$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa File: 242691ed-7e95-376c-af82-2bd75883d13d.roa (raw, json) Hash identifier: eqkfkvflrRtmLyzm6wSWqSRPTvn1Z/2BdsaecnOH58c= Subject key identifier: 7D:12:6C:52:82:94:C5:CE:E9:65:9C:8C:1E:A8:30:7B:21:04:11:B8 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584E97B4FD34C1FE073D73CFC100 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 12213 IP address blocks: 149.137.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b4:fd:34:c1:fe:07:3d:73:cf:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=45245b46-c3bf-422a-a74c-eac2d720db96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:38:90:a0:4f:6a:6d:f6:34:44:a3:dd:6a: a6:28:bd:cd:17:67:45:3a:79:05:87:97:8e:d0:6f: ad:b3:7e:19:93:15:24:2b:41:f3:7b:dd:04:2d:a5: e3:a2:65:cd:d0:01:43:b0:1a:c6:f7:8a:a5:62:05: 20:8c:2e:c1:a4:69:90:ae:20:21:97:74:32:52:98: 62:fc:5f:02:6a:cb:74:bc:7e:c3:cf:75:c3:84:3c: e2:cc:91:2a:11:15:83:1d:f6:ad:4f:e4:4f:57:fc: e1:90:a4:b9:a0:87:a7:3b:d8:ee:d1:53:59:2f:21: 29:e5:61:2c:c6:3c:05:c8:11:50:72:d8:3b:e4:c3: 8a:f1:69:6b:5d:31:cb:6b:af:76:11:d0:b5:a2:60: ab:0b:cd:5e:cd:ce:17:de:c5:89:69:c1:43:4a:9b: c0:0d:03:51:31:0f:36:49:6e:fb:49:0d:82:88:25: 84:44:18:67:c4:d5:b4:2a:d6:41:8e:15:e2:c1:45: 59:93:2a:c9:66:77:08:18:20:82:30:97:d1:af:1b: 11:dc:bf:b9:d0:b4:5f:ee:34:c2:f8:7e:6b:e3:c4: e7:0a:30:a1:e8:b0:d5:82:18:2b:8a:3b:21:b0:ef: cf:0b:98:3c:3f:40:04:45:a9:0a:9c:0e:25:f8:72: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:12:6C:52:82:94:C5:CE:E9:65:9C:8C:1E:A8:30:7B:21:04:11:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 149.137.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e4:f0:2e:07:33:fa:01:15:84:81:2b:bb:ac:56:15:77:95: ac:37:68:49:9c:c4:0e:ab:1c:9a:f5:98:57:b0:d3:5a:e4:92: 0f:88:f5:74:30:6f:30:11:05:42:7a:8e:16:4e:04:67:d7:11: 01:0b:24:f2:68:65:39:d1:f4:32:9a:c6:62:3d:16:3a:7e:72: e5:f7:fd:87:0d:15:6a:70:41:a1:d0:0b:de:52:d6:f1:1f:3c: d1:16:f4:c3:68:21:51:4e:a1:9e:2f:fc:34:ad:f9:49:cf:67: 2d:34:af:2a:f5:a2:43:3f:04:78:e8:b6:7a:8e:a0:64:37:77: 9e:5f:29:94:26:65:97:44:55:a2:ae:01:92:05:16:93:e3:fa: 7f:93:c3:06:fb:10:90:bb:07:b6:28:e5:2a:d3:da:9e:de:be: 2d:98:88:58:90:a6:8f:ee:81:db:55:a2:50:22:85:b3:11:f3: a7:72:cc:42:78:2f:97:c5:54:74:29:20:e2:61:8c:63:7d:45: 96:11:18:82:5a:89:db:a9:ad:0b:b9:ec:56:c8:f4:44:be:50: d5:0a:35:d3:83:77:14:84:d9:9e:07:4b:fd:d4:8e:e6:f9:9b: 2a:67:b4:6a:a7:b1:7f:72:e8:e8:e1:ab:2e:b8:44:0b:23:01: bf:24:3a:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtP00wf4HPXPPwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk NDUyNDViNDYtYzNiZi00MjJhLWE3NGMtZWFjMmQ3MjBkYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0w4kKBPam32NESj3WqmKL3NF2dFOnkFh5eO 0G+ts34ZkxUkK0Hze90ELaXjomXN0AFDsBrG94qlYgUgjC7BpGmQriAhl3QyUphi /F8Cast0vH7Dz3XDhDzizJEqERWDHfatT+RPV/zhkKS5oIenO9ju0VNZLyEp5WEs xjwFyBFQctg75MOK8WlrXTHLa692EdC1omCrC81ezc4X3sWJacFDSpvADQNRMQ82 SW77SQ2CiCWERBhnxNW0KtZBjhXiwUVZkyrJZncIGCCCMJfRrxsR3L+50LRf7jTC +H5r48TnCjCh6LDVghgrijshsO/PC5g8P0AERakKnA4l+HIcOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0SbFKClMXO6WWcjB6oMHshBBG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMjQyNjkxZWQtN2U5NS0z NzZjLWFmODItMmJkNzU4ODNkMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3k8C4HM/oBFYSBK7usVhV3law3aEmcxA6rHJr1mFew01rkkg+I9XQw bzARBUJ6jhZOBGfXEQELJPJoZTnR9DKaxmI9Fjp+cuX3/YcNFWpwQaHQC95S1vEf PNEW9MNoIVFOoZ4v/DSt+UnPZy00ryr1okM/BHjotnqOoGQ3d55fKZQmZZdEVaKu AZIFFpPj+n+Twwb7EJC7B7Yo5SrT2p7evi2YiFiQpo/ugdtVolAihbMR86dyzEJ4 L5fFVHQpIOJhjGN9RZYRGIJaiduprQu57FbI9ES+UNUKNdODdxSE2Z4HS/3Ujub5 mypntGqnsX9y6Ojhqy64RAsjAb8kOkg= -----END CERTIFICATE-----Generated at Fri Jul 24 04:24:44 2026 by rpki-client