$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/47e8f717-7151-3c37-9dd9-d36776a8d44d.roa File: 47e8f717-7151-3c37-9dd9-d36776a8d44d.roa (raw, json) Hash identifier: Xr063rTNgIFX4X+HfZ00yqMYA4MUS7jGrLu0X4CF1GY= Subject key identifier: 2A:8B:2F:09:42:18:BE:6B:6D:73:F3:41:43:C6:9C:4A:49:F9:92:B4 Certificate issuer: /CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d Certificate serial: 010D0C9F4328584F92085044BED0F0757F7649A0 Authority key identifier: 34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/47e8f717-7151-3c37-9dd9-d36776a8d44d.roa Signing time: Wed 21 Oct 2026 01:00:12 +0000 ROA not before: Wed 21 Oct 2026 01:00:12 +0000 ROA not after: Tue 19 Jan 2027 02:00:12 +0000 asID: 0 IP address blocks: 149.112.81.0/24 maxlen: 24 149.112.82.0/24 maxlen: 24 2001:504:136::/48 maxlen: 48 2001:504:137::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:08:50:44:be:d0:f0:75:7f:76:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d Validity Not Before: Oct 21 01:00:12 2026 GMT Not After : Jan 19 02:00:12 2027 GMT Subject: CN=9ec34837-5d99-41be-984a-0f99fd9ac512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:ab:1e:b4:8c:b1:d4:03:7c:43:03:35:cf: 28:99:b8:34:55:bb:eb:ed:a7:d2:6f:51:1b:de:30: 10:f7:16:d9:10:c2:88:79:50:85:87:97:12:5e:a1: a0:ba:3a:7e:c5:74:1a:41:f2:0b:bc:e0:59:40:ee: 8e:fc:51:05:86:cc:6b:f7:f5:94:05:6e:d0:93:e9: dc:2e:c0:48:bd:4b:95:c4:15:61:47:9b:c1:b0:fa: 15:ef:9b:5e:10:da:6e:87:81:ed:bf:f3:f8:38:18: a5:36:be:a6:a7:97:ee:50:f7:68:4e:be:89:ed:45: b0:04:a3:8b:53:62:58:fb:91:5d:04:13:95:59:4d: f3:a5:95:71:ee:0a:6c:71:a7:b3:0a:f6:1e:6e:58: c2:b2:bd:da:d1:3d:44:f2:26:75:a8:12:38:08:34: 75:7b:a5:e7:f0:b7:08:71:5e:57:4e:5b:56:1b:b6: ac:9e:50:f5:f1:b4:ce:d1:89:1c:4d:29:c8:0c:f5: 3d:6f:35:a1:11:b0:b2:89:15:82:1c:91:7b:d9:37: 91:21:91:68:bf:31:0b:25:e5:da:09:e4:5d:94:0e: 53:f5:1f:e4:ab:82:ea:cd:79:b4:47:84:f2:e3:ad: b2:de:49:e4:a0:d7:a1:68:60:f6:60:88:9d:b4:78: 77:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8B:2F:09:42:18:BE:6B:6D:73:F3:41:43:C6:9C:4A:49:F9:92:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/47e8f717-7151-3c37-9dd9-d36776a8d44d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl X509v3 Authority Key Identifier: keyid:34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer sbgp-ipAddrBlock: critical IPv4: 149.112.81.0-149.112.82.255 IPv6: 2001:504:136::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:bd:8e:9d:d0:5c:4c:9d:7c:f8:0a:93:8e:4a:44:88:6e:6e: 