$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa File: 3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa (raw, json) Hash identifier: BT+vuqWgL2q0eha427tCQwTe4VbvJTu/ODT9D4c7wnE= Subject key identifier: 54:1A:91:40:91:08:FC:90:5D:E3:E5:C9:F5:79:39:3A:97:EB:E0:A4 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584DCDC5A9F33D467354DFBC4640 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 30103 IP address blocks: 149.137.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:a9:f3:3d:46:73:54:df:bc:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=aeb1c4af-abcb-4af1-ba3a-a8b59bcac8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:e9:41:66:8b:92:88:d0:3c:21:18:b7:75: 3e:d2:d4:2f:f6:b6:01:0f:54:68:98:9b:14:7c:de: 49:15:44:66:57:a6:ca:92:1d:0a:4b:41:38:d7:c5: 2d:bb:5f:12:71:5e:9f:2e:69:06:7f:df:c8:5f:f3: 69:7d:d7:8a:26:c1:47:a5:b5:1e:3a:2b:c2:22:32: a2:23:57:19:a6:79:56:ec:09:69:02:eb:0c:08:b4: 45:2d:e4:f4:09:17:e7:30:83:b5:a7:85:db:ee:07: 76:e3:d4:ca:d0:5c:ef:cb:24:8e:c5:83:e2:04:08: 26:3b:79:6a:8c:5e:1f:0b:d2:03:cf:7e:9b:59:f8: e0:a0:d7:89:b2:63:ed:12:79:1f:1d:cb:5d:85:c4: 56:c7:9e:78:37:95:99:ec:4c:d8:da:e0:1b:df:20: e0:6b:47:49:4c:54:d2:98:8c:3c:d2:f2:7a:93:70: 25:22:b4:44:14:b6:96:fb:0c:2b:6d:89:ba:c1:ee: 11:02:c8:28:38:8d:67:c3:eb:4c:d0:61:e1:16:b8: 77:da:17:6e:39:35:fd:ec:86:9d:23:9c:16:76:b8: 2d:60:3d:12:2a:9d:72:61:6d:55:36:77:f8:4a:45: c6:d2:33:a4:8a:ce:dc:ea:cc:cb:7f:10:29:b7:aa: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1A:91:40:91:08:FC:90:5D:E3:E5:C9:F5:79:39:3A:97:EB:E0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:03:d6:b3:a1:47:19:7e:5b:1e:c6:08:be:ec:ee:33:31:79: 93:4d:c4:76:2b:32:15:94:c2:bb:04:c8:3d:b6:3c:c0:57:fe: f3:84:01:19:d2:c0:01:c4:75:45:75:16:3f:85:82:8b:e8:28: 04:df:c4:4b:b4:00:56:e4:30:a4:9a:61:a3:e5:6b:99:41:75: 78:27:6e:04:35:74:4f:f1:48:a7:9b:c3:b6:19:de:43:5f:f2: a0:1a:4d:9c:e9:d4:de:12:a3:36:e2:27:77:99:33:cf:0c:53: ae:09:74:f4:ca:c1:e0:d5:e5:b6:68:42:c8:db:af:b7:1a:85: ee:d4:79:96:8c:f2:4b:f1:7a:25:26:5e:d2:2d:a2:2d:81:38: 83:bf:68:4b:6e:8a:cd:7b:32:05:7f:85:25:d2:89:6f:a9:d3: 59:1f:7e:b7:f6:c2:85:bc:59:d1:ae:c1:12:7d:5a:44:73:ae: 6b:47:2a:a3:3a:21:9e:67:1c:b4:e7:94:83:f5:e7:c0:a5:86: 63:e3:ac:15:35:0b:04:ac:78:ee:a7:27:ec:8b:ad:0c:19:1f: ca:6c:5d:fb:79:9c:ae:be:97:c4:af:f9:eb:86:03:25:5f:f2: ac:24:31:fc:c3:2d:b5:a5:24:a5:c6:04:80:03:10:56:6f:96: 5b:95:37:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxanzPUZzVN+8RkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk YWViMWM0YWYtYWJjYi00YWYxLWJhM2EtYThiNTliY2FjOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh7pQWaLkojQPCEYt3U+0tQv9rYBD1RomJsU fN5JFURmV6bKkh0KS0E418Utu18ScV6fLmkGf9/IX/NpfdeKJsFHpbUeOivCIjKi I1cZpnlW7AlpAusMCLRFLeT0CRfnMIO1p4Xb7gd249TK0FzvyySOxYPiBAgmO3lq jF4fC9IDz36bWfjgoNeJsmPtEnkfHctdhcRWx554N5WZ7EzY2uAb3yDga0dJTFTS mIw80vJ6k3AlIrREFLaW+wwrbYm6we4RAsgoOI1nw+tM0GHhFrh32hduOTX97Iad I5wWdrgtYD0SKp1yYW1VNnf4SkXG0jOkis7c6szLfxApt6qrhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQakUCRCPyQXePlyfV5OTqX6+CkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvM2ViMDBiZWQtYmU0OC0z N2VjLWIzZjItMTVjYzJiNWUzNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsD1rOhRxl+Wx7GCL7s7jMxeZNNxHYrMhWUwrsEyD22PMBX/vOEARnS wAHEdUV1Fj+FgovoKATfxEu0AFbkMKSaYaPla5lBdXgnbgQ1dE/xSKebw7YZ3kNf 8qAaTZzp1N4SozbiJ3eZM88MU64JdPTKweDV5bZoQsjbr7cahe7UeZaM8kvxeiUm XtItoi2BOIO/aEtuis17MgV/hSXSiW+p01kffrf2woW8WdGuwRJ9WkRzrmtHKqM6 IZ5nHLTnlIP158ClhmPjrBU1CwSseO6nJ+yLrQwZH8psXft5nK6+l8Sv+euGAyVf 8qwkMfzDLbWlJKXGBIADEFZvlluVN1Q= -----END CERTIFICATE-----Generated at Wed May 13 10:48:14 2026 by rpki-client