$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/af691375-02fa-3579-ad30-080df8973236.roa File: af691375-02fa-3579-ad30-080df8973236.roa (raw, json) Hash identifier: cjSbtTvp9X3b35uN21HN7d6k667EcMdl/l0T/hp9fns= Subject key identifier: 64:61:51:62:AE:7E:30:D6:AB:88:2F:13:18:36:E9:C7:82:E8:0D:EB Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DC48B98013C787106C3D9C460 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/af691375-02fa-3579-ad30-080df8973236.roa Signing time: Fri 08 May 2026 17:41:17 +0000 ROA not before: Fri 08 May 2026 17:41:17 +0000 ROA not after: Thu 06 Aug 2026 17:41:17 +0000 asID: 42705 IP address blocks: 149.7.25.0/24 maxlen: 24 154.47.4.0/24 maxlen: 24 154.48.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:8b:98:01:3c:78:71:06:c3:d9:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 8 17:41:17 2026 GMT Not After : Aug 6 17:41:17 2026 GMT Subject: CN=e27946f8-4864-41ab-8cec-6dd6a1f130db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:39:1f:3c:5d:6f:b3:3e:36:22:91:55:f7:72: 2d:e7:88:d7:c7:0d:f9:1a:be:c1:3d:82:a1:61:e8: c8:38:a6:6d:41:c7:71:1b:3c:97:62:6e:a1:e3:d8: 29:05:74:ec:08:87:ed:78:84:0e:bf:2b:28:3b:16: 09:6d:ae:5f:de:aa:11:bd:86:5a:d0:fd:de:f9:1a: 80:92:cb:0e:2d:4a:a0:49:5f:96:33:b9:ca:e1:4b: 62:39:bc:c3:45:24:a1:58:17:70:0c:81:65:66:d7: 32:6a:f3:e4:58:0c:eb:8f:1f:7e:bd:e5:91:77:b5: 46:ea:c9:9e:6c:0d:f0:eb:38:a0:18:d9:84:fe:76: c6:23:95:66:96:00:9d:eb:5b:6e:85:fd:e1:07:4f: ef:61:ec:f8:db:3b:5e:27:bf:79:0f:0d:9d:2b:22: 18:0c:14:01:eb:5c:a0:2d:dc:d4:86:89:ea:6f:41: fb:29:77:be:be:bc:63:33:05:23:d1:7e:b7:c4:2f: 5d:06:a1:f4:91:3b:52:71:b9:e2:5a:9b:70:8d:c1: e8:4f:23:d1:4d:56:11:71:fa:ee:ad:73:2f:af:5a: aa:36:e7:76:0c:ec:99:3c:14:e6:64:e4:26:8f:56: 02:93:4d:98:f5:0d:96:27:3e:e1:de:9b:19:d7:18: 58:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:61:51:62:AE:7E:30:D6:AB:88:2F:13:18:36:E9:C7:82:E8:0D:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/af691375-02fa-3579-ad30-080df8973236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.7.25.0/24 154.47.4.0/24 154.48.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:89:18:c1:74:ba:89:60:b0:83:cd:13:79:81:f5:97:88:dc: 58:21:6d:eb:78:f4:79:f0:c0:1e:c8:79:55:cb:e1:dd:9b:5c: d9:fd:3f:58:39:01:4f:17:03:c0:4c:9d:54:17:f4:3e:a1:cc: 66:d9:fb:5a:aa:d2:8e:90:ab:09:5f:85:d9:e7:c6:eb:85:99: 38:2d:92:b2:a4:19:96:89:14:25:bf:2a:2e:e2:08:ce:60:2b: 50:33:c9:b3:9f:3e:be:ba:4a:98:ff:6e:e1:48:35:f1:cf:61: f6:fb:71:ef:ef:7d:fe:d5:62:2c:91:9d:69:08:5c:9a:c6:81: af:a7:9f:ea:33:68:3c:a8:b4:ea:9a:90:69:cb:8c:4a:bb:ef: 59:72:49:34:c4:12:7e:b0:e2:e4:bf:eb:65:d7:9b:cb:62:c9: 77:76:3b:09:5a:ac:f3:0b:c4:b1:49:df:48:8b:27:43:16:68: e1:9e:2e:a5:ed:d8:9f:e2:bc:2f:b5:a0:04:0f:2d:c1:c0:f1: 55:cd:89:3d:d2:b6:15:e9:7a:3a:cc:2f:2f:1d:25:fd:7b:a0: 1a:09:34:9b:f5:aa:94:14:f5:3d:0e:38:0c:1e:0f:17:09:0b: 3f:46:eb:31:8d:0a:fa:7a:25:1f:93:d2:42:5a:79:6b:42:70: de:74:2a:55 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE3Ei5gBPHhxBsPZxGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwODE3NDExN1oXDTI2MDgwNjE3NDExN1owLzEtMCsGA1UEAxMk ZTI3OTQ2ZjgtNDg2NC00MWFiLThjZWMtNmRkNmExZjEzMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jkfPF1vsz42IpFV93It54jXxw35Gr7BPYKh YejIOKZtQcdxGzyXYm6h49gpBXTsCIfteIQOvysoOxYJba5f3qoRvYZa0P3e+RqA kssOLUqgSV+WM7nK4UtiObzDRSShWBdwDIFlZtcyavPkWAzrjx9+veWRd7VG6sme bA3w6zigGNmE/nbGI5VmlgCd61tuhf3hB0/vYez42zteJ795Dw2dKyIYDBQB61yg LdzUhonqb0H7KXe+vrxjMwUj0X63xC9dBqH0kTtScbniWptwjcHoTyPRTVYRcfru rXMvr1qqNud2DOyZPBTmZOQmj1YCk02Y9Q2WJz7h3psZ1xhYeQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGRhUWKufjDWq4gvExg26ceC6A3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWY2OTEzNzUtMDJmYS0z NTc5LWFkMzAtMDgwZGY4OTczMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAlQcZAwQA mi8EAwQAmjDVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAL2JGMF0uolgsIPNE3mB9ZeI3Fghbet49HnwwB7I eVXL4d2bXNn9P1g5AU8XA8BMnVQX9D6hzGbZ+1qq0o6QqwlfhdnnxuuFmTgtkrKk GZaJFCW/Ki7iCM5gK1AzybOfPr66Spj/buFINfHPYfb7ce/vff7VYiyRnWkIXJrG ga+nn+ozaDyotOqakGnLjEq771lySTTEEn6w4uS/62XXm8tiyXd2OwlarPMLxLFJ 30iLJ0MWaOGeLqXt2J/ivC+1oAQPLcHA8VXNiT3SthXpejrMLy8dJf17oBoJNJv1 qpQU9T0OOAweDxcJCz9G6zGNCvp6JR+T0kJaeWtCcN50KlU= -----END CERTIFICATE-----Generated at Wed May 13 08:10:39 2026 by rpki-client