$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/407cac4c-01f2-3442-8702-853696d03ba1.roa File: 407cac4c-01f2-3442-8702-853696d03ba1.roa (raw, json) Hash identifier: R3MHo93iauz70DJMtWj3nDWdPs9si1B8Y9V/4BHL53g= Subject key identifier: A8:D9:73:0B:99:01:78:61:F0:14:51:B9:B4:F3:2B:01:0E:38:09:04 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584F1C385F82CEB779B277EF5200 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/407cac4c-01f2-3442-8702-853696d03ba1.roa Signing time: Tue 08 Sep 2026 20:11:40 +0000 ROA not before: Tue 08 Sep 2026 20:11:40 +0000 ROA not after: Mon 07 Dec 2026 21:11:40 +0000 asID: 401577 IP address blocks: 149.137.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:38:5f:82:ce:b7:79:b2:77:ef:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Sep 8 20:11:40 2026 GMT Not After : Dec 7 21:11:40 2026 GMT Subject: CN=054be652-4424-44ec-b18f-f58b3a98ef99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:8d:c2:d3:a5:2f:96:1f:38:c3:ff:ba:fd: 2d:7b:17:19:bc:c5:da:1e:3e:02:5c:7b:38:04:1e: 11:b2:8e:01:c4:70:90:ba:c0:60:31:32:0f:ef:89: 90:86:79:3f:81:3a:b9:6d:3a:bb:50:76:17:9b:ba: 82:28:ed:47:d4:6a:66:dd:8f:8c:ed:ad:19:4f:a7: 2d:5f:00:dd:9d:2c:00:99:e8:22:db:b1:ad:b5:e3: 88:b7:ba:61:5e:7d:61:01:5a:98:7c:32:38:87:cb: a2:18:fb:14:d1:b9:06:e4:17:f9:73:f3:2c:f9:cd: 82:a8:9e:ce:44:ad:fe:a7:8a:61:ca:78:bd:26:63: 86:e1:6a:2d:38:87:a7:2b:39:81:c3:da:d4:7c:a3: 16:e4:7f:b9:9d:96:86:e6:a4:42:14:60:77:78:fe: bb:1d:eb:bf:f6:36:d3:37:8c:0a:88:3c:32:9f:9d: b7:81:d1:b3:8e:83:2c:0a:1e:db:25:57:59:15:e4: a3:ff:bc:d5:62:3a:39:67:5d:11:ae:e1:13:eb:00: 05:5c:56:04:3e:28:1c:d7:cf:54:23:dd:38:c7:79: 61:5e:6d:0f:1f:92:98:9e:a1:55:c4:35:b4:b9:ad: d9:50:de:58:1d:19:aa:ad:73:54:5b:39:5e:3f:49: 69:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D9:73:0B:99:01:78:61:F0:14:51:B9:B4:F3:2B:01:0E:38:09:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/407cac4c-01f2-3442-8702-853696d03ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 149.137.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:cd:7f:1d:eb:94:25:72:58:e5:84:77:7c:8d:5c:2f:e1:dc: 13:84:f0:28:8c:0b:80:90:fc:bf:46:2a:68:b3:a9:3d:be:d1: aa:8b:83:ed:4e:fe:19:a9:52:84:40:bc:a9:8b:c6:cb:97:43: 24:75:eb:d2:e3:7b:ba:08:94:4a:f2:e8:0b:2d:d3:bd:45:90: a4:f7:22:e4:4c:23:94:fb:8e:20:ea:0e:29:86:89:aa:4a:b2: 2e:66:b1:b0:7d:b6:4a:08:5d:6c:c6:1d:45:e7:ca:6c:c4:1c: 76:32:75:34:88:d4:cd:cc:19:50:e1:a5:bf:c8:07:33:c0:58: 06:6c:85:fa:8d:2d:4c:45:46:d8:bd:a8:62:ec:b3:04:ac:c3: 8d:db:71:dc:ac:f5:fd:f2:a7:03:dd:db:55:f8:0a:58:ad:26: ae:81:32:de:a2:42:2a:6e:08:82:0f:b5:58:f3:09:9f:a0:c8: 90:29:69:4f:f5:3b:c6:db:56:ae:de:73:ce:99:87:bc:dd:ce: bf:e6:59:ac:2a:ce:8e:81:7b:81:7c:3c:93:14:9f:9a:14:6e: 66:e8:31:e6:21:7b:23:c5:dd:9c:97:4f:f9:4f:41:91:5b:69: 3a:71:39:90:5d:e3:fc:1c:6d:1a:81:1a:2f:9f:f5:3f:1f:d8: 82:13:a0:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cOF+Czrd5snfvUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDkwODIwMTE0MFoXDTI2MTIwNzIxMTE0MFowLzEtMCsGA1UEAxMk MDU0YmU2NTItNDQyNC00NGVjLWIxOGYtZjU4YjNhOThlZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSqNwtOlL5YfOMP/uv0texcZvMXaHj4CXHs4 BB4Rso4BxHCQusBgMTIP74mQhnk/gTq5bTq7UHYXm7qCKO1H1Gpm3Y+M7a0ZT6ct XwDdnSwAmegi27GtteOIt7phXn1hAVqYfDI4h8uiGPsU0bkG5Bf5c/Ms+c2CqJ7O RK3+p4phyni9JmOG4WotOIenKzmBw9rUfKMW5H+5nZaG5qRCFGB3eP67Heu/9jbT N4wKiDwyn523gdGzjoMsCh7bJVdZFeSj/7zVYjo5Z10RruET6wAFXFYEPigc189U I904x3lhXm0PH5KYnqFVxDW0ua3ZUN5YHRmqrXNUWzleP0lpdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjZcwuZAXhh8BRRubTzKwEOOAkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvNDA3Y2FjNGMtMDFmMi0z NDQyLTg3MDItODUzNjk2ZDAzYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlYn9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzNfx3rlCVyWOWEd3yNXC/h3BOE8CiMC4CQ/L9GKmizqT2+0aqLg+1O /hmpUoRAvKmLxsuXQyR169Lje7oIlEry6Ast071FkKT3IuRMI5T7jiDqDimGiapK si5msbB9tkoIXWzGHUXnymzEHHYydTSI1M3MGVDhpb/IBzPAWAZshfqNLUxFRti9 qGLsswSsw43bcdys9f3ypwPd21X4ClitJq6BMt6iQipuCIIPtVjzCZ+gyJApaU/1 O8bbVq7ec86Zh7zdzr/mWawqzo6Be4F8PJMUn5oUbmboMeYheyPF3ZyXT/lPQZFb aTpxOZBd4/wcbRqBGi+f9T8f2IIToKI= -----END CERTIFICATE-----Generated at Sat Sep 26 16:50:09 2026 by rpki-client