$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa File: 3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa (raw, json) Hash identifier: yA11hl+3z8yjXkITAoesrK/IlIScKc8+l++do2HaA1k= Subject key identifier: 40:B4:D1:DB:C6:9B:14:41:74:1D:56:70:16:D9:EB:8E:0C:13:5C:05 Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584D74701BF9FE93030E16E2B180 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 63221 IP address blocks: 149.112.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:1b:f9:fe:93:03:0e:16:e2:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=ecb6a5d1-7239-4de4-842d-214344b46ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:0a:05:a5:51:22:c4:b3:84:af:13:59:aa: ba:98:8a:68:35:46:08:36:89:9b:1f:06:6e:11:55: a3:a8:81:8b:68:6a:3f:77:51:71:d4:8c:90:5e:d1: 8e:42:26:46:7c:7f:99:9d:bc:88:a7:bf:16:36:15: 22:6d:77:69:48:9c:46:c8:75:5a:5e:85:39:7a:30: 40:80:7a:ab:40:a7:f1:c6:03:ba:c3:c9:a4:91:a1: 20:9b:52:36:6f:ab:b8:c9:9c:0c:c6:25:39:f8:25: 48:92:f4:df:ac:35:4d:1b:8b:c4:75:e8:de:f3:22: 40:a6:80:1a:c8:16:b2:fd:2a:a6:1b:f6:e4:9f:c8: 6a:75:05:01:07:77:53:17:fe:2c:b8:d8:0b:6c:10: ef:af:3c:03:c5:da:62:46:f8:63:00:eb:bf:e9:11: 0c:29:b7:ee:c0:01:c4:f4:56:27:be:34:7c:84:cc: a5:b2:2c:d7:37:cb:0f:be:b3:2d:6f:b5:cf:c3:26: ef:eb:e9:33:dc:94:76:38:75:71:18:6d:f5:f2:6d: 26:a5:43:d4:95:4e:0f:6f:e2:4e:24:b9:cb:1d:bf: 66:10:7c:51:c1:8f:67:4e:8d:1a:d2:86:d9:2e:44: ab:12:ae:41:f1:f3:4e:fd:e6:91:f6:25:3e:1b:44: a1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B4:D1:DB:C6:9B:14:41:74:1D:56:70:16:D9:EB:8E:0C:13:5C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv4: 149.112.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:cb:eb:b4:a8:36:ed:48:ed:99:26:e6:60:bf:ba:25:39:33: b9:81:32:2c:30:c9:51:b7:90:15:00:b1:9d:4f:c5:08:44:55: 94:bb:71:60:37:54:79:3b:7c:b4:ee:50:5c:58:fd:71:32:ed: 3d:88:10:08:23:b7:48:e1:59:8c:73:db:6b:4a:e9:3f:5f:1d: 32:a0:52:bf:4b:14:b8:59:8a:0f:be:ec:46:6a:f1:de:9a:d4: c2:09:ce:a4:e8:fc:63:84:da:5c:ba:79:0d:df:8e:be:74:47: 3f:d4:5e:e6:44:de:e1:ef:d6:29:e8:37:85:a3:ed:6f:32:9a: 71:9b:b3:15:84:3d:5f:f5:5b:b6:25:49:58:15:22:23:e2:72: 31:31:72:07:43:f4:85:49:bd:32:9d:1f:ca:cb:5d:aa:26:c4: ea:5e:f3:ac:ed:ae:9f:1f:0f:87:05:33:54:cb:a6:80:da:bd: e0:e9:98:74:e0:a8:1e:0a:f6:2a:4f:44:15:7a:c9:4c:a8:02: ac:25:98:c8:83:ac:18:ae:7a:41:d2:65:6c:0a:79:5c:06:61: 27:c8:83:55:5e:b3:48:bd:b4:50:ce:b5:99:6a:86:f4:a8:4e: a9:a9:d3:04:98:86:fb:d4:dc:01:a4:a8:98:14:d7:29:7e:ea: b0:62:41:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cBv5/pMDDhbisYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZWNiNmE1ZDEtNzIzOS00ZGU0LTg0MmQtMjE0MzQ0YjQ2YWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/UKBaVRIsSzhK8TWaq6mIpoNUYINombHwZu EVWjqIGLaGo/d1Fx1IyQXtGOQiZGfH+ZnbyIp78WNhUibXdpSJxGyHVaXoU5ejBA gHqrQKfxxgO6w8mkkaEgm1I2b6u4yZwMxiU5+CVIkvTfrDVNG4vEdeje8yJApoAa yBay/SqmG/bkn8hqdQUBB3dTF/4suNgLbBDvrzwDxdpiRvhjAOu/6REMKbfuwAHE 9FYnvjR8hMylsizXN8sPvrMtb7XPwybv6+kz3JR2OHVxGG318m0mpUPUlU4Pb+JO JLnLHb9mEHxRwY9nTo0a0obZLkSrEq5B8fNO/eaR9iU+G0ShsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC00dvGmxRBdB1WcBbZ644ME1wFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvM2Q3ZTUxZTUtY2MyMi0z NzliLTg4MTMtMGJjMWNkZmM5NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXL67SoNu1I7Zkm5mC/uiU5M7mBMiwwyVG3kBUAsZ1PxQhEVZS7cWA3 VHk7fLTuUFxY/XEy7T2IEAgjt0jhWYxz22tK6T9fHTKgUr9LFLhZig++7EZq8d6a 1MIJzqTo/GOE2ly6eQ3fjr50Rz/UXuZE3uHv1inoN4Wj7W8ymnGbsxWEPV/1W7Yl SVgVIiPicjExcgdD9IVJvTKdH8rLXaomxOpe86ztrp8fD4cFM1TLpoDaveDpmHTg qB4K9ipPRBV6yUyoAqwlmMiDrBiuekHSZWwKeVwGYSfIg1Ves0i9tFDOtZlqhvSo Tqmp0wSYhvvU3AGkqJgU1yl+6rBiQVU= -----END CERTIFICATE-----Generated at Fri Apr 17 01:47:43 2026 by rpki-client