$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa File: 2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa (raw, json) Hash identifier: vmbcVqC5zUSknwJ6XrY6XMycCFmHPP1SZ2XTLQbm51c= Subject key identifier: 95:2A:B8:38:4C:1F:D3:9C:D9:4C:31:89:A7:08:EC:01:9B:0C:07:13 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584F7A4D8E0CD002479BD39A0D80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 149.20.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:8e:0c:d0:02:47:9b:d3:9a:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=d25b7cd9-ac8a-4d89-adcb-669d00faee6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:ca:a5:78:a3:3d:0e:7c:df:09:41:3c:c1: ba:15:ce:91:95:87:d4:8c:be:16:26:c5:5a:df:e6: b6:70:0d:a4:06:eb:55:d9:a4:02:c0:41:3b:e0:7f: 61:de:b1:57:c4:ff:91:a4:5a:9d:92:7c:17:0f:42: 10:c6:94:d8:83:e7:04:f6:43:cd:62:b5:56:82:93: 8b:3c:f7:80:98:e2:61:f0:17:04:64:7e:ba:84:bc: d4:22:d2:6e:f0:12:3c:bd:f4:1d:77:db:46:f9:ff: de:59:84:cf:ef:6a:35:c9:59:8b:63:5f:c8:d5:7c: ef:fe:7c:ae:da:76:fd:f3:9e:38:a3:fe:da:fa:2e: 5e:98:71:c2:17:e1:13:06:1e:ed:c6:ff:ff:f9:2a: 26:ef:85:6e:4d:b4:9d:f9:9c:48:bc:c0:15:36:f7: aa:18:c0:fd:23:70:76:eb:dd:05:7c:0e:5b:fb:a9: 4f:37:ee:cb:db:f6:61:e8:71:af:d6:ff:6d:9a:e1: 20:46:c1:ea:bb:e8:58:28:d2:48:15:4f:cb:f9:90: c4:6c:11:a7:03:7b:29:e6:8a:0f:8f:8f:c6:df:67: 55:c2:e0:11:fd:44:fd:19:2d:e9:e0:ad:37:c9:b7: 7d:86:24:e3:68:a9:20:0c:6b:8f:76:88:cd:de:7c: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2A:B8:38:4C:1F:D3:9C:D9:4C:31:89:A7:08:EC:01:9B:0C:07:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4e:b4:9a:bf:73:04:f4:af:93:42:77:9b:85:d8:3e:a4:cc: a4:89:6b:c5:11:ed:ad:ef:b5:d2:56:32:ce:cc:d3:38:45:3e: 6e:b8:6e:f4:fd:c4:fc:cc:be:de:7b:82:e9:c3:ae:b1:45:d7: 01:8e:8c:76:7c:87:5c:fa:12:51:9e:ec:d7:c3:41:b4:7c:7d: 68:16:c0:5a:25:67:b7:db:d3:58:b9:88:0f:a4:28:09:33:ab: 68:a0:f1:5e:20:ae:2d:51:08:1d:f5:f4:98:82:49:37:a0:c1: e3:a4:02:29:64:50:58:32:53:05:2f:55:f3:9f:ef:14:92:7b: b3:92:53:77:40:f1:94:98:56:dc:4f:c6:b7:ec:1d:2e:a8:ad: 33:8a:fa:b3:9a:eb:57:0a:3a:a8:fc:85:92:e9:23:b9:8c:39: 00:5e:87:4f:05:03:7a:3b:af:a5:f6:de:c1:30:89:79:d4:46: 4b:a4:ca:eb:4f:e3:42:c7:c0:c5:2b:05:c5:54:2e:52:7d:9c: 26:40:af:70:e7:54:8b:2d:cc:a1:34:b8:dd:e6:9e:06:b7:83: 23:77:79:f1:92:b7:43:d2:ea:e0:9b:d5:47:93:a1:3a:a4:c1: 43:8c:74:55:d1:da:df:e9:e6:af:98:17:06:5d:3f:cf:26:a8: aa:bc:26:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TY4M0AJHm9OaDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDI1YjdjZDktYWM4YS00ZDg5LWFkY2ItNjY5ZDAwZmFlZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1TKpXijPQ583wlBPMG6Fc6RlYfUjL4WJsