$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa File: dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa (raw, json) Hash identifier: ObMlV1RDPGMj957wQpa2cDCJw0T75i93tf7G/OI4f98= Subject key identifier: 96:86:F2:0D:DC:71:DB:36:04:E5:E1:BF:CE:75:81:A9:83:1B:73:E1 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584DB7703A3D45E2041C1959B800 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 12213 IP address blocks: 149.137.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:3a:3d:45:e2:04:1c:19:59:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=9df25986-ef92-4d3f-8e39-545ee8098dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f3:fc:d7:e4:87:18:17:05:bb:33:d3:fd:46: ef:00:d3:0e:9e:91:49:71:d8:f6:c9:bc:ea:bc:d8: 34:6a:f4:af:ac:9c:ca:b7:d7:63:f7:fb:3f:b7:1b: 7e:90:ad:78:c0:a1:ee:a7:0f:2b:73:63:f0:4b:29: 47:c3:88:1f:c1:7e:6f:e5:77:54:16:70:2c:08:8f: f1:46:b1:46:86:1c:71:ec:bc:99:5e:5e:b3:b1:b2: 9d:9f:c1:64:b1:58:34:f5:92:0e:23:20:50:f9:ea: fe:a3:e7:5a:b9:02:fd:2a:49:e7:cd:99:ee:2e:c7: ca:ae:3f:79:37:9e:16:76:32:1d:90:df:fa:11:02: c3:e2:c7:9d:71:55:ff:1d:78:61:31:15:09:c6:36: 93:51:42:e0:43:97:13:13:13:e1:1c:3c:7c:ab:ec: 14:78:8d:37:00:f8:36:b3:cd:34:06:42:98:c9:ef: 08:bc:89:f2:c4:b4:32:37:ff:b0:ff:99:36:11:91: d6:85:48:65:de:34:6d:47:60:e7:23:5d:0a:6f:10: d6:bb:ef:15:7b:4c:97:27:6f:a6:c5:b8:23:d6:a6: 85:72:f1:70:c5:41:a3:d1:a4:5d:4f:e5:32:ea:2f: db:23:48:80:82:33:48:50:fd:3b:5a:31:95:4c:7c: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:86:F2:0D:DC:71:DB:36:04:E5:E1:BF:CE:75:81:A9:83:1B:73:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 149.137.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6d:0c:36:22:60:90:4f:e6:e6:ff:59:89:72:d3:bf:06:88: 3e:bb:3e:84:cc:08:2b:d6:d6:66:e0:4c:54:b6:54:95:44:93: c4:41:c6:b0:43:97:18:d5:85:1d:b5:ed:f6:7a:02:e0:09:35: 2f:a4:7a:bb:42:fc:8c:62:f4:1b:6c:cf:14:49:77:07:86:03: 67:3c:59:ca:f9:09:27:98:56:59:0f:74:d1:15:d8:73:f7:ca: ae:ee:a0:57:ba:4d:fb:bd:00:6e:1d:73:e3:b8:4d:85:8a:ff: 8b:11:1c:57:54:10:ad:28:3a:13:44:b3:ef:a1:49:13:d0:53: 62:fc:f5:cd:36:ef:2e:96:20:1c:d3:74:be:c7:41:c8:05:04: dd:c4:78:83:57:f2:50:94:3d:ef:ec:5e:16:c0:9f:87:a5:c4: 5d:90:60:12:86:99:cf:94:68:f0:db:e7:24:0b:9f:a2:b1:21: 4e:1f:b6:20:b7:03:fc:a3:ee:27:26:3f:8c:1f:a8:13:93:8a: 6b:e1:ef:d6:d4:88:d0:60:34:2f:e8:11:86:46:49:71:d7:df: 10:9b:d8:cd:43:5e:a8:1e:b0:51:72:4b:2c:25:90:c7:56:3a: c7:68:16:16:35:e8:7b:87:4b:94:2b:6a:3c:af:e3:24:e2:10: e6:95:8f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDo9ReIEHBlZuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk OWRmMjU5ODYtZWY5Mi00ZDNmLThlMzktNTQ1ZWU4MDk4ZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPP81+SHGBcFuzPT/UbvANMOnpFJcdj2ybzq vNg0avSvrJzKt9dj9/s/txt+kK14wKHupw8rc2PwSylHw4gfwX5v5XdUFnAsCI/x RrFGhhxx7LyZXl6zsbKdn8FksVg09ZIOIyBQ+er+o+dauQL9KknnzZnuLsfKrj95 N54WdjIdkN/6EQLD4sedcVX/HXhhMRUJxjaTUULgQ5cTExPhHDx8q+wUeI03APg2 s800BkKYye8IvInyxLQyN/+w/5k2EZHWhUhl3jRtR2DnI10KbxDWu+8Ve0yXJ2+m xbgj1qaFcvFwxUGj0aRdT+Uy6i/bI0iAgjNIUP07WjGVTHxYKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaG8g3ccds2BOXhv851gamDG3PhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvZGM0M2U3YTgtYWI2Yy0z ZjQ3LWJhZWEtYTFlYWNkZmY0MmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlYngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEltDDYiYJBP5ub/WYly078GiD67PoTMCCvW1mbgTFS2VJVEk8RBxrBD lxjVhR217fZ6AuAJNS+kertC/Ixi9BtszxRJdweGA2c8Wcr5CSeYVlkPdNEV2HP3 yq7uoFe6Tfu9AG4dc+O4TYWK/4sRHFdUEK0oOhNEs++hSRPQU2L89c027y6WIBzT dL7HQcgFBN3EeINX8lCUPe/sXhbAn4elxF2QYBKGmc+UaPDb5yQLn6KxIU4ftiC3 A/yj7icmP4wfqBOTimvh79bUiNBgNC/oEYZGSXHX3xCb2M1DXqgesFFySywlkMdW OsdoFhY16HuHS5Qrajyv4yTiEOaVj5w= -----END CERTIFICATE-----Generated at Wed May 13 09:25:27 2026 by rpki-client