$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa File: a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa (raw, json) Hash identifier: LITfmTu+6UEjRWxn6IObv8jmpJNPCYAfgeyhHD1QPLk= Subject key identifier: 6F:EC:C8:90:C7:F2:64:6C:32:8F:4C:7B:70:11:1A:41:D6:FE:00:52 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584D67DFBC705D38AD3EE466DC00 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 27471 IP address blocks: 168.149.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:bc:70:5d:38:ad:3e:e4:66:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=e894917e-562c-47dd-afd7-6c6ab8656a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e3:9a:ef:d5:f2:28:a4:06:f1:12:a9:b6:9a: 5f:02:58:87:35:48:67:2a:41:75:88:73:7e:43:d9: 62:76:62:02:66:13:7c:2f:b1:14:d7:6b:40:53:8c: 67:ce:e5:43:fe:ac:97:9f:c8:db:75:e6:ae:23:00: 92:1d:9b:65:46:fc:be:ba:45:17:01:f4:3f:97:ec: ed:44:bd:9c:d6:17:0c:1e:da:b1:10:b7:dd:57:9e: ba:5c:35:d3:c1:1c:c2:fe:db:ab:70:14:bf:93:53: d7:a5:95:ca:44:39:ec:a2:99:23:fc:cc:2e:10:eb: 32:32:af:8d:4f:3f:a4:42:0d:ab:88:fc:d3:d6:5a: 2a:a2:2c:ea:d9:88:a1:92:71:f3:38:1c:f8:21:a2: ca:5b:9a:d3:6b:ba:66:09:de:7a:34:5b:d0:01:fa: 45:37:dd:88:18:47:eb:ba:af:f9:b1:a0:1b:9b:0f: b6:80:24:d4:80:b0:1b:90:68:6a:92:46:64:d9:94: 7b:39:41:16:d5:cd:0b:83:b8:34:64:f7:81:9b:b4: 9a:bd:ed:c3:dc:25:a0:e4:e7:ce:d9:16:41:c0:0d: 4b:7d:8a:c4:06:93:50:f9:8b:cb:38:ff:cb:22:9e: ad:6f:0d:2c:42:34:d3:10:fd:e9:42:3b:2e:3f:4e: d1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EC:C8:90:C7:F2:64:6C:32:8F:4C:7B:70:11:1A:41:D6:FE:00:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 168.149.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:88:c3:c1:bb:ff:a3:21:af:2d:49:5c:c6:5e:43:5c:cc:21: c4:3a:48:aa:41:43:23:ba:be:cd:bb:58:ef:1f:90:4f:04:a3: 2a:6b:c4:38:64:84:c1:42:1f:b9:22:80:55:42:ab:fd:0f:22: c0:cf:8d:8e:fd:16:be:89:88:56:8d:60:82:72:12:73:57:5a: fc:6f:20:be:e4:63:85:6d:a6:9c:4d:19:3c:2c:db:d9:c2:34: 8e:19:b8:13:0a:22:40:77:32:5d:15:6e:54:91:dc:95:c7:cb: 4b:2e:59:2b:28:f8:10:26:d3:0a:d4:79:9e:35:94:0e:e4:ae: ec:e7:f8:fc:46:00:1e:0c:44:00:74:7a:02:95:f9:fd:27:26: 49:ed:72:7c:1f:54:76:7e:5b:46:6e:0a:db:bb:e0:b2:15:af: 18:e9:4c:8b:30:b6:c7:95:fc:7f:73:30:62:3d:7a:af:ac:2a: d7:3e:78:08:42:3e:ca:45:10:bb:6c:42:a5:79:40:ff:cd:14: 5a:9c:f3:b5:3e:44:31:0a:b0:7c:2d:11:8b:24:41:e3:1c:1c: e7:9e:5b:77:5c:76:39:da:81:70:5f:f2:c4:c1:3a:a9:8a:54: ac:30:00:50:04:ad:74:7f:b2:45:17:d3:e4:d8:b1:f4:9a:93: 28:e2:12:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37xwXTitPuRm3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZTg5NDkxN2UtNTYyYy00N2RkLWFmZDctNmM2YWI4NjU2YTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+Oa79XyKKQG8RKptppfAliHNUhnKkF1iHN+ Q9lidmICZhN8L7EU12tAU4xnzuVD/qyXn8jbdeauIwCSHZtlRvy+ukUXAfQ/l+zt RL2c1hcMHtqxELfdV566XDXTwRzC/turcBS/k1PXpZXKRDnsopkj/MwuEOsyMq+N Tz+kQg2riPzT1loqoizq2YihknHzOBz4IaLKW5rTa7pmCd56NFvQAfpFN92IGEfr uq/5saAbmw+2gCTUgLAbkGhqkkZk2ZR7OUEW1c0Lg7g0ZPeBm7Save3D3CWg5OfO 2RZBwA1LfYrEBpNQ+YvLOP/LIp6tbw0sQjTTEP3pQjsuP07RuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/syJDH8mRsMo9Me3ARGkHW/gBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYTkyMjllZTctYTE2ZS0z ZDNlLWI2ZGMtMjYxMDdiMTM0YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJWTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+Iw8G7/6Mhry1JXMZeQ1zMIcQ6SKpBQyO6vs27WO8fkE8EoyprxDhk hMFCH7kigFVCq/0PIsDPjY79Fr6JiFaNYIJyEnNXWvxvIL7kY4VtppxNGTws29nC NI4ZuBMKIkB3Ml0VblSR3JXHy0suWSso+BAm0wrUeZ41lA7kruzn+PxGAB4MRAB0 egKV+f0nJkntcnwfVHZ+W0ZuCtu74LIVrxjpTIswtseV/H9zMGI9eq+sKtc+eAhC PspFELtsQqV5QP/NFFqc87U+RDEKsHwtEYskQeMcHOeeW3dcdjnagXBf8sTBOqmK VKwwAFAErXR/skUX0+TYsfSakyjiEj4= -----END CERTIFICATE-----Generated at Fri Apr 17 18:24:26 2026 by rpki-client