$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afc63c49-c751-3ac1-81d5-43b3b14df8dd.roa File: afc63c49-c751-3ac1-81d5-43b3b14df8dd.roa (raw, json) Hash identifier: 0q/b6+JfW7ildntMNkkCIVTGZhYqzpnJCUDlceyVpIo= Subject key identifier: 74:64:8F:02:2F:33:D0:0C:8F:4F:FA:52:40:8B:04:24:F3:B7:5D:F3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CF5BAADED15534C1788067380 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afc63c49-c751-3ac1-81d5-43b3b14df8dd.roa Signing time: Mon 23 Feb 2026 15:43:49 +0000 ROA not before: Mon 23 Feb 2026 15:43:49 +0000 ROA not after: Sun 24 May 2026 14:43:49 +0000 asID: 209265 IP address blocks: 149.6.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:ba:ad:ed:15:53:4c:17:88:06:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Feb 23 15:43:49 2026 GMT Not After : May 24 14:43:49 2026 GMT Subject: CN=b07a0079-8633-499a-8152-f91456ca221f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:42:ad:e6:d6:ab:0b:49:03:6b:94:2f:de: e4:0e:72:79:23:77:8d:50:2a:c4:88:dc:33:75:22: ef:1f:e2:b5:69:3c:87:a1:69:04:f0:7f:9e:8f:71: d7:97:64:65:44:08:28:85:3e:37:bd:20:dc:c4:4b: ad:80:88:cf:44:70:e8:09:8a:9b:a1:ba:9a:65:e4: ba:f1:b2:22:79:b1:f0:c7:0e:a6:7e:78:dc:b4:49: cd:42:e8:d2:c6:1e:6d:ef:9d:f8:14:65:73:12:35: 31:5a:47:3b:bc:c4:21:5c:d2:dd:a1:92:ea:e4:26: 03:72:31:aa:fe:23:b2:11:b8:5a:85:6c:b4:4b:af: b7:ca:3f:a2:29:9f:45:35:08:ff:18:b7:88:ca:90: d1:45:98:66:64:2e:6d:bc:5d:b5:f6:ff:2d:de:94: 59:8b:66:bd:21:b2:1b:d5:b8:7f:5e:b7:66:96:68: 38:29:8d:20:c0:55:2b:f0:ae:af:04:4d:18:fb:8b: 83:a9:60:5a:79:81:98:28:46:d8:e5:f7:40:24:06: ac:0f:91:6f:75:32:f3:7f:70:12:37:a2:b0:73:0a: e6:50:f0:7b:cf:61:99:9d:ee:01:05:38:01:d2:59: 08:bc:8b:4d:34:e7:68:65:79:1c:78:19:24:0a:7d: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:64:8F:02:2F:33:D0:0C:8F:4F:FA:52:40:8B:04:24:F3:B7:5D:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afc63c49-c751-3ac1-81d5-43b3b14df8dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.6.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:5d:56:43:f6:c4:8c:e4:fb:22:e1:70:c2:6f:80:0f:9f:0d: 8f:d7:a4:ec:cc:7f:c8:39:39:81:4b:dc:7e:4b:ec:20:58:71: 24:cc:78:83:c7:57:58:ba:b8:e7:16:03:0c:f0:96:40:d7:3d: 2b:10:2e:f0:9f:03:39:7d:6e:12:13:96:e1:3b:3e:4c:84:9b: bf:27:7a:d6:9d:52:77:e9:8a:a8:fd:2b:83:50:0b:3e:6e:90: 90:8d:5b:10:2d:28:81:35:6f:ab:98:b2:0c:78:22:c5:9e:c7: a1:fc:00:23:e7:90:da:54:76:51:06:c0:73:69:4d:8e:62:cc: 25:73:05:c0:47:22:db:52:ed:87:30:97:01:d6:7d:28:38:a0: 79:81:e6:02:7e:56:b3:63:41:9a:ca:88:a4:14:b4:82:9f:04: 2e:83:f3:7c:32:e7:90:57:58:bf:d8:18:8d:b4:62:cd:d1:15: 35:13:f8:d7:89:8d:15:e3:62:e1:cb:4b:ae:41:8e:8a:76:03: 8d:de:5e:8b:c5:c6:39:43:7a:45:c7:b9:c8:68:94:f2:1c:ef: 43:e3:bd:d0:99:a0:f3:e1:52:8e:49:54:26:ad:3e:2a:cf:1a: 1a:d7:9b:71:37:ae:38:2a:be:8c:9e:77:34:46:45:17:7c:aa: 95:a2:23:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1uq3tFVNMF4gGc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDIyMzE1NDM0OVoXDTI2MDUyNDE0NDM0OVowLzEtMCsGA1UEAxMk YjA3YTAwNzktODYzMy00OTlhLTgxNTItZjkxNDU2Y2EyMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDlCrebWqwtJA2uUL97kDnJ5I3eNUCrEiNwz dSLvH+K1aTyHoWkE8H+ej3HXl2RlRAgohT43vSDcxEutgIjPRHDoCYqbobqaZeS6 8bIiebHwxw6mfnjctEnNQujSxh5t7534FGVzEjUxWkc7vMQhXNLdoZLq5CYDcjGq /iOyEbhahWy0S6+3yj+iKZ9FNQj/GLeIypDRRZhmZC5tvF219v8t3pRZi2a9IbIb 1bh/Xrdmlmg4KY0gwFUr8K6vBE0Y+4uDqWBaeYGYKEbY5fdAJAasD5FvdTLzf3AS N6KwcwrmUPB7z2GZne4BBTgB0lkIvItNNOdoZXkceBkkCn3DawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRkjwIvM9AMj0/6UkCLBCTzt13zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWZjNjNjNDktYzc1MS0z YWMxLTgxZDUtNDNiM2IxNGRmOGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlQbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1dVkP2xIzk+yLhcMJvgA+fDY/XpOzMf8g5OYFL3H5L7CBYcSTMeIPH V1i6uOcWAwzwlkDXPSsQLvCfAzl9bhITluE7PkyEm78netadUnfpiqj9K4NQCz5u kJCNWxAtKIE1b6uYsgx4IsWex6H8ACPnkNpUdlEGwHNpTY5izCVzBcBHIttS7Ycw lwHWfSg4oHmB5gJ+VrNjQZrKiKQUtIKfBC6D83wy55BXWL/YGI20Ys3RFTUT+NeJ jRXjYuHLS65Bjop2A43eXovFxjlDekXHucholPIc70PjvdCZoPPhUo5JVCatPirP GhrXm3E3rjgqvoyedzRGRRd8qpWiI3I= -----END CERTIFICATE-----Generated at Sun Mar 1 18:32:41 2026 by rpki-client