$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa File: dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa (raw, json) Hash identifier: vWx9n93XmRWcgnRBOrxsWyKqHAh8wbh47dAZ8cSEv6E= Subject key identifier: 2B:1D:10:30:7A:3F:93:7F:C4:A9:5A:45:ED:50:96:47:50:75:D5:1C Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584F3A17D9F5A82F5867D0C0EF00 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 12213 IP address blocks: 149.137.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d9:f5:a8:2f:58:67:d0:c0:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=d182f069-5ff3-4226-9957-5727a85cbf19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:60:8d:25:aa:bd:ed:ff:72:36:d6:e5:f7:90: df:6f:3f:4e:4a:b3:49:53:52:fa:cc:8f:27:ae:71: 18:67:87:ae:e2:8c:2b:e3:a4:3f:8e:94:27:25:cd: a9:27:6d:7d:80:30:22:43:b8:60:4a:72:f4:62:6f: 93:9a:5d:79:ef:12:c3:e9:42:61:df:57:53:65:85: 71:e3:48:36:c4:9f:a0:a5:e6:52:97:62:ec:07:55: c1:d9:59:0a:7c:de:ba:73:bb:16:23:25:41:6b:29: 0b:31:c4:a4:56:5d:0c:35:00:10:43:8b:7c:02:0a: 47:37:ea:3f:3b:4e:95:e3:e3:2e:0d:a0:00:6e:de: 8f:c5:e1:c1:99:96:0f:5b:28:4c:0e:2f:73:d6:92: 14:c4:01:38:c0:9a:89:a3:89:51:e3:7c:0f:0b:dc: 0e:be:03:cf:23:04:94:eb:d3:b9:38:6b:ed:27:9a: 12:e4:9e:f1:0d:8e:3c:85:cf:f7:f4:e8:9a:ff:ed: 50:c8:b8:fd:f4:21:ff:25:44:02:ef:4a:e3:e1:5c: cc:03:01:0a:04:9d:64:9d:b1:19:06:33:be:b8:2a: 1d:db:95:64:f3:89:5e:8c:cf:c2:a7:b3:ae:6c:46: cf:cf:ce:44:f6:69:84:17:4b:53:81:b7:8f:72:d9: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1D:10:30:7A:3F:93:7F:C4:A9:5A:45:ED:50:96:47:50:75:D5:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 149.137.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:91:7a:dc:00:3d:84:6a:34:b3:3e:59:83:eb:e2:f9:7b:c0: 0a:01:7e:4e:5f:7a:4e:f5:30:1c:b8:9c:08:d0:a7:5e:0c:22: 75:91:5f:d4:1b:37:8c:0c:44:6d:79:39:bf:26:94:66:e1:3f: bb:15:3b:f6:2f:a5:c5:74:4c:36:95:62:06:33:e7:0f:37:b5: 62:3c:3b:0a:a3:14:2a:30:8e:52:b5:87:09:a5:ac:ee:97:d8: d1:f9:87:29:30:ef:d3:dc:19:7f:4d:70:3b:65:64:28:2f:94: d0:5c:29:7d:a1:11:a8:78:6c:9c:4e:ef:9e:00:e3:1e:2d:cd: 04:cf:d4:02:8c:44:85:32:25:0a:70:99:2a:a2:0e:77:51:ac: a6:ee:96:46:75:a6:4d:1b:7a:78:67:f2:f2:32:00:47:a1:b4: 33:64:26:4c:d6:a2:b6:93:64:98:d6:bc:15:45:8f:20:6d:ac: 32:e8:a5:00:06:9a:cc:ef:b4:12:d9:6e:36:69:07:85:ac:9b: 9a:50:1e:87:8a:8e:12:53:17:cb:8e:19:fa:a3:29:01:90:00: 5b:32:31:8a:4d:b9:e4:85:4e:ce:4e:37:03:63:67:e6:86:82: 98:13:8c:5b:d3:0d:8e:62:6c:0d:fc:7a:27:18:60:c4:36:bc: c0:8c:15:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9n1qC9YZ9DA7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZDE4MmYwNjktNWZmMy00MjI2LTk5NTctNTcyN2E4NWNiZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWCNJaq97f9yNtbl95Dfbz9OSrNJU1L6zI8n rnEYZ4eu4owr46Q/jpQnJc2pJ219gDAiQ7hgSnL0Ym+Tml157xLD6UJh31dTZYVx 40g2xJ+gpeZSl2LsB1XB2VkKfN66c7sWIyVBaykLMcSkVl0MNQAQQ4t8AgpHN+o/ O06V4+MuDaAAbt6PxeHBmZYPWyhMDi9z1pIUxAE4wJqJo4lR43wPC9wOvgPPIwSU 69O5OGvtJ5oS5J7xDY48hc/39Oia/+1QyLj99CH/JUQC70rj4VzMAwEKBJ1knbEZ BjO+uCod25Vk84lejM/Cp7OubEbPz85E9mmEF0tTgbePctlouwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsdEDB6P5N/xKlaRe1QlkdQddUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvZGM0M2U3YTgtYWI2Yy0z ZjQ3LWJhZWEtYTFlYWNkZmY0MmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlYngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWRetwAPYRqNLM+WYPr4vl7wAoBfk5fek71MBy4nAjQp14MInWRX9Qb N4wMRG15Ob8mlGbhP7sVO/YvpcV0TDaVYgYz5w83tWI8OwqjFCowjlK1hwmlrO6X 2NH5hykw79PcGX9NcDtlZCgvlNBcKX2hEah4bJxO754A4x4tzQTP1AKMRIUyJQpw mSqiDndRrKbulkZ1pk0benhn8vIyAEehtDNkJkzWoraTZJjWvBVFjyBtrDLopQAG mszvtBLZbjZpB4Wsm5pQHoeKjhJTF8uOGfqjKQGQAFsyMYpNueSFTs5ONwNjZ+aG gpgTjFvTDY5ibA38eicYYMQ2vMCMFZs= -----END CERTIFICATE-----Generated at Wed Sep 23 07:47:54 2026 by rpki-client