$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa File: d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa (raw, json) Hash identifier: 1cGOahuc47R5qJHmqZ1y/mfZq3XdAgma0LEL3HhDifo= Subject key identifier: A9:48:10:3E:8E:DD:85:19:AC:ED:C4:B3:CD:23:69:92:F5:7E:49:BE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D44FA2A414D7AA6F648D25580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 196954 IP address blocks: 149.107.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:2a:41:4d:7a:a6:f6:48:d2:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=4d659553-fed3-45b7-a13f-1582e0bdc084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:e4:2c:73:06:a8:b1:3c:69:1c:92:fa:49: b9:ca:83:2d:0d:dd:55:79:c1:0e:71:a1:d1:bd:da: cf:01:91:a3:89:8f:f2:49:99:a1:8f:2c:81:b3:20: f3:2c:1a:93:81:a7:1e:0c:b0:c6:ba:c1:81:91:f5: dc:01:d9:bd:a9:65:74:3e:3e:64:76:cc:4d:d7:8d: 89:d2:f1:d3:d8:37:6d:58:b8:bc:a2:9c:c1:a7:76: 8c:25:cf:9e:bf:f9:49:23:aa:22:a3:54:e1:ca:a9: db:57:ab:30:de:c1:59:12:b8:e4:c8:c9:ad:90:f8: 01:fc:85:c8:cd:b2:9d:f9:11:ad:7b:cd:97:73:84: d1:6a:f7:d6:4a:ea:93:72:68:14:9c:5d:9f:dc:0d: 02:df:b8:3b:9e:45:4b:c8:c6:6c:f9:54:25:ea:1d: 4a:10:34:5c:2c:3f:cc:36:18:b0:f2:e7:56:d5:b1: b4:d0:b1:90:80:2d:23:8a:bb:a0:a5:22:e9:9f:03: f1:25:fe:ca:b0:70:24:55:16:ce:86:1e:33:a3:f6: f4:93:9f:45:e1:de:a9:e9:15:b9:5c:9c:e8:40:bf: b8:95:f4:28:de:8c:50:51:67:2e:2e:c5:79:ac:a8: 85:44:54:a8:3d:e8:d4:4b:9c:f6:fd:b9:6d:58:2e: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:48:10:3E:8E:DD:85:19:AC:ED:C4:B3:CD:23:69:92:F5:7E:49:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d4aa0e3b-53d8-3723-8967-8a47eb4d8d45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.107.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:83:21:ed:79:1a:b6:80:6c:2d:f1:0e:cd:e1:7d:cf:3f:0f: a2:63:33:b2:68:12:2e:59:30:2a:17:74:00:e7:70:7f:89:b0: 21:ea:e0:22:c5:96:8e:3d:87:68:ff:c3:cb:f8:fb:1e:72:ec: fe:5f:8b:4c:cc:e6:0a:c1:42:20:47:04:13:8a:d7:7a:7d:82: 49:03:ec:ef:d8:e7:c3:98:b2:02:5e:62:43:e9:b1:bb:62:7f: 90:40:c0:77:7c:ad:33:57:a1:9f:8f:e2:8f:0a:44:c9:2f:5d: b2:91:2c:98:ad:2a:a1:2a:7e:6e:af:be:3c:9e:4d:3b:90:1c: be:29:4e:43:57:c8:13:5d:53:4f:67:1c:fa:85:16:08:c6:c7: de:1d:54:f4:66:ea:9d:8e:ad:4f:b4:3f:5d:41:3e:2e:12:7d: aa:d7:97:4a:9e:67:50:9c:13:26:47:4c:45:0c:d2:a6:5e:e7: 5d:e2:87:98:23:33:74:4c:fc:2c:d1:d9:0c:cd:d5:77:a8:87: 64:9d:39:8a:10:aa:3f:c5:fd:ab:87:7a:f0:7c:87:54:c8:ff: f0:1c:8c:02:19:ce:34:e5:80:d2:7f:01:45:db:e0:f9:36:71: 80:91:0f:4f:b3:06:38:4c:6d:12:aa:be:92:78:32:72:c6:bf: 7f:45:5a:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+ipBTXqm9kjSVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NGQ2NTk1NTMtZmVkMy00NWI3LWExM2YtMTU4MmUwYmRjMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxfkLHMGqLE8aRyS+km5yoMtDd1VecEOcaHR vdrPAZGjiY/ySZmhjyyBsyDzLBqTgaceDLDGusGBkfXcAdm9qWV0Pj5kdsxN142J 0vHT2DdtWLi8opzBp3aMJc+ev/lJI6oio1ThyqnbV6sw3sFZErjkyMmtkPgB/IXI zbKd+RGte82Xc4TRavfWSuqTcmgUnF2f3A0C37g7nkVLyMZs+VQl6h1KEDRcLD/M Nhiw8udW1bG00LGQgC0jirugpSLpnwPxJf7KsHAkVRbOhh4zo/b0k59F4d6p6RW5 XJzoQL+4lfQo3oxQUWcuLsV5rKiFRFSoPejUS5z2/bltWC6yMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlIED6O3YUZrO3Es80jaZL1fkm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDRhYTBlM2ItNTNkOC0z NzIzLTg5NjctOGE0N2ViNGQ4ZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFODIe15GraAbC3xDs3hfc8/D6JjM7JoEi5ZMCoXdADncH+JsCHq4CLF lo49h2j/w8v4+x5y7P5fi0zM5grBQiBHBBOK13p9gkkD7O/Y58OYsgJeYkPpsbti f5BAwHd8rTNXoZ+P4o8KRMkvXbKRLJitKqEqfm6vvjyeTTuQHL4pTkNXyBNdU09n HPqFFgjGx94dVPRm6p2OrU+0P11BPi4SfarXl0qeZ1CcEyZHTEUM0qZe513ih5gj M3RM/CzR2QzN1Xeoh2SdOYoQqj/F/auHevB8h1TI//AcjAIZzjTlgNJ/AUXb4Pk2 cYCRD0+zBjhMbRKqvpJ4MnLGv39FWj8= -----END CERTIFICATE-----Generated at Wed Mar 25 21:29:28 2026 by rpki-client