42:22: ca:59:6a:df:79:b3:3c:a9:40:ca:c7:80:9b:44:de:21:bb:7f: b6:fe:a2:6e:0e:6d:e4:2a:33:bd:07:07:1d:60:d7:2a:33:fd: f7:d2:24:11:9e:c5:d0:bf:d9:26:e8:48:c4:57:60:2a:29:55: 93:47:34:29:f1:05:91:ea:66:81:48:bd:4a:a5:12:ff:95:cd: 68:66:97:c8:92:7a:bb:ce:da:f2:4e:80:5c:f8:95:34:a9:7f: b9:91:ef:69:b0:a1:2e:b7:89:c0:c0:03:34:72:d3:b2:05:39: 07:7a:82:43:9c:fa:db:1c:3d:5f:6e:a3:83:8f:ab:6e:74:ff: a1:ac:6c:8c:19:25:4a:a5:85:fa:6d:34:5e:0d:0d:64:03:97: 78:20:22:7c:74:fd:ca:a1:1c:2e:0e:8d:b2:2a:18:fe:ac:52: bc:9d:70:93:3e:f5:8b:14:8c:c1:c7:90:b9:50:36:b8:32:e6: 62:c3:50:20:39:a0:b9:0b:b7:b3:65:28:b1:b0:25:be:3b:5b: fd:51:ff:54:bc:7c:6a:cf:cc:ed:54:09:e1:bc:a1:69:e9:bd: c6:53:38:7a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+SCJMYYZ+mNgGfzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk YWFiNzkyNzQtMmEzNy00YTI4LWI1ZmQtZWQ4NGNiZjc4Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05a+yxiRylyArlLfiOwH8YZb/bjQDJAySq3Q TZTXJWdqb7WWEUaNnqYpheHMP44SWOPjV7NiIUqfAoHbJbVDJmDxILFePS6Q63L6 gibtfyulB1k27BJAlv5uHbODBgHtGipI0/3LHEmpFMv9QPrAbyvv58Ibj81f2PDu 8amgA1Ee3cRr4my45Gl/fUkoMxM6r8J80rbvurTZfVjDis9FprWmw6wGz9A6J9yd Pzfit1Zaql2J6UZlCcZyTL1dPBfBnEXZ8Q7N9vCiLTGZeN1TmDKn9S3ef++OG0Nf 5QBpW5lyf/J2ij7xZWrblfeFZBhFegL0F/FLBb+RnTS6re7YnwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDyay/pPbOG/Q5TWTcPNdE9/LwUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYjBkYmQ0NTMtNGI2Zi0z NmYwLWEyNzEtZmQ5MmU0ODJhMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlS8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUpSuQeFBPwycx8mZJHmJIuTBSRTiV5z9en7vGS19yt641UIiyllq33mz PKlAyseAm0TeIbt/tv6ibg5t5CozvQcHHWDXKjP999IkEZ7F0L/ZJuhIxFdgKilV k0c0KfEFkepmgUi9SqUS/5XNaGaXyJJ6u87a8k6AXPiVNKl/uZHvabChLreJwMAD NHLTsgU5B3qCQ5z62xw9X26jg4+rbnT/oaxsjBklSqWF+m00Xg0NZAOXeCAifHT9 yqEcLg6NsioY/qxSvJ1wkz71ixSMwceQuVA2uDLmYsNQIDmguQu3s2UosbAlvjtb /VH/VLx8as/M7VQJ4byhaem9xlM4eg== -----END CERTIFICATE-----Generated at Sun Nov 15 08:02:39 2026 by rpki-client