$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d51f576c-1ac8-3978-82ff-a211593b08e3.roa File: d51f576c-1ac8-3978-82ff-a211593b08e3.roa (raw, json) Hash identifier: XcIQogt884ae2Lr7Rp4iuiKvh3GhoVZODP7u1lgvqQ8= Subject key identifier: F9:6E:AA:DF:D4:BF:62:E7:DA:FD:67:CB:FF:58:16:FA:78:CC:93:7F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584CB07D26B6F2BC3F256B080280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d51f576c-1ac8-3978-82ff-a211593b08e3.roa Signing time: Thu 29 Jan 2026 20:29:04 +0000 ROA not before: Thu 29 Jan 2026 20:29:04 +0000 ROA not after: Wed 29 Apr 2026 19:29:04 +0000 asID: 212087 IP address blocks: 149.71.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b0:7d:26:b6:f2:bc:3f:25:6b:08:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jan 29 20:29:04 2026 GMT Not After : Apr 29 19:29:04 2026 GMT Subject: CN=6643b8e7-2732-433f-bd09-1b827e1fbb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:36:c3:36:53:8b:49:8c:3a:77:b3:34:f2:9c: bf:0f:af:4c:54:1d:9a:66:27:54:97:74:8b:44:dc: 15:9d:49:15:a1:26:1d:78:03:e9:39:91:18:67:79: 9b:0f:fc:12:13:e9:1b:09:9b:9f:15:df:35:e0:11: 2d:96:7c:c9:e0:2f:98:aa:c2:77:6f:84:dc:ed:f6: c3:de:ca:5b:83:2e:f9:89:22:ae:32:39:e5:97:7e: e9:eb:99:c1:25:70:2d:d0:f8:20:26:fe:1e:47:d1: 27:bd:ae:39:7c:37:04:f5:13:e4:02:b5:0d:96:19: 30:d5:56:13:fd:45:3c:b6:bc:3c:c9:7f:fb:8c:2c: 4c:07:1d:c0:a4:a0:46:0f:d0:67:79:4d:ec:05:16: 22:41:47:5b:88:cf:98:a8:6e:a5:10:bc:4f:38:2a: 76:12:bc:9d:20:be:c1:66:03:c8:1e:dc:f0:6c:68: 35:0b:e6:83:63:53:f2:4a:bd:48:18:84:e4:16:b5: c4:fb:b0:66:aa:ba:d8:24:88:8c:58:93:cc:92:e3: 4d:74:76:3b:7d:44:45:37:4f:7b:5d:2b:eb:0f:af: 6d:d0:cc:f1:0d:13:be:d7:4d:98:42:04:54:d0:dc: be:39:9d:22:d1:64:63:c1:9a:05:ab:e9:43:b7:ad: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6E:AA:DF:D4:BF:62:E7:DA:FD:67:CB:FF:58:16:FA:78:CC:93:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d51f576c-1ac8-3978-82ff-a211593b08e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.71.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a1:7c:45:9e:a0:fc:53:ad:51:c1:be:8a:0f:ab:f2:99:01: 8c:71:fc:a7:d3:1d:7f:f7:96:7a:57:03:8f:32:e6:23:7e:42: 1d:c7:7d:e9:26:48:02:dc:a9:f7:78:c5:29:47:43:f8:8c:fa: 97:ea:f7:c1:1d:7f:28:a6:4e:bd:de:22:a4:74:4b:26:99:a0: 64:0a:ab:fe:a4:61:db:15:ab:e8:2d:6a:14:f9:03:b7:be:d2: 15:63:b8:9c:06:49:3c:63:7e:36:8a:2c:4d:c9:17:53:d9:3a: 20:aa:e6:7a:73:42:7f:88:18:3f:9a:70:51:11:ec:75:52:6c: 5c:e8:4c:d9:f4:8a:3d:01:25:2c:4a:d9:cc:63:51:8f:99:b3: 83:a0:a0:de:43:cc:0e:07:b7:d4:fe:36:da:b5:ea:0f:e8:64: 57:eb:2c:46:53:90:5f:44:de:03:01:03:7e:e5:30:01:d7:8d: 77:de:78:f9:0d:de:ef:d3:f8:5a:56:90:3e:56:6e:2c:36:ce: 27:4d:8c:29:f8:c6:71:c1:39:99:92:5e:9d:7e:fc:af:04:c5: bc:c1:4c:eb:01:78:fe:fc:29:16:ec:fc:7a:08:30:c6:38:01: 70:60:dd:c7:44:66:31:44:41:f3:dc:a0:c3:8d:4f:43:7b:cc: a0:c2:8d:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEywfSa28rw/JWsIAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDEyOTIwMjkwNFoXDTI2MDQyOTE5MjkwNFowLzEtMCsGA1UEAxMk NjY0M2I4ZTctMjczMi00MzNmLWJkMDktMWI4MjdlMWZiYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjbDNlOLSYw6d7M08py/D69MVB2aZidUl3SL RNwVnUkVoSYdeAPpOZEYZ3mbD/wSE+kbCZufFd814BEtlnzJ4C+YqsJ3b4Tc7fbD 3spbgy75iSKuMjnll37p65nBJXAt0PggJv4eR9Enva45fDcE9RPkArUNlhkw1VYT /UU8trw8yX/7jCxMBx3ApKBGD9BneU3sBRYiQUdbiM+YqG6lELxPOCp2ErydIL7B ZgPIHtzwbGg1C+aDY1PySr1IGITkFrXE+7BmqrrYJIiMWJPMkuNNdHY7fURFN097 XSvrD69t0MzxDRO+102YQgRU0Ny+OZ0i0WRjwZoFq+lDt60wnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPluqt/Uv2Ln2v1ny/9YFvp4zJN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDUxZjU3NmMtMWFjOC0z OTc4LTgyZmYtYTIxMTU5M2IwOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlUcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+hfEWeoPxTrVHBvooPq/KZAYxx/KfTHX/3lnpXA48y5iN+Qh3Hfekm SALcqfd4xSlHQ/iM+pfq98EdfyimTr3eIqR0SyaZoGQKq/6kYdsVq+gtahT5A7e+ 0hVjuJwGSTxjfjaKLE3JF1PZOiCq5npzQn+IGD+acFER7HVSbFzoTNn0ij0BJSxK 2cxjUY+Zs4OgoN5DzA4Ht9T+Ntq16g/oZFfrLEZTkF9E3gMBA37lMAHXjXfeePkN 3u/T+FpWkD5Wbiw2zidNjCn4xnHBOZmSXp1+/K8ExbzBTOsBeP78KRbs/HoIMMY4 AXBg3cdEZjFEQfPcoMONT0N7zKDCjdI= -----END CERTIFICATE-----Generated at Sun Mar 1 23:26:02 2026 by rpki-client