$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa File: fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa (raw, json) Hash identifier: TbhKERnBDUx5CHuzIb/HIfYciUdDbnyKblcjTnbsgcM= Subject key identifier: 4F:25:C1:7C:7D:19:42:06:C0:6A:93:52:B5:4C:8F:E6:58:13:66:9B Certificate issuer: /CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8 Certificate serial: 010D0C9F4328584EA794853D07C9D79317725270 Authority key identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 149.48.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:85:3d:07:c9:d7:93:17:72:52:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e81c4352-bef3-44d2-85cb-d40c6c558ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:94:13:f6:dd:b3:1c:a9:7b:c7:5f:57:fe: 76:be:73:26:75:9b:26:43:75:37:37:e6:a1:8d:fb: bb:82:6a:92:ea:d9:ae:f2:d5:98:83:71:c1:74:8b: 85:c0:48:79:b3:7a:ae:90:1f:83:a4:b4:78:8b:c1: d0:9d:2a:61:a7:4d:96:2b:de:5b:b2:50:21:a1:53: 30:41:1a:f5:b2:f1:02:c9:01:83:89:20:7d:3b:22: c5:1f:77:85:57:c9:72:7d:f7:d5:78:f4:f5:d8:69: c3:ce:67:92:59:01:bd:f2:92:ec:51:a4:58:3f:90: 3d:35:d9:1a:5b:ed:f4:a2:3b:8a:dd:d1:78:65:22: 18:a6:4c:0b:1a:b0:ae:e3:5c:fa:f8:ad:5d:e9:01: cc:35:5c:55:92:35:71:50:6b:0a:a4:0f:62:6b:75: 5a:7c:64:60:8a:d9:a9:38:e7:50:38:54:3b:75:2c: f4:22:29:7b:cf:bd:40:89:a4:6f:bd:f4:f7:89:a3: f3:26:fc:21:2e:62:b1:88:63:bc:da:1a:85:ee:83: 01:ee:52:6b:7c:3c:c8:93:5f:de:b6:bf:da:56:55: 07:be:c1:a5:28:64:81:7b:20:fb:6e:9f:d5:93:6f: cd:bc:10:58:9c:5c:76:e5:5e:1e:af:8b:b7:d5:d4: 8f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:25:C1:7C:7D:19:42:06:C0:6A:93:52:B5:4C:8F:E6:58:13:66:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl X509v3 Authority Key Identifier: keyid:0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer sbgp-ipAddrBlock: critical IPv4: 149.48.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:8b:f1:0b:51:97:9b:fa:66:eb:2e:99:86:43:fc:72:a3:c4: 5e:59:bf:91:3e:6b:a9:11:c7:6d:72:d4:45:cc:57:d6:0f:c2: 26:d4:5e:cc:ff:39:16:c7:18:c6:68:88:4d:32:0b:69:9f:ae: 16:7a:27:5a:67:7d:aa:25:cc:49:9f:0e:7c:e9:f8:c7:16:5e: a0:09:16:54:17:1c:9d:94:dc:18:25:5e:b8:b0:1a:59:76:88: 83:de:f9:60:0f:81:f7:e8:84:b9:14:8a:20:c2:1e:ea:96:e1: eb:0d:de:a0:b3:30:63:b1:d7:63:87:be:4e:3c:36:bd:2e:bf: b4:a3:74:03:b5:f2:5f:07:6d:f9:76:a4:66:95:a7:b6:a3:42: fd:18:ed:5e:d2:73:3c:c4:73:00:bb:a4:81:49:92:5f:f8:62: 92:f0:7e:f9:8d:d5:21:2e:bc:69:06:d5:b6:87:0d:8e:f7:8a: 32:67:a7:85:96:65:c5:6e:b8:0e:9e:2e:4b:b3:28:b2:8f:a6: 9e:c6:9d:ef:42:de:b9:1a:d2:45:bc:52:6d:bd:4c:da:cb:0f: f0:5e:cb:be:95:64:eb:6a:ad:5a:36:b4:8e:79:3f:4f:91:09: ff:50:c0:a5:cb:28:c0:9e:a0:4e:76:0d:16:36:0c:a8:50:08: a6:a7:82:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlIU9B8nXkxdyUnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzliMWZlN2EtZWNhOS00MjJmLTkwNDMtNWE5M2NhNTE0 NWM4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTgxYzQzNTItYmVmMy00NGQyLTg1Y2ItZDQwYzZjNTU4ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDGUE/bdsxype8dfV/52vnMmdZsmQ3U3N+ah jfu7gmqS6tmu8tWYg3HBdIuFwEh5s3qukB+DpLR4i8HQnSphp02WK95bslAhoVMw QRr1svECyQGDiSB9OyLFH3eFV8lyfffVePT12GnDzmeSWQG98pLsUaRYP5A9Ndka W+30ojuK3dF4ZSIYpkwLGrCu41z6+K1d6QHMNVxVkjVxUGsKpA9ia3VafGRgitmp OOdQOFQ7dSz0Iil7z71AiaRvvfT3iaPzJvwhLmKxiGO82hqF7oMB7lJrfDzIk1/e tr/aVlUHvsGlKGSBeyD7bp/Vk2/NvBBYnFx25V4er4u31dSPHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8lwXx9GUIGwGqTUrVMj+ZYE2abMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83OWIx ZmU3YS1lY2E5LTQyMmYtOTA0My01YTkzY2E1MTQ1YzgvZmIwYTMzNTYtMDNmZC0z NjFkLWE3YzgtODc3MmVhZjFkMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzliMWZlN2EtZWNhOS00MjJmLTkw NDMtNWE5M2NhNTE0NWM4Lzc5YjFmZTdhLWVjYTktNDIyZi05MDQzLTVhOTNjYTUx NDVjOC5jcmwwHwYDVR0jBBgwFoAUDGGhk2pEPOIRMfpAQmj3puc0hBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83OWIxZmU3YS1lY2E5LTQyMmYtOTA0My01YTkz Y2E1MTQ1YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlTCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuL8QtRl5v6ZusumYZD/HKjxF5Zv5E+a6kRx21y1EXMV9YPwibUXsz/ ORbHGMZoiE0yC2mfrhZ6J1pnfaolzEmfDnzp+McWXqAJFlQXHJ2U3BglXriwGll2 iIPe+WAPgffohLkUiiDCHuqW4esN3qCzMGOx12OHvk48Nr0uv7SjdAO18l8Hbfl2 pGaVp7ajQv0Y7V7SczzEcwC7pIFJkl/4YpLwfvmN1SEuvGkG1baHDY73ijJnp4WW ZcVuuA6eLkuzKLKPpp7Gne9C3rka0kW8Um29TNrLD/Bey76VZOtqrVo2tI55P0+R Cf9QwKXLKMCeoE52DRY2DKhQCKangoM= -----END CERTIFICATE-----Generated at Wed Jul 29 04:27:24 2026 by rpki-client