$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa File: 21975138-cf92-36b8-8d76-cc6b2ac602dd.roa (raw, json) Hash identifier: wB2k0YqwDgKPWlGEc8BZav1AmF7nRJXciZNA691ZfuU= Subject key identifier: B7:50:31:A9:08:06:71:3D:66:03:AF:8D:00:B2:D9:A0:F3:AA:A1:6C Certificate issuer: /CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Certificate serial: 010D0C9F4328584CF2BCFB8BA8393A0B36BA5580 Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 40401 IP address blocks: 149.137.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:fb:8b:a8:39:3a:0b:36:ba:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=4be02d3a-47d6-4891-b512-c8dc4c1fb90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:59:e3:ee:af:a5:a2:9d:05:61:8f:4b:ef: fc:62:19:c6:7f:02:38:88:13:88:34:e0:4a:5f:3a: ea:a4:71:5d:da:83:d0:7a:18:bd:2a:1f:8a:47:9a: 70:96:48:17:d4:08:32:4f:58:4a:51:62:e1:f9:af: 79:6e:ff:23:23:f7:b4:68:ef:e4:ce:32:85:f3:46: d8:72:4b:7a:6b:8e:2b:d7:21:98:2c:21:78:39:09: 7f:ac:81:ab:81:96:4a:0c:09:16:06:a1:17:ed:8a: b2:6a:6c:1a:7f:92:a1:aa:44:66:99:5f:46:42:64: b0:61:17:40:22:b9:9f:f4:d5:8e:c4:6b:ce:35:05: 7a:d9:f1:e3:35:8b:b5:aa:f3:4f:f5:a6:7d:f1:1a: 41:e1:39:6d:c8:35:d7:53:60:43:93:58:02:bb:70: 13:5b:7f:33:c7:d1:4e:09:30:62:f0:31:6f:17:2b: f4:2d:79:a8:f4:a1:b0:94:0c:07:c2:8a:7f:3f:eb: 65:b3:a2:f9:07:4f:7c:b5:7b:c3:d5:91:5f:20:65: ff:2b:bc:6f:75:be:00:08:9e:99:c4:a9:ca:24:11: 38:1c:5f:67:7d:a5:c8:98:a4:a4:7b:d1:a4:9f:2d: 85:dd:54:a3:12:17:b1:32:0a:c4:6c:19:b5:19:8b: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:50:31:A9:08:06:71:3D:66:03:AF:8D:00:B2:D9:A0:F3:AA:A1:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl X509v3 Authority Key Identifier: keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer sbgp-ipAddrBlock: critical IPv4: 149.137.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:de:06:56:b8:12:b2:f4:6c:0a:2c:36:35:27:bc:06:24:1a: 81:53:2a:d9:72:ac:2f:37:78:60:dc:0d:46:92:c0:62:17:71: 16:b9:23:88:f2:52:c3:0d:2f:f2:2c:e9:d6:8e:6f:a7:64:43: a3:72:75:e6:94:7b:d8:64:51:0f:44:c9:99:49:14:05:c7:44: b3:71:96:e2:39:90:53:62:0a:7c:4f:7d:b8:83:13:8a:2e:80: 6a:38:bc:93:9d:6e:c3:25:8d:23:d3:a6:93:5b:6e:c5:db:a3: 42:56:c5:f5:39:8a:21:9a:ce:93:9f:ae:64:4a:d4:d8:12:a3: 11:00:0f:75:a1:d6:12:77:a9:ec:69:cd:69:69:e4:3d:7e:25: e3:09:d6:5d:37:9c:2d:18:7b:1e:bc:71:19:14:e2:5b:3b:f7: 3c:55:20:59:b0:82:cd:31:e9:56:09:81:66:61:f0:39:2a:2c: c4:45:bd:fb:f6:e2:ef:35:89:22:dd:96:4e:0a:a2:4a:f2:9d: 5f:84:6b:d3:ec:47:c0:3b:97:4a:78:de:af:0c:e4:99:00:d3: 07:3b:46:66:fc:78:83:63:47:b9:a6:4e:c2:ed:55:c7:8b:1b: fe:14:d7:61:84:b0:0c:22:09:8b:fd:21:ed:cd:40:ce:c4:c9: cf:8b:0b:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvPuLqDk6Cza6VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll Mjg3MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk NGJlMDJkM2EtNDdkNi00ODkxLWI1MTItYzhkYzRjMWZiOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUtZ4+6vpaKdBWGPS+/8YhnGfwI4iBOINOBK XzrqpHFd2oPQehi9Kh+KR5pwlkgX1AgyT1hKUWLh+a95bv8jI/e0aO/kzjKF80bY ckt6a44r1yGYLCF4OQl/rIGrgZZKDAkWBqEX7Yqyamwaf5KhqkRmmV9GQmSwYRdA Irmf9NWOxGvONQV62fHjNYu1qvNP9aZ98RpB4TltyDXXU2BDk1gCu3ATW38zx9FO CTBi8DFvFyv0LXmo9KGwlAwHwop/P+tls6L5B098tXvD1ZFfIGX/K7xvdb4ACJ6Z xKnKJBE4HF9nfaXImKSke9Gkny2F3VSjEhexMgrEbBm1GYuvBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdQMakIBnE9ZgOvjQCy2aDzqqFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvMjE5NzUxMzgtY2Y5Mi0z NmI4LThkNzYtY2M2YjJhYzYwMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5 ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz YTQyOWUyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElYmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILeBla4ErL0bAosNjUnvAYkGoFTKtlyrC83eGDcDUaSwGIXcRa5I4jy UsMNL/Is6daOb6dkQ6NydeaUe9hkUQ9EyZlJFAXHRLNxluI5kFNiCnxPfbiDE4ou gGo4vJOdbsMljSPTppNbbsXbo0JWxfU5iiGazpOfrmRK1NgSoxEAD3Wh1hJ3qexp zWlp5D1+JeMJ1l03nC0Yex68cRkU4ls79zxVIFmwgs0x6VYJgWZh8DkqLMRFvfv2 4u81iSLdlk4KokrynV+Ea9PsR8A7l0p43q8M5JkA0wc7Rmb8eINjR7mmTsLtVceL G/4U12GEsAwiCYv9Ie3NQM7Eyc+LC7w= -----END CERTIFICATE-----Generated at Mon Mar 2 13:22:07 2026 by rpki-client