$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/4aff5b75-c317-3b8d-949c-1bcc94ead1f6.roa File: 4aff5b75-c317-3b8d-949c-1bcc94ead1f6.roa (raw, json) Hash identifier: r/jEfmB7IrI3NXhXyPir5OvHpIwcKIBlh8f4TcdMbYY= Subject key identifier: 0B:18:4C:41:0E:38:7A:B4:C7:2F:0A:CA:25:42:48:2A:DA:E1:CD:01 Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584D571FA94B6FB103C29A21C790 Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/4aff5b75-c317-3b8d-949c-1bcc94ead1f6.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 0 IP address blocks: 149.112.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a9:4b:6f:b1:03:c2:9a:21:c7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=6523025f-669a-40db-846b-4e161a4d72ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:94:8f:c7:04:b6:79:b9:4c:30:22:95:14: bc:ba:e0:1b:a8:00:75:88:1d:a1:79:f1:a1:26:5c: e4:9f:fd:5e:08:df:84:48:44:d5:62:f2:0a:54:a3: b3:1a:3d:61:dd:b2:ce:57:57:b5:9e:18:a6:8a:fb: a8:50:e5:df:4a:0d:30:ad:10:c1:90:2c:f1:ad:c9: 5e:ac:e7:99:bc:e2:07:59:08:e0:be:d9:e3:6d:fe: b1:43:57:4f:55:de:26:a0:47:a1:21:ba:f9:bd:2c: 49:7d:82:92:66:de:93:96:a2:3f:f5:a7:3a:73:8b: a7:bb:a0:9d:7f:ac:7d:c2:10:df:8d:cb:c3:29:fd: d9:c3:bf:f8:e7:0d:b4:6c:78:d2:f7:7b:66:7b:77: bb:81:d2:78:0f:71:09:91:88:ce:1e:e8:f3:68:2f: 22:d4:75:ce:c7:78:f8:31:49:56:fd:1d:bb:ee:91: 9c:dc:6b:75:28:a9:40:76:94:76:33:50:10:85:43: 38:d9:5b:05:2a:57:76:c8:08:eb:db:54:48:ea:3a: 0f:8f:51:01:f2:24:88:10:0a:74:93:94:cb:ff:cd: 1e:2d:c4:72:d3:6b:e0:b3:a0:90:7f:7e:9f:f6:27: df:7a:f5:d3:8e:dd:31:23:95:68:3c:df:74:4f:ed: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:18:4C:41:0E:38:7A:B4:C7:2F:0A:CA:25:42:48:2A:DA:E1:CD:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/4aff5b75-c317-3b8d-949c-1bcc94ead1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv4: 149.112.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:da:8e:6d:09:45:52:e7:2f:18:f5:ba:43:ee:8b:5e:6e:71: 5f:24:20:3c:cb:9e:f6:31:65:8f:7b:7a:40:05:ef:8f:59:88: 9d:85:24:7a:3f:90:bf:fb:ee:9b:cb:3e:38:a0:77:24:37:a5: 8f:1e:a1:69:48:12:03:a9:38:80:5d:fd:64:be:c4:2b:d2:fe: 67:ba:29:12:3c:ad:8b:86:d7:9b:43:c4:fa:0e:3e:a0:d8:e0: 48:8d:13:c5:33:9b:d5:65:78:f3:3d:fb:3c:bf:b0:1b:ff:d8: 21:a7:a7:4c:39:88:85:83:34:5f:e0:e4:f6:b4:59:ec:2b:42: 5f:b1:c2:9e:fc:51:c2:d6:c8:53:48:0c:41:ea:d2:aa:b2:eb: e6:3f:ca:38:08:08:2b:0a:e5:e4:07:13:7f:01:a2:06:75:0b: 08:3e:df:12:18:0a:86:d2:cc:32:c2:e9:40:50:8f:d0:13:8c: 56:d8:20:ea:a5:d4:97:7f:f5:e5:3a:b1:8f:91:03:c5:90:a8: 0f:6a:55:1f:9c:64:0e:d6:d2:05:b7:94:86:8f:6b:c6:97:c6: c5:78:09:93:5a:47:b1:b0:4c:70:c8:e5:29:7d:40:2a:f8:06: 74:35:5a:b4:df:84:86:74:af:36:92:16:e7:d8:44:67:04:ef: 7e:df:d2:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6lLb7EDwpohx5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NjUyMzAyNWYtNjY5YS00MGRiLTg0NmItNGUxNjFhNGQ3MmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnCUj8cEtnm5TDAilRS8uuAbqAB1iB2hefGh Jlzkn/1eCN+ESETVYvIKVKOzGj1h3bLOV1e1nhimivuoUOXfSg0wrRDBkCzxrcle rOeZvOIHWQjgvtnjbf6xQ1dPVd4moEehIbr5vSxJfYKSZt6TlqI/9ac6c4unu6Cd f6x9whDfjcvDKf3Zw7/45w20bHjS93tme3e7gdJ4D3EJkYjOHujzaC8i1HXOx3j4 MUlW/R277pGc3Gt1KKlAdpR2M1AQhUM42VsFKld2yAjr21RI6joPj1EB8iSIEAp0 k5TL/80eLcRy02vgs6CQf36f9iffevXTjt0xI5VoPN90T+0LmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsYTEEOOHq0xy8KyiVCSCra4c0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvNGFmZjViNzUtYzMxNy0z YjhkLTk0OWMtMWJjYzk0ZWFkMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHajm0JRVLnLxj1ukPui15ucV8kIDzLnvYxZY97ekAF749ZiJ2FJHo/ kL/77pvLPjigdyQ3pY8eoWlIEgOpOIBd/WS+xCvS/me6KRI8rYuG15tDxPoOPqDY 4EiNE8Uzm9VlePM9+zy/sBv/2CGnp0w5iIWDNF/g5Pa0WewrQl+xwp78UcLWyFNI DEHq0qqy6+Y/yjgICCsK5eQHE38BogZ1Cwg+3xIYCobSzDLC6UBQj9ATjFbYIOql 1Jd/9eU6sY+RA8WQqA9qVR+cZA7W0gW3lIaPa8aXxsV4CZNaR7GwTHDI5Sl9QCr4 BnQ1WrTfhIZ0rzaSFufYRGcE737f0jY= -----END CERTIFICATE-----Generated at Thu Apr 16 22:37:37 2026 by rpki-client