2a:0a:e2:c1:17:7a:7e:17:a1:70:54:76:fb:57:1f:82:b5:73: 4d:a4:e0:a4:ae:73:ec:a7:65:58:d8:8b:d0:56:b4:58:54:c8: 8e:b1:6e:da:fc:3b:38:0a:5b:7f:bc:08:0b:8a:0a:be:b2:7f: 37:59:63:af:c0:4a:59:0f:10:d9:26:11:e7:56:e4:2c:8a:04: 30:ab:4e:72:ff:f8:6f:c0:1d:81:66:9e:b5:f2:54:a7:24:5b: 81:33:ab:5c:3b:fd:f8:73:47:d1:11:a3:80:2d:21:05:7b:90: 58:fb:13:dc:5b:35:85:6b:eb:1e:eb:b3:eb:fb:a6:82:c8:f7: d3:cc:af:e4:99:2a:03:ab:52:a2:95:27:72:6d:f9:31:a3:7d: 01:4c:7f:97:83:21:d8:da:2f:7e:1d:11:94:a6:3e:af:f1:ec: ad:34:78:10:10:6a:d6:86:75:4c:e3:10:d2:f6:f1:f6:bc:a0: b6:ae:b1:6f:2c:09:dd:e5:9c:0b:8d:38:d5:a9:eb:3f:6b:3a: 84:d6:f2:50:02:7b:9c:3d:69:e2:25:57:6c:07:16:72:51:62: ce:09:9d:00:23:04:56:9b:de:b5:d4:b9:b9:d0:70:03:8f:51: 96:de:16:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+SCFBEvtDwdX92SaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQzMWNiYmYtNDQxZS00ZDhkLWI1OGYtNDE2N2QxMzg2 ZjZkMB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk OWVjMzQ4MzctNWQ5OS00MWJlLTk4NGEtMGY5OWZkOWFjNTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeCrHrSMsdQDfEMDNc8ombg0Vbvr7afSb1Eb 3jAQ9xbZEMKIeVCFh5cSXqGgujp+xXQaQfILvOBZQO6O/FEFhsxr9/WUBW7Qk+nc LsBIvUuVxBVhR5vBsPoV75teENpuh4Htv/P4OBilNr6mp5fuUPdoTr6J7UWwBKOL U2JY+5FdBBOVWU3zpZVx7gpscaezCvYebljCsr3a0T1E8iZ1qBI4CDR1e6Xn8LcI cV5XTltWG7asnlD18bTO0YkcTSnIDPU9bzWhEbCyiRWCHJF72TeRIZFovzELJeXa CeRdlA5T9R/kq4LqzXm0R4Ty462y3knkoNehaGD2YIidtHh3ewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCqLLwlCGL5rbXPzQUPGnEpJ+ZK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mNDMx Y2JiZi00NDFlLTRkOGQtYjU4Zi00MTY3ZDEzODZmNmQvNDdlOGY3MTctNzE1MS0z YzM3LTlkZDktZDM2Nzc2YThkNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjQzMWNiYmYtNDQxZS00ZDhkLWI1 OGYtNDE2N2QxMzg2ZjZkL2Y0MzFjYmJmLTQ0MWUtNGQ4ZC1iNThmLTQxNjdkMTM4 NmY2ZC5jcmwwHwYDVR0jBBgwFoAUNKAYHeaDHg2G04ycNul41/k14TkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mNDMxY2JiZi00NDFlLTRkOGQtYjU4Zi00MTY3 ZDEzODZmNmQuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBACVcFED BACVcFIwDwQCAAIwCQMHASABBQQBNjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHvY6d0FxMnXz4CpOOSkSI bm4qCuLBF3p+F6FwVHb7Vx+CtXNNpOCkrnPsp2VY2IvQVrRYVMiOsW7a/Ds4Clt/ vAgLigq+sn83WWOvwEpZDxDZJhHnVuQsigQwq05y//hvwB2BZp618lSnJFuBM6tc O/34c0fREaOALSEFe5BY+xPcWzWFa+se67Pr+6aCyPfTzK/kmSoDq1KilSdybfkx o30BTH+XgyHY2i9+HRGUpj6v8eytNHgQEGrWhnVM4xDS9vH2vKC2rrFvLAnd5ZwL jTjVqes/azqE1vJQAnucPWniJVdsBxZyUWLOCZ0AIwRWm9611Lm50HADj1GW3hZy -----END CERTIFICATE-----Generated at Thu Nov 5 07:46:32 2026 by rpki-client