$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0bffe8f-0491-3757-b373-60317e61cae8.roa File: a0bffe8f-0491-3757-b373-60317e61cae8.roa (raw, json) Hash identifier: Ju267JWmbIYiNzPN7Gy7JNSQmSnGRL/GBE1H++9gkg8= Subject key identifier: 74:55:D1:1A:80:BF:A5:45:45:BD:BA:E3:85:CA:95:D0:84:67:8B:33 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D4D5A90F32A182E2413C09320 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0bffe8f-0491-3757-b373-60317e61cae8.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 272066 IP address blocks: 149.107.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:90:f3:2a:18:2e:24:13:c0:93:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=e5592991-a5a6-4151-aed4-12d0d4ffa449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:84:97:dc:23:a9:3f:71:70:54:ae:83:0c:4e: 7d:93:de:13:0d:6a:c6:ad:b5:5a:57:3e:18:01:15: e4:ca:82:21:8d:1c:bb:de:a0:b6:1b:19:63:1d:de: 02:47:0c:fe:09:a2:83:b6:54:53:2d:cb:a7:63:57: 4e:4d:89:b6:c0:c6:41:7b:71:72:de:b6:64:a7:61: 66:cf:ce:99:c4:96:72:e5:71:ba:97:4e:55:e1:47: 96:97:e6:88:8d:5c:e3:14:06:3f:db:02:cd:50:ea: 6c:7f:6c:83:80:b8:c7:43:72:2f:16:70:ed:e5:79: a3:a3:8f:49:fd:42:f1:c8:50:cb:90:93:03:04:31: 18:20:de:91:b2:1d:40:5a:a9:73:34:bf:cd:f8:6f: 50:ab:7c:8f:07:41:44:3f:00:80:73:6b:13:d2:4d: 40:8a:a2:4e:d8:fa:0e:e8:6b:e8:10:f6:e4:22:0d: fa:9c:8c:3a:6a:ce:97:9c:87:01:b0:24:08:33:59: a4:c8:c7:c3:1a:6a:33:f6:ce:5e:6e:d5:95:89:bc: a8:f3:ce:79:8c:8c:c6:88:3c:cf:ce:7b:5b:da:64: 52:e4:b4:52:63:8c:e7:69:55:ac:a6:e3:9f:68:ac: 4d:b6:84:d4:3d:38:54:2d:41:3f:70:ac:56:2b:6b: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:55:D1:1A:80:BF:A5:45:45:BD:BA:E3:85:CA:95:D0:84:67:8B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0bffe8f-0491-3757-b373-60317e61cae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.107.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:20:b5:4c:e2:82:6d:b0:2a:18:1e:8d:45:41:6c:6f:89:58: 9c:95:86:34:77:d8:57:47:d9:fd:b8:12:2f:bc:c1:2f:81:56: f7:bf:28:d8:9f:d8:95:ed:37:a6:73:98:47:69:af:2d:65:a4: d4:3a:4e:78:8d:bd:ea:39:91:88:ae:89:be:4e:a5:2d:08:52: 92:80:4f:2a:7f:f4:4c:31:cf:78:2c:55:d0:d4:9d:fe:14:b6: b1:1e:ba:30:27:28:b4:be:b7:88:e1:72:5c:9c:ed:77:dc:d4: 57:fd:91:1f:c7:68:f4:13:e2:ec:90:2a:b9:ed:cd:b8:76:91: 17:db:da:b9:eb:e7:b1:72:52:31:4f:7b:c3:8d:2e:7a:7d:37: be:cc:f1:6b:65:1f:9a:d2:15:e6:74:79:cd:fe:bc:b7:7c:ec: c2:0a:af:ba:55:e8:f0:ab:ca:1f:b2:f1:57:46:3f:5b:34:8c: 9d:3f:ab:42:03:8d:5b:bc:76:22:c7:1b:8b:fe:05:33:b3:86: 16:71:c9:1d:cb:29:c5:0d:58:17:6e:b2:59:c5:93:ef:2b:9e: ce:90:2a:99:66:d8:e2:5d:a9:8b:8d:0a:f8:e8:3c:22:7f:87: 02:a5:1a:c3:b8:c6:51:d2:93:6f:60:86:26:0f:d6:14:3d:b7: af:0c:c8:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWpDzKhguJBPAkyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZTU1OTI5OTEtYTVhNi00MTUxLWFlZDQtMTJkMGQ0ZmZhNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YSX3COpP3FwVK6DDE59k94TDWrGrbVaVz4Y ARXkyoIhjRy73qC2GxljHd4CRwz+CaKDtlRTLcunY1dOTYm2wMZBe3Fy3rZkp2Fm z86ZxJZy5XG6l05V4UeWl+aIjVzjFAY/2wLNUOpsf2yDgLjHQ3IvFnDt5Xmjo49J /ULxyFDLkJMDBDEYIN6Rsh1AWqlzNL/N+G9Qq3yPB0FEPwCAc2sT0k1AiqJO2PoO 6GvoEPbkIg36nIw6as6XnIcBsCQIM1mkyMfDGmoz9s5ebtWVibyo8855jIzGiDzP zntb2mRS5LRSY4znaVWspuOfaKxNtoTUPThULUE/cKxWK2uEgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRV0RqAv6VFRb2644XKldCEZ4szMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTBiZmZlOGYtMDQ5MS0z NzU3LWIzNzMtNjAzMTdlNjFjYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALogtUzigm2wKhgejUVBbG+JWJyVhjR32FdH2f24Ei+8wS+BVve/KNif 2JXtN6ZzmEdpry1lpNQ6TniNveo5kYiuib5OpS0IUpKATyp/9Ewxz3gsVdDUnf4U trEeujAnKLS+t4jhclyc7Xfc1Ff9kR/HaPQT4uyQKrntzbh2kRfb2rnr57FyUjFP e8ONLnp9N77M8WtlH5rSFeZ0ec3+vLd87MIKr7pV6PCryh+y8VdGP1s0jJ0/q0ID jVu8diLHG4v+BTOzhhZxyR3LKcUNWBduslnFk+8rns6QKplm2OJdqYuNCvjoPCJ/ hwKlGsO4xlHSk29ghiYP1hQ9t68MyEQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:40:59 2026 by rpki-client