$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/b5840da4-0dfe-3614-b04f-31b41355f958.roa File: b5840da4-0dfe-3614-b04f-31b41355f958.roa (raw, json) Hash identifier: W2KhaN9RG2FLr980s0yD8arxvbHQ/ez1p0CPYQEUBsg= Subject key identifier: 57:5E:F6:21:0E:FE:79:06:C2:1E:BF:17:38:F0:0A:08:31:72:F2:8D Certificate issuer: /CN=7482621e-c6dd-432b-9b07-f4defcbe44ca Certificate serial: 010D0C9F4328584EFCACC4C93F1C75C6C146F750 Authority key identifier: DC:3B:FE:51:67:1D:13:2A:76:98:33:0E:BF:5A:10:32:7D:11:2B:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/b5840da4-0dfe-3614-b04f-31b41355f958.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 7922 IP address blocks: 147.226.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/7482621e-c6dd-432b-9b07-f4defcbe44ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/7482621e-c6dd-432b-9b07-f4defcbe44ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c4:c9:3f:1c:75:c6:c1:46:f7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7482621e-c6dd-432b-9b07-f4defcbe44ca Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=81215a0c-26d9-412e-9e9e-120ca958a951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:dd:21:84:58:fd:91:3f:5b:e1:66:af:06: 1e:ae:16:73:2c:aa:b8:b4:9d:91:f6:88:68:b2:a4: 6d:64:4b:bc:26:2d:0f:7d:7f:70:f5:fe:ed:ec:20: 5d:29:27:32:c1:aa:8c:67:72:b6:63:cd:fb:89:02: 20:df:44:a0:af:3f:c2:68:0c:4c:d1:8a:e2:70:6f: 3c:ad:af:34:28:f9:12:fa:4d:f0:a5:d6:71:c1:e8: 41:5e:c4:1e:3e:51:d7:c8:a2:5b:2a:6a:be:2d:d7: 84:59:ab:f7:1a:30:00:d5:9d:05:84:ec:69:4b:86: 8b:91:03:23:b3:28:43:08:4a:27:97:5c:3e:bc:fb: 0b:24:d3:1e:84:08:f1:16:cf:19:01:42:83:ee:74: 9f:16:d5:32:2b:28:52:24:d5:75:98:a1:40:4c:ee: 3b:96:7b:03:a8:3d:6b:02:41:4d:de:d5:63:c2:9f: da:79:a4:c7:09:04:c4:91:e0:56:2e:7d:20:3c:e7: 8f:7a:59:c8:a8:7e:e0:d3:50:c3:c0:75:16:da:f4: 75:39:32:13:2f:4b:eb:6d:41:fd:d4:13:0d:e2:7d: 07:16:4c:03:99:d2:69:9c:5a:39:65:ac:0f:22:78: de:40:22:96:b9:e3:8a:de:60:cf:4a:23:a8:89:92: 08:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5E:F6:21:0E:FE:79:06:C2:1E:BF:17:38:F0:0A:08:31:72:F2:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/b5840da4-0dfe-3614-b04f-31b41355f958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/7482621e-c6dd-432b-9b07-f4defcbe44ca.crl X509v3 Authority Key Identifier: keyid:DC:3B:FE:51:67:1D:13:2A:76:98:33:0E:BF:5A:10:32:7D:11:2B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca.cer sbgp-ipAddrBlock: critical IPv4: 147.226.