$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa File: 21975138-cf92-36b8-8d76-cc6b2ac602dd.roa (raw, json) Hash identifier: oNi935/j8IldHuuxyOVrp7oWyqJ1lOrB6CP6dhNElqE= Subject key identifier: 79:E0:38:DF:17:12:8C:E8:11:F3:B6:52:7A:08:23:B5:AB:A9:FF:DD Certificate issuer: /CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Certificate serial: 010D0C9F4328584F4976650BAA37CC408D11AAC0 Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40401 IP address blocks: 149.137.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:65:0b:aa:37:cc:40:8d:11:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9913d415-19e1-4dd8-9655-85e63a76dca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d6:b9:ec:d6:1b:b9:94:37:84:14:9a:03:f4: 42:11:5c:6f:9a:31:7a:ab:6f:2b:e7:d9:91:6c:73: 10:64:c8:06:1e:a8:c7:f0:03:7a:52:b6:98:ea:dc: d3:51:2f:fa:20:3f:77:07:a4:3d:55:96:b4:88:fb: e9:ea:21:1a:e5:c3:46:97:e6:8d:3d:82:be:ca:53: 67:b4:39:a5:98:4e:cd:19:42:7a:cb:a1:27:67:90: 34:d3:74:0c:45:fd:64:7b:a6:4b:e5:31:f6:47:33: 51:9f:3a:8b:cb:18:3e:8e:bf:61:a7:8c:74:a4:96: ad:b7:39:fe:be:41:b7:30:cc:45:f2:f6:7d:9e:cd: a5:b5:02:9b:e2:38:96:7c:25:cf:4e:ba:41:ea:09: fe:af:be:62:6c:a1:ed:ab:fd:60:cd:13:8d:af:9a: d0:6c:35:e2:64:06:75:fb:48:b6:12:80:f2:d0:58: 06:cd:db:09:ec:7a:94:0d:4e:e2:3e:30:b8:b9:79: 4c:fb:2e:67:4c:2d:4a:27:ed:ab:ea:1b:c6:51:24: 7c:e5:27:fd:c5:c2:6f:a3:bd:b0:af:47:39:e8:e1: 0c:8e:fd:a0:b3:4d:00:6b:c5:78:22:21:79:7e:6a: 8f:d5:b4:24:55:ad:7f:a7:15:ee:2e:bd:dd:de:5e: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E0:38:DF:17:12:8C:E8:11:F3:B6:52:7A:08:23:B5:AB:A9:FF:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl X509v3 Authority Key Identifier: keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer sbgp-ipAddrBlock: critical IPv4: 149.137.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:43:33:3e:27:5d:67:51:69:d5:66:42:c8:7f:45:04:5c:89: 81:bf:da:8d:6d:ce:be:e8:ed:25:8f:8d:e7:cb:a6:18:4f:ef: e8:6e:e9:29:e3:15:60:ae:f6:21:77:6c:25:7f:84:fb:1f:e2: a7:27:5c:27:8f:b3:a4:55:03:99:2a:45:0b:de:d2:4f:04:d4: 0f:65:5a:b9:e0:a6:4a:80:6c:91:29:3e:bd:cf:db:b7:19:d5: 39:5e:32:1d:f7:bd:cc:59:71:17:53:1d:3c:ed:a2:aa:73:5b: fc:51:80:59:bf:19:22:28:a5:1d:b4:4f:da:12:f7:60:8a:20: ba:9d:32:cb:92:17:5d:ec:b3:18:9a:cb:6b:4d:a0:0b:20:8d: 0e:d8:da:ee:30:61:6e:a1:0a:fe:62:7d:18:be:27:15:72:6c: 5b:3e:24:87:9c:a1:a0:0a:00:51:f1:41:2a:3c:cc:e6:31:f5: 26:ce:f4:0c:e3:65:33:d0:71:60:9b:f9:11:1a:23:4b:09:ac: 65:86:2b:62:b9:32:a9:a2:6d:ce:ab:61:ac:aa:01:92:33:f3: 67:32:3f:21:6e:96:f9:bd:e3:19:a6:f5:9c:9a:c5:d6:db:2f: 0b:c9:3d:33:50:a3:f3:3d:f6:2a:c6:f9:7d:51:e9:5e:3a:3f: 0f:05:b4:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdmULqjfMQI0RqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll Mjg3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTkxM2Q0MTUtMTllMS00ZGQ4LTk2NTUtODVlNjNhNzZkY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNa57NYbuZQ3hBSaA/RCEVxvmjF6q28r59mR bHMQZMgGHqjH8AN6UraY6tzTUS/6ID93B6Q9VZa0iPvp6iEa5cNGl+aNPYK+ylNn tDmlmE7NGUJ6y6EnZ5A003QMRf1ke6ZL5TH2RzNRnzqLyxg+jr9hp4x0pJattzn+ vkG3MMxF8vZ9ns2ltQKb4jiWfCXPTrpB6gn+r75ibKHtq/1gzRONr5rQbDXiZAZ1 +0i2EoDy0FgGzdsJ7HqUDU7iPjC4uXlM+y5nTC1KJ+2r6hvGUSR85Sf9xcJvo72w r0c56OEMjv2gs00Aa8V4IiF5fmqP1bQkVa1/pxXuLr3d3l4ZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHngON8XEozoEfO2UnoII7Wrqf/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvMjE5NzUxMzgtY2Y5Mi0z NmI4LThkNzYtY2M2YjJhYzYwMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5 ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz YTQyOWUyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElYmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9DMz4nXWdRadVmQsh/RQRciYG/2o1tzr7o7SWPjefLphhP7+hu6Snj FWCu9iF3bCV/hPsf4qcnXCePs6RVA5kqRQve0k8E1A9lWrngpkqAbJEpPr3P27cZ 1TleMh33vcxZcRdTHTztoqpzW/xRgFm/GSIopR20T9oS92CKILqdMsuSF13ssxia y2tNoAsgjQ7Y2u4wYW6hCv5ifRi+JxVybFs+JIecoaAKAFHxQSo8zOYx9SbO9Azj ZTPQcWCb+REaI0sJrGWGK2K5Mqmibc6rYayqAZIz82cyPyFulvm94xmm9Zyaxdbb LwvJPTNQo/M99irG+X1R6V46Pw8FtFE= -----END CERTIFICATE-----Generated at Sun Sep 27 02:40:16 2026 by rpki-client