$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa File: df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa (raw, json) Hash identifier: nzhVGnuuxiTD4n6lqoYuc+MBr9csFww/iWPP7IqMano= Subject key identifier: 6C:8F:D9:F6:31:C2:FD:E0:15:61:F6:BF:F0:FA:88:1F:C8:1F:76:7B Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584DE1508842161362AB133BF248 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 18434 IP address blocks: 147.249.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:88:42:16:13:62:ab:13:3b:f2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=aa1eccba-3a4c-4d12-ae7a-6d57e9e603e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:a5:b6:80:39:e7:fb:8b:2c:ad:c1:e2:13: 1b:5f:d6:54:9d:77:18:8b:a0:e2:36:fc:1d:8f:d8: ee:24:6a:a4:be:ba:c6:83:a4:af:d0:20:4e:46:d1: 37:4a:54:d8:51:de:d8:90:ce:78:3d:2c:84:43:a3: 12:de:fa:fb:d4:6a:21:dc:3e:7f:2b:fa:e3:ce:06: 2a:a0:4c:d5:d1:88:d3:6a:8d:5e:c6:8c:fb:59:93: 22:c4:d5:36:fc:bf:89:3b:1c:57:c2:af:0d:d7:8f: 92:a4:bb:35:61:50:c0:34:bb:63:2d:7f:a2:83:54: 55:90:60:d3:b2:a1:ee:a5:4d:8f:bb:98:83:25:2c: 3e:dc:ca:df:e4:56:79:d6:71:42:ee:52:45:b4:74: 1d:21:c3:79:e0:12:39:6c:e1:bd:cc:52:c5:d3:3c: 33:aa:34:73:7a:c7:74:c1:b8:85:c8:c2:74:73:5c: c0:a3:0c:54:05:fa:06:dc:66:0c:10:ea:c8:59:b4: fb:9f:e8:af:cb:2b:9d:cc:14:7a:6e:ee:73:7e:2c: e1:e1:ba:14:d6:bf:a9:73:42:3d:ab:0e:cd:3f:d6: 08:97:42:52:f1:20:36:42:20:6f:cc:cd:eb:5e:ae: cc:90:fd:b1:27:95:fc:72:a8:7d:cf:46:84:63:98: d5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8F:D9:F6:31:C2:FD:E0:15:61:F6:BF:F0:FA:88:1F:C8:1F:76:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:21:89:b6:2b:97:e9:dd:4b:8c:e1:28:9f:29:f5:21:8c:15: 01:12:fa:fb:61:ae:ea:49:3b:ad:9a:90:b0:6f:cb:87:81:09: c4:76:fa:f4:5e:fd:71:b2:4d:7a:63:65:da:28:c1:45:6b:d5: 1b:08:6b:5d:af:64:11:11:3e:38:90:36:f3:0c:9f:e2:63:5f: 47:76:a3:06:5f:0f:75:89:7b:0b:c4:0c:c2:8a:12:6a:b2:b0: fc:e8:a7:87:de:8d:bc:1b:8a:f6:8a:82:c3:6b:f4:00:3e:7f: 66:9f:2f:eb:08:58:db:2b:df:75:95:6a:1c:76:3c:d7:00:16: ef:43:f3:2a:44:90:15:2b:6e:d8:40:f8:df:44:03:46:c5:c1: 07:93:a1:74:a0:10:0b:57:88:7b:6b:36:ab:8a:71:15:7a:52: 86:0a:ed:fa:6b:b0:6e:79:2d:fc:0e:ba:88:ce:a2:94:87:c4: 16:d7:10:39:94:26:73:29:b2:1e:b5:0f:3c:85:21:8a:83:e8: f6:dc:fc:ac:fb:e9:26:d9:2b:ef:a0:3c:2c:1c:6f:04:9d:87: 55:91:ce:40:18:03:e1:d5:2a:39:d2:df:c6:b1:74:9b:1d:c7: 37:77:42:a7:d6:35:4e:67:bf:89:bd:7f:d0:e9:07:35:12:25: da:3e:6e:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUIhCFhNiqxM78kgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk YWExZWNjYmEtM2E0Yy00ZDEyLWFlN2EtNmQ1N2U5ZTYwM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOmltoA55/uLLK3B4hMbX9ZUnXcYi6DiNvwd j9juJGqkvrrGg6Sv0CBORtE3SlTYUd7YkM54PSyEQ6MS3vr71Goh3D5/K/rjzgYq oEzV0YjTao1exoz7WZMixNU2/L+JOxxXwq8N14+SpLs1YVDANLtjLX+ig1RVkGDT sqHupU2Pu5iDJSw+3Mrf5FZ51nFC7lJFtHQdIcN54BI5bOG9zFLF0zwzqjRzesd0 wbiFyMJ0c1zAowxUBfoG3GYMEOrIWbT7n+ivyyudzBR6bu5zfizh4boU1r+pc0I9 qw7NP9YIl0JS8SA2QiBvzM3rXq7MkP2xJ5X8cqh9z0aEY5jVUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyP2fYxwv3gFWH2v/D6iB/IH3Z7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZGYwMmFkMWQtMjFlMi0z OWQ3LWJmMDItNDRhZmY0NWI4NGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUhibYrl+ndS4zhKJ8p9SGMFQES+vthrupJO62akLBvy4eBCcR2+vRe /XGyTXpjZdoowUVr1RsIa12vZBERPjiQNvMMn+JjX0d2owZfD3WJewvEDMKKEmqy sPzop4fejbwbivaKgsNr9AA+f2afL+sIWNsr33WVahx2PNcAFu9D8ypEkBUrbthA +N9EA0bFwQeToXSgEAtXiHtrNquKcRV6UoYK7fprsG55LfwOuojOopSHxBbXEDmU JnMpsh61DzyFIYqD6Pbc/Kz76SbZK++gPCwcbwSdh1WRzkAYA+HVKjnS38axdJsd xzd3QqfWNU5nv4m9f9DpBzUSJdo+big= -----END CERTIFICATE-----Generated at Sat Jun 13 13:26:23 2026 by rpki-client