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:0d:33:65:b1:f1:66:fe:d6:46:fb:0b:c4:e5:64:8c:1a:e4: 66:69:c3:84:5a:a7:9e:48:9d:23:4c:cd:61:1d:c3:4e:16:a3: f7:a6:9b:42:6e:d5:25:16:38:25:d6:3f:c4:b7:0f:bf:ae:e6: 7a:ab:4c:83:6a:98:94:af:e5:5a:20:ed:01:47:26:ac:d9:6a: 6c:7f:4f:a6:e0:4d:34:b4:32:11:c4:ad:3f:3e:12:88:24:5e: 9a:2f:ca:02:83:95:f7:39:bc:44:6c:27:b1:39:e6:c8:a2:34: 12:cb:26:75:50:9e:f3:d1:95:e9:54:cb:14:f7:1f:7a:26:67: 65:c3:44:35:24:7e:0d:9b:49:98:ad:80:d5:24:5b:3c:8d:8f: 7b:61:ff:2e:e7:e9:3e:c6:92:90:df:6a:72:7f:4d:87:eb:09: 61:25:24:2a:b1:37:a5:32:ae:db:d2:ef:30:4a:20:b1:f8:dc: 29:a2:9a:02:a2:42:cd:54:7d:27:7d:52:4c:6b:7d:29:4f:c6: 3d:ed:8f:ea:aa:e1:6b:74:25:ef:d7:ac:12:a1:15:bc:ed:1a: 35:6b:28:9f:98:cc:06:2e:e4:24:37:a1:dc:99:1d:1a:79:fc: 1e:9f:4e:c3:4d:34:1c:e4:7e:29:6a:00:2f:98:19:dc:f7:1b: a0:1d:e0:82 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE78rMTJPxx1xsFG91AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4MjYyMWUtYzZkZC00MzJiLTliMDctZjRkZWZjYmU0 NGNhMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk ODEyMTVhMGMtMjZkOS00MTJlLTllOWUtMTIwY2E5NThhOTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtLdIYRY/ZE/W+FmrwYerhZzLKq4tJ2R9oho sqRtZEu8Ji0PfX9w9f7t7CBdKScywaqMZ3K2Y837iQIg30Sgrz/CaAxM0YricG88 ra80KPkS+k3wpdZxwehBXsQePlHXyKJbKmq+LdeEWav3GjAA1Z0FhOxpS4aLkQMj syhDCEonl1w+vPsLJNMehAjxFs8ZAUKD7nSfFtUyKyhSJNV1mKFATO47lnsDqD1r AkFN3tVjwp/aeaTHCQTEkeBWLn0gPOePelnIqH7g01DDwHUW2vR1OTITL0vrbUH9 1BMN4n0HFkwDmdJpnFo5ZawPInjeQCKWueOK3mDPSiOoiZIILwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFde9iEO/nkGwh6/FzjwCggxcvKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83NDgy NjIxZS1jNmRkLTQzMmItOWIwNy1mNGRlZmNiZTQ0Y2EvYjU4NDBkYTQtMGRmZS0z NjE0LWIwNGYtMzFiNDEzNTVmOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzQ4MjYyMWUtYzZkZC00MzJiLTli MDctZjRkZWZjYmU0NGNhLzc0ODI2MjFlLWM2ZGQtNDMyYi05YjA3LWY0ZGVmY2Jl NDRjYS5jcmwwHwYDVR0jBBgwFoAU3Dv+UWcdEyp2mDMOv1oQMn0RK3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83NDgyNjIxZS1jNmRkLTQzMmItOWIwNy1mNGRl ZmNiZTQ0Y2EuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk+IwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdw0zZbHxZv7WRvsLxOVkjBrkZmnDhFqnnkidI0zNYR3DThaj96abQm7V JRY4JdY/xLcPv67meqtMg2qYlK/lWiDtAUcmrNlqbH9PpuBNNLQyEcStPz4SiCRe mi/KAoOV9zm8RGwnsTnmyKI0EssmdVCe89GV6VTLFPcfeiZnZcNENSR+DZtJmK2A 1SRbPI2Pe2H/LufpPsaSkN9qcn9Nh+sJYSUkKrE3pTKu29LvMEogsfjcKaKaAqJC zVR9J31STGt9KU/GPe2P6qrha3Ql79esEqEVvO0aNWson5jMBi7kJDeh3JkdGnn8 Hp9Ow000HOR+KWoAL5gZ3PcboB3ggg== -----END CERTIFICATE-----Generated at Mon Sep 28 06:22:19 2026 by rpki-client