$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa File: a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa (raw, json) Hash identifier: RUroRuSRyn3ddWG3T5zybJ2Fdb/zjd7TyPi3Oqi9zpM= Subject key identifier: A3:AD:6A:0E:48:E8:C6:5D:59:8D:10:13:2A:F6:91:7C:B2:E2:95:A9 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584DAC4576F81CBA330AA75D4B80 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 30399 IP address blocks: 149.112.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:76:f8:1c:ba:33:0a:a7:5d:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=f74c01e6-0750-4923-a24b-86122042e96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:9b:d1:72:ea:23:e4:a1:2b:c5:ca:84:5b: 5f:90:2e:16:32:92:ee:ab:fc:72:12:4a:c0:86:93: 64:73:ea:62:c9:8d:59:31:dc:e3:89:c3:96:64:d2: 5d:91:7c:f3:e6:b0:03:41:cf:3d:c8:b2:6f:b8:ea: 5c:d9:78:52:a7:8d:6a:44:45:a1:19:59:9d:00:b9: 0f:05:47:ab:11:d2:46:52:7b:bc:3d:85:76:21:95: e0:d9:11:a4:88:a7:72:c0:b8:6c:93:16:6d:15:29: f0:5f:c6:79:48:e0:ef:ed:cf:80:89:a8:07:14:65: b9:2b:dd:8f:43:e6:39:7a:5d:eb:37:5b:a6:a7:71: 62:3b:c6:bb:04:08:ae:ac:54:5e:69:b9:14:ac:4b: fe:1b:7f:81:af:a8:e6:9c:00:eb:8f:26:78:ec:6b: 1a:d3:05:08:0e:57:a4:b1:67:f1:23:ae:2b:ec:b0: 63:9b:fa:6b:46:44:01:55:d3:7a:fc:33:4d:fb:f4: de:13:12:72:20:bc:94:62:7d:00:8a:78:f8:1b:f4: 42:c1:70:36:94:f2:00:bd:6f:24:cb:81:dd:2e:16: 21:25:41:3f:fd:ed:83:4e:f1:0b:eb:6c:f9:6c:23: ea:05:79:ac:0e:37:4f:1b:ff:6f:01:8e:8a:14:7b: 2f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AD:6A:0E:48:E8:C6:5D:59:8D:10:13:2A:F6:91:7C:B2:E2:95:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 149.112.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:67:f3:28:62:e7:cc:b9:17:32:2e:05:51:93:68:6b:0c:3d: 29:de:85:96:0d:4b:7a:68:d7:45:f5:ec:2c:32:42:7c:60:b1: 1a:f9:18:7e:8b:72:a1:2c:56:aa:58:81:36:69:60:79:78:ca: 9a:7e:d8:82:7f:e7:aa:54:bb:eb:04:81:d1:f8:e6:99:c7:d2: 87:17:fc:17:3f:2d:7d:4d:7d:d3:91:45:03:77:eb:58:c8:89: 80:cb:1b:1b:18:c0:49:57:94:25:56:4d:75:0c:0f:ee:e1:33: f7:db:95:f3:0f:ff:34:fb:be:ef:68:86:f9:0e:47:5c:be:9d: b7:71:88:ff:e8:b8:73:13:22:b1:b0:72:14:fc:f0:ac:99:e8: 80:a9:4f:f3:e0:5f:d0:05:2c:a1:b0:d2:67:7b:77:83:d6:2d: c3:37:ce:db:6f:b5:99:4d:f3:b0:61:63:bf:02:d8:df:b6:1e: 0f:b8:d7:3b:d4:54:e4:7e:c5:b3:82:b7:f1:cd:e3:3a:49:4d: 99:a3:19:d0:7b:e0:55:0e:df:b4:ae:5e:72:7d:04:d4:6b:f6: 1a:35:3a:50:0d:a8:67:95:80:76:20:c6:7f:20:2b:a1:09:46: 17:61:7c:b8:d9:11:4a:e5:fb:50:59:e5:ab:04:ec:eb:41:fd: 5b:9e:5d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXb4HLozCqddS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk Zjc0YzAxZTYtMDc1MC00OTIzLWEyNGItODYxMjIwNDJlOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxImb0XLqI+ShK8XKhFtfkC4WMpLuq/xyEkrA hpNkc+piyY1ZMdzjicOWZNJdkXzz5rADQc89yLJvuOpc2XhSp41qREWhGVmdALkP BUerEdJGUnu8PYV2IZXg2RGkiKdywLhskxZtFSnwX8Z5SODv7c+AiagHFGW5K92P Q+Y5el3rN1ump3FiO8a7BAiurFReabkUrEv+G3+Br6jmnADrjyZ47Gsa0wUIDlek sWfxI64r7LBjm/prRkQBVdN6/DNN+/TeExJyILyUYn0Ainj4G/RCwXA2lPIAvW8k y4HdLhYhJUE//e2DTvEL62z5bCPqBXmsDjdPG/9vAY6KFHsvhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOtag5I6MZdWY0QEyr2kXyy4pWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvYTk1ZGFiYmUtNmQyYy0z NDc2LThjMzMtMWZkZWJiOTgzMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFn8yhi58y5FzIuBVGTaGsMPSnehZYNS3po10X17CwyQnxgsRr5GH6L cqEsVqpYgTZpYHl4ypp+2IJ/56pUu+sEgdH45pnH0ocX/Bc/LX1NfdORRQN361jI iYDLGxsYwElXlCVWTXUMD+7hM/fblfMP/zT7vu9ohvkOR1y+nbdxiP/ouHMTIrGw chT88KyZ6ICpT/PgX9AFLKGw0md7d4PWLcM3zttvtZlN87BhY78C2N+2Hg+41zvU VOR+xbOCt/HN4zpJTZmjGdB74FUO37SuXnJ9BNRr9ho1OlANqGeVgHYgxn8gK6EJ RhdhfLjZEUrl+1BZ5asE7OtB/VueXSE= -----END CERTIFICATE-----Generated at Wed May 13 11:02:21 2026 by rpki-client