$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a8c57e8c-cd40-3e67-b20b-8039ecd1c215.roa File: a8c57e8c-cd40-3e67-b20b-8039ecd1c215.roa (raw, json) Hash identifier: /sx69pGk4cceK8ZnAkIHuBavEjuymmqZL3Wo+RqCAmc= Subject key identifier: AA:38:A4:14:10:21:41:08:A0:CC:42:3D:E8:BB:C5:ED:E8:95:51:07 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584F1C36D0F79002058EA48D7140 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a8c57e8c-cd40-3e67-b20b-8039ecd1c215.roa Signing time: Tue 08 Sep 2026 20:08:32 +0000 ROA not before: Tue 08 Sep 2026 20:08:32 +0000 ROA not after: Mon 07 Dec 2026 21:08:32 +0000 asID: 197594 IP address blocks: 149.137.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:36:d0:f7:90:02:05:8e:a4:8d:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Sep 8 20:08:32 2026 GMT Not After : Dec 7 21:08:32 2026 GMT Subject: CN=d18d5ce0-fd54-4ca8-88ff-aadb6759be02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:6c:eb:46:05:d0:8c:4b:1b:d4:41:1c:4d: 98:02:3b:26:aa:09:f4:a8:45:15:b5:f1:48:53:ef: d7:3b:0b:20:89:ef:90:c5:18:e4:b9:e0:a9:5e:9d: db:78:ab:31:5f:17:55:20:b9:c4:8c:02:ee:a3:b4: 7d:0b:e9:e7:71:0a:fa:48:dd:59:ef:2a:89:50:0d: 17:3a:36:a6:5c:52:2b:06:85:f6:07:96:09:f0:dc: 82:20:4f:ae:c6:10:f0:14:5d:84:ee:d9:1e:53:7f: 3c:61:94:ed:98:c3:06:4b:27:56:c4:dd:4e:e3:26: b5:34:e2:b7:44:e8:49:24:5d:a4:d1:00:e0:8d:78: e9:71:0f:8f:bf:b5:2e:33:03:48:24:9b:31:cd:11: 1a:2b:d0:39:b2:1d:e6:57:f2:ca:5d:ff:09:37:fb: 60:4d:ca:a0:d7:05:53:73:e5:ce:04:ee:ae:0d:03: 13:5e:ac:9d:35:8d:77:2d:71:60:10:15:06:bc:be: 88:b3:40:42:d0:5a:4f:14:75:10:71:d5:2b:ad:6f: 1a:6f:00:05:0c:7f:7a:a8:77:48:99:cd:d2:a2:42: a3:7f:da:5a:b0:8a:81:42:2a:03:b6:df:2f:1f:fe: d5:21:e8:83:ac:5a:09:ce:dd:3b:3b:d9:89:f8:39: 14:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:38:A4:14:10:21:41:08:A0:CC:42:3D:E8:BB:C5:ED:E8:95:51:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a8c57e8c-cd40-3e67-b20b-8039ecd1c215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 149.137.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:fd:90:fa:8a:e2:85:47:4e:7b:68:22:7d:dd:f4:0e:22:8e: c9:3d:82:f2:5c:72:65:d1:c6:af:2a:90:74:08:a1:3f:ee:ea: 6f:eb:dc:7b:0d:24:45:a4:29:f8:1f:2e:e2:48:cf:19:0d:ee: 92:1f:d5:0a:97:82:cc:a5:c5:44:3b:e6:f9:28:57:0f:b9:a2: 41:be:30:19:28:99:e7:45:41:37:aa:eb:ec:dc:8f:a6:59:95: 5c:19:4c:15:9a:68:9c:1b:da:86:2e:bc:da:d6:c4:39:a2:0b: b0:3d:d8:57:79:fb:55:f1:32:5b:33:20:86:00:01:59:61:0c: 62:74:03:6b:72:27:7b:f7:4b:b9:2e:8c:9f:f1:58:3c:53:cb: 6a:43:11:8b:40:b4:85:3c:ae:63:02:88:7c:fd:1b:10:37:2f: 23:3f:75:46:0c:4a:7e:d9:01:ab:88:ed:79:93:d8:9f:55:39: d5:fd:2d:f0:0f:fe:79:5b:65:f0:c6:e3:3e:40:0b:bd:87:ca: 75:07:66:de:7e:97:95:72:e0:8f:f1:af:37:8f:04:d0:5f:1a: a0:c7:68:e4:82:49:31:23:29:19:dc:2e:31:9d:76:08:2c:90: 6d:26:8e:c7:e3:2d:c3:63:2e:cd:4c:fc:19:94:46:c4:eb:22: 97:e3:ea:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cNtD3kAIFjqSNcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDkwODIwMDgzMloXDTI2MTIwNzIxMDgzMlowLzEtMCsGA1UEAxMk ZDE4ZDVjZTAtZmQ1NC00Y2E4LTg4ZmYtYWFkYjY3NTliZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWxs60YF0IxLG9RBHE2YAjsmqgn0qEUVtfFI U+/XOwsgie+QxRjkueCpXp3beKsxXxdVILnEjALuo7R9C+nncQr6SN1Z7yqJUA0X OjamXFIrBoX2B5YJ8NyCIE+uxhDwFF2E7tkeU388YZTtmMMGSydWxN1O4ya1NOK3 ROhJJF2k0QDgjXjpcQ+Pv7UuMwNIJJsxzREaK9A5sh3mV/LKXf8JN/tgTcqg1wVT c+XOBO6uDQMTXqydNY13LXFgEBUGvL6Is0BC0FpPFHUQcdUrrW8abwAFDH96qHdI mc3SokKjf9pasIqBQioDtt8vH/7VIeiDrFoJzt07O9mJ+DkU3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo4pBQQIUEIoMxCPei7xe3olVEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvYThjNTdlOGMtY2Q0MC0z ZTY3LWIyMGItODAzOWVjZDFjMjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlYn7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKb9kPqK4oVHTntoIn3d9A4ijsk9gvJccmXRxq8qkHQIoT/u6m/r3HsN JEWkKfgfLuJIzxkN7pIf1QqXgsylxUQ75vkoVw+5okG+MBkomedFQTeq6+zcj6ZZ lVwZTBWaaJwb2oYuvNrWxDmiC7A92Fd5+1XxMlszIIYAAVlhDGJ0A2tyJ3v3S7ku jJ/xWDxTy2pDEYtAtIU8rmMCiHz9GxA3LyM/dUYMSn7ZAauI7XmT2J9VOdX9LfAP /nlbZfDG4z5AC72HynUHZt5+l5Vy4I/xrzePBNBfGqDHaOSCSTEjKRncLjGddggs kG0mjsfjLcNjLs1M/BmURsTrIpfj6rQ= -----END CERTIFICATE-----Generated at Fri Sep 25 02:54:07 2026 by rpki-client