$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7b4ab37-4412-3c1f-b952-5abd1e8db983.roa File: b7b4ab37-4412-3c1f-b952-5abd1e8db983.roa (raw, json) Hash identifier: X1WBiynXH/TqSUTiXJZXye4m+qnyXwZR+r9TZlW77VM= Subject key identifier: 22:E5:FC:DA:C9:58:51:B3:41:C4:E8:3A:7D:4A:EE:AC:71:15:F2:AC Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F5A32E8A95AEF089E92933760 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7b4ab37-4412-3c1f-b952-5abd1e8db983.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 20001 IP address blocks: 149.20.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:e8:a9:5a:ef:08:9e:92:93:37:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9f29df13-47c0-4f26-b178-b00beb221e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:63:0e:29:bd:3b:9a:30:50:c7:ef:7c:f6:c1: b5:5c:3c:8d:3c:ef:33:b7:a2:66:2f:f6:48:ff:aa: 4c:d0:4c:09:57:8d:30:d3:eb:88:35:4b:a8:07:6f: 09:65:6c:f1:cf:01:1d:15:7c:37:b9:b9:7c:15:57: a7:15:76:19:83:eb:cd:f6:da:98:c1:b1:af:6f:6d: 87:f9:28:53:91:b8:64:4c:c8:9a:84:d3:c8:21:9b: b1:da:16:f6:4d:44:b4:06:3f:32:1a:90:37:be:9d: a5:a8:48:0d:8a:93:cf:f9:b9:39:65:b6:90:4f:00: 88:4a:22:94:01:e6:12:f4:e7:e2:d8:a9:66:ec:61: b4:60:8e:4a:5b:61:79:c7:76:70:58:20:86:d0:26: 69:1f:a3:7d:07:5c:ed:8c:63:65:5c:5d:a7:12:9b: f4:44:c4:3d:6a:95:93:43:3a:7d:52:d9:20:69:6e: ae:1f:ec:7d:85:8a:8b:92:ce:2b:27:f2:4a:63:ed: 24:51:47:b1:f0:eb:62:fb:52:bb:79:68:c9:dc:72: 2b:6d:6a:4a:f9:01:73:1c:a6:a1:a6:8b:14:70:1a: 14:ff:84:0a:61:5b:09:e9:05:7f:f4:34:64:dd:c6: 3c:19:4b:79:4d:f3:5d:89:8b:f1:05:5e:86:a1:47: 08:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E5:FC:DA:C9:58:51:B3:41:C4:E8:3A:7D:4A:EE:AC:71:15:F2:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7b4ab37-4412-3c1f-b952-5abd1e8db983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:02:dd:19:7b:b5:d5:9b:62:c2:cd:71:f5:ac:93:60:f2:a4: d9:f0:16:8d:0b:fc:df:da:e8:65:ee:42:c9:76:87:43:79:72: 4f:49:f9:b9:85:3a:9b:43:9f:1e:fc:f7:44:df:11:09:b2:c6: 99:5e:1f:e8:18:75:cf:ce:b0:d7:86:58:39:45:b9:cc:ce:26: 79:8a:6a:82:16:c2:99:a3:c4:35:5d:27:19:04:b2:96:96:b8: d9:f6:a6:2f:b5:47:87:98:4f:9f:0f:07:0a:e5:d3:cf:0e:cc: 3c:b9:0f:9a:87:f7:98:35:ec:8e:c4:2e:b4:e8:20:71:49:b1: 05:38:c1:9c:bb:9e:66:54:21:f6:cf:95:6b:ca:cf:67:29:7b: af:2f:f6:28:a0:25:37:28:1d:05:99:74:e2:78:22:a4:47:30: dd:cf:6a:26:6c:6d:17:1a:01:80:2e:67:17:35:32:20:0d:1c: 89:bd:98:0c:d9:b6:35:0f:2b:d0:bc:5d:1f:98:93:da:4f:e0: 4f:af:20:fd:e6:71:34:02:96:49:2c:3a:b0:33:37:25:c8:b9: a8:49:be:df:b7:78:f7:09:31:3e:6c:54:82:ea:e8:4c:5f:a1: 3b:60:94:df:03:14:c4:7a:da:ff:44:4c:5b:5b:78:02:f2:6b: e1:a4:f7:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMuipWu8InpKTN2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OWYyOWRmMTMtNDdjMC00ZjI2LWIxNzgtYjAwYmViMjIxZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWMOKb07mjBQx+989sG1XDyNPO8zt6JmL/ZI /6pM0EwJV40w0+uINUuoB28JZWzxzwEdFXw3ubl8FVenFXYZg+vN9tqYwbGvb22H +ShTkbhkTMiahNPIIZux2hb2TUS0Bj8yGpA3vp2lqEgNipPP+bk5ZbaQTwCISiKU AeYS9Ofi2Klm7GG0YI5KW2F5x3ZwWCCG0CZpH6N9B1ztjGNlXF2nEpv0RMQ9apWT Qzp9UtkgaW6uH+x9hYqLks4rJ/JKY+0kUUex8Oti+1K7eWjJ3HIrbWpK+QFzHKah posUcBoU/4QKYVsJ6QV/9DRk3cY8GUt5TfNdiYvxBV6GoUcI6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLl/NrJWFGzQcToOn1K7qxxFfKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYjdiNGFiMzctNDQxMi0z YzFmLWI5NTItNWFiZDFlOGRiOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRTyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMMC3Rl7tdWbYsLNcfWsk2DypNnwFo0L/N/a6GXuQsl2h0N5ck9J+bmF OptDnx7890TfEQmyxpleH+gYdc/OsNeGWDlFuczOJnmKaoIWwpmjxDVdJxkEspaW uNn2pi+1R4eYT58PBwrl088OzDy5D5qH95g17I7ELrToIHFJsQU4wZy7nmZUIfbP lWvKz2cpe68v9iigJTcoHQWZdOJ4IqRHMN3PaiZsbRcaAYAuZxc1MiANHIm9mAzZ tjUPK9C8XR+Yk9pP4E+vIP3mcTQClkksOrAzNyXIuahJvt+3ePcJMT5sVILq6Exf oTtglN8DFMR62v9ETFtbeALya+Gk9wI= -----END CERTIFICATE-----Generated at Sun Oct 4 08:43:39 2026 by rpki-client