$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa File: 1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa (raw, json) Hash identifier: 4LzWB9xmr5nR4/aCjHTyTjiAz8eAnfzt2myjIiXD8wA= Subject key identifier: D9:D5:B7:8D:5C:5F:0D:DB:B1:54:2E:EA:09:AA:E4:A8:81:08:AD:4F Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584D59EA4FD061093C8D2B114080 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 27321 IP address blocks: 149.20.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:4f:d0:61:09:3c:8d:2b:11:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=a0441a12-e39a-4698-b542-ab37ef9fa908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dc:8f:fe:f9:b2:80:ad:91:50:d1:ed:21:f2: 4f:55:58:d2:a9:f0:a4:f2:4e:37:6c:8b:8c:6f:a1: e3:de:c6:80:57:54:26:ba:73:e8:4a:a2:3e:cd:ef: 09:f0:2e:c9:c6:6e:97:46:36:74:52:40:33:7f:dc: 7e:ee:73:6c:bf:93:76:17:26:4e:9d:25:46:ba:43: 83:96:bf:cb:f7:a4:49:4f:4e:69:a8:eb:d5:27:58: 2a:5e:40:91:7b:ca:42:1f:fa:24:9e:9c:5d:d6:d8: 7e:8b:65:70:f1:7b:82:28:bd:0a:3c:fb:e8:e1:ae: 1a:00:d0:37:4f:5b:d5:e4:cd:50:ec:d7:9e:a6:74: 6c:a8:25:c9:a0:f0:e3:68:45:8b:6a:f1:f8:85:01: 48:08:e6:37:12:2a:10:fa:bc:0f:eb:ac:36:bd:45: 84:16:41:4f:1a:11:c4:f5:ea:e5:76:3b:49:66:a1: 6d:1e:d8:0f:ed:f0:ec:70:0e:89:87:f2:3f:b5:63: 3f:84:35:90:cc:b6:56:62:82:02:da:5c:6c:71:5a: 56:e6:e8:d5:de:5d:8b:6e:ea:ef:94:a6:1f:61:f6: 66:d1:0c:d8:65:d5:0c:e8:7c:f0:88:19:2e:e2:18: 34:76:44:3c:97:0d:23:df:4b:7d:8f:34:37:2b:ba: e4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D5:B7:8D:5C:5F:0D:DB:B1:54:2E:EA:09:AA:E4:A8:81:08:AD:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4a:ba:47:43:9b:8b:ba:11:ff:e9:a6:14:bc:80:6b:25:fe: 25:f4:be:a5:6f:48:29:be:63:af:03:32:aa:60:79:87:36:ea: 12:8c:88:b8:1f:72:b3:c0:23:4a:a3:01:11:2f:13:9d:31:77: b7:7c:80:44:65:87:54:a2:6f:3c:03:51:ba:9e:ee:40:34:e2: f4:c5:88:0a:fe:26:02:51:df:c7:96:1c:71:f0:e4:02:44:c6: 21:e4:5c:9e:80:c1:8c:00:3b:6f:a9:cf:2e:24:00:63:d8:05: 01:6c:e2:12:04:85:30:45:bc:83:24:02:25:52:f1:a8:9c:24: 81:63:d9:05:bb:be:46:09:72:37:c2:3a:71:89:a8:ae:7c:73: 88:bb:f9:14:0d:1e:d6:3c:2e:a4:b2:b1:49:ff:d8:99:ca:a4: 84:f2:55:40:23:7e:00:2c:d4:d3:23:be:b8:28:20:1a:44:3d: 6c:23:d4:60:e7:8a:7f:9f:1e:51:dc:f2:e3:20:3e:89:ca:89: 02:b9:93:f7:f8:b4:e6:bb:de:e8:7d:0b:72:49:14:7e:ac:c4: 1e:cc:d4:b7:be:05:ff:f6:68:3a:3b:93:66:a9:87:83:d4:f5: c4:cf:7f:c4:74:6b:55:49:74:dc:8d:15:3e:ac:4c:88:1c:8f: 81:af:94:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6k/QYQk8jSsRQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YTA0NDFhMTItZTM5YS00Njk4LWI1NDItYWIzN2VmOWZhOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAityP/vmygK2RUNHtIfJPVVjSqfCk8k43bIuM b6Hj3saAV1QmunPoSqI+ze8J8C7Jxm6XRjZ0UkAzf9x+7nNsv5N2FyZOnSVGukOD lr/L96RJT05pqOvVJ1gqXkCRe8pCH/oknpxd1th+i2Vw8XuCKL0KPPvo4a4aANA3 T1vV5M1Q7NeepnRsqCXJoPDjaEWLavH4hQFICOY3EioQ+rwP66w2vUWEFkFPGhHE 9erldjtJZqFtHtgP7fDscA6Jh/I/tWM/hDWQzLZWYoIC2lxscVpW5ujV3l2Lburv lKYfYfZm0QzYZdUM6HzwiBku4hg0dkQ8lw0j30t9jzQ3K7rkfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnVt41cXw3bsVQu6gmq5KiBCK1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMWNiYTQwZTktNjMzZS0z YmYwLWI3YjctNzkxYjZhYjk5Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZKukdDm4u6Ef/pphS8gGsl/iX0vqVvSCm+Y68DMqpgeYc26hKMiLgf crPAI0qjAREvE50xd7d8gERlh1SibzwDUbqe7kA04vTFiAr+JgJR38eWHHHw5AJE xiHkXJ6AwYwAO2+pzy4kAGPYBQFs4hIEhTBFvIMkAiVS8aicJIFj2QW7vkYJcjfC OnGJqK58c4i7+RQNHtY8LqSysUn/2JnKpITyVUAjfgAs1NMjvrgoIBpEPWwj1GDn in+fHlHc8uMgPonKiQK5k/f4tOa73uh9C3JJFH6sxB7M1Le+Bf/2aDo7k2aph4PU 9cTPf8R0a1VJdNyNFT6sTIgcj4GvlAE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:50:02 2026 by rpki-client