$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b0dbd453-4b6f-36f0-a271-fd92e482a208.roa File: b0dbd453-4b6f-36f0-a271-fd92e482a208.roa (raw, json) Hash identifier: RT8v3KdIXgMDaCqCMqgMPfY6a4mlP2EUDd1VtL4dmSU= Subject key identifier: 8A:8B:C8:6F:46:CE:76:6C:15:8C:3F:A2:9D:BF:A9:AA:69:7E:88:C3 Certificate issuer: /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Certificate serial: 010D0C9F4328584EF01CE5574F265C240B7D1180 Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b0dbd453-4b6f-36f0-a271-fd92e482a208.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 198949 IP address blocks: 149.47.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:e5:57:4f:26:5c:24:0b:7d:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=017f9d94-5b76-43f5-9414-8564ad0da089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cd:72:2c:31:90:4a:3d:55:1a:14:fc:e4:90: 93:a5:7e:6f:90:98:69:d8:3f:93:de:de:1d:4d:49: ab:09:ff:9c:a0:60:03:a2:79:d0:3c:4a:c6:a3:d9: b2:48:80:28:fb:a8:04:32:21:3a:c1:1c:9f:ba:6a: 68:5b:35:fd:3f:08:ae:d0:e2:90:dc:19:f9:75:4c: 3f:2b:6a:76:12:61:db:a0:40:56:0a:ad:d9:af:75: ed:3e:17:c5:bb:5b:8b:13:5e:42:56:cb:40:0b:f2: ab:64:20:70:0e:db:0b:35:9b:64:9f:e2:31:87:0c: 88:be:19:aa:80:da:94:3e:1e:6f:63:1d:0f:80:be: b7:98:68:65:ac:00:f4:18:d7:80:44:cf:a5:38:fb: 5d:00:2e:b7:f5:e6:3a:86:0f:72:75:18:0f:3b:0e: 1d:d6:59:49:0c:c5:b9:9f:1c:62:62:09:71:fe:5c: c5:d3:06:d9:70:4b:62:17:09:1c:f8:3c:82:67:e1: 6e:76:89:93:bd:46:1f:6c:78:d0:51:cc:f4:a9:3a: 9d:17:67:67:6c:49:70:b5:6a:60:d0:89:f0:08:5b: d9:c6:7b:f1:cb:db:38:df:72:50:0f:80:94:1d:72: 38:1e:47:76:e0:c5:49:de:42:9a:a9:e7:0f:4f:5f: cb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8B:C8:6F:46:CE:76:6C:15:8C:3F:A2:9D:BF:A9:AA:69:7E:88:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/b0dbd453-4b6f-36f0-a271-fd92e482a208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl X509v3 Authority Key Identifier: keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer sbgp-ipAddrBlock: critical IPv4: 149.47.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d5:6c:05:e1:49:f9:3e:7e:a5:51:d3:e0:2c:e9:bd:24:25: 96:10:35:c5:ff:b0:d7:24:84:bc:fb:e4:68:70:24:b9:0d:4c: 22:32:0e:fc:00:e4:55:b9:8b:c3:20:ef:31:2a:c7:10:08:45: 82:7c:28:c2:7e:ca:8a:f9:62:77:13:1d:fe:9b:d5:e4:ef:e8: ce:f5:6d:20:20:46:5e:cc:57:04:2a:79:4b:66:7a:2a:1d:bb: 36:6b:d9:f6:c4:17:7d:88:bf:93:e5:81:d8:52:5e:ea:df:24: 34:5c:2d:09:d0:d1:4d:d9:79:94:f5:fe:b5:9c:a6:01:e2:fb: b7:06:a0:84:c5:23:f3:cf:b3:00:1c:8d:79:1c:d8:a7:bb:4d: 32:ec:73:eb:8d:a7:48:e8:80:a6:50:64:0a:cd:6f:24:ef:1d: 05:ff:b7:2c:29:a9:d5:2c:05:16:67:d5:58:a4:28:c5:ab:77: 1a:05:87:c2:10:d3:a1:8d:7d:e2:84:97:f8:dd:3e:fd:fb:2c: 3a:85:1a:38:ac:9a:95:12:19:af:ae:57:f1:c1:c5:ad:a6:d8: 10:fc:bb:c0:64:1b:35:42:b9:b4:da:75:cf:7c:6c:6f:3c:c6: d5:d2:17:d5:0c:99:be:e4:d7:67:ea:ea:c2:a4:25:eb:77:0f: dd:b0:f6:08 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7wHOVXTyZcJAt9EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZj NmI5MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MDE3ZjlkOTQtNWI3Ni00M2Y1LTk0MTQtODU2NGFkMGRhMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM1yLDGQSj1VGhT85JCTpX5vkJhp2D+T3t4d TUmrCf+coGADonnQPErGo9mySIAo+6gEMiE6wRyfumpoWzX9Pwiu0OKQ3Bn5dUw/ K2p2EmHboEBWCq3Zr3XtPhfFu1uLE15CVstAC/KrZCBwDtsLNZtkn+IxhwyIvhmq gNqUPh5vYx0PgL63mGhlrAD0GNeARM+lOPtdAC639eY6hg9ydRgPOw4d1llJDMW5 nxxiYglx/lzF0wbZcEtiFwkc+DyCZ+FudomTvUYfbHjQUcz0qTqdF2dnbElwtWpg 0InwCFvZxnvxy9s433JQD4CUHXI4Hkd24MVJ3kKaqecPT1/L0QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIqLyG9GznZsFYw/op2/qappfojDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNi NGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvYjBkYmQ0NTMtNGI2Zi0z NmYwLWEyNzEtZmQ5MmU0ODJhMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZjYjRhZWMtYTY2Yy00MDdiLThj YmEtN2RlZTQ3YTZjNmI5L2RmY2I0YWVjLWE2NmMtNDA3Yi04Y2JhLTdkZWU0N2E2 YzZiOS5jcmwwHwYDVR0jBBgwFoAUzAElQsLruxRaHy5JVxuAJbOpmTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVl NDdhNmM2YjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlS8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANNVsBeFJ+T5+pVHT4CzpvSQllhA1xf+w1ySEvPvkaHAkuQ1MIjIO/ADk VbmLwyDvMSrHEAhFgnwown7KivlidxMd/pvV5O/ozvVtICBGXsxXBCp5S2Z6Kh27 NmvZ9sQXfYi/k+WB2FJe6t8kNFwtCdDRTdl5lPX+tZymAeL7twaghMUj88+zAByN eRzYp7tNMuxz642nSOiAplBkCs1vJO8dBf+3LCmp1SwFFmfVWKQoxat3GgWHwhDT oY194oSX+N0+/fssOoUaOKyalRIZr65X8cHFrabYEPy7wGQbNUK5tNp1z3xsbzzG 1dIX1QyZvuTXZ+rqwqQl63cP3bD2CA== -----END CERTIFICATE-----Generated at Mon Sep 21 09:10:52 2026 by rpki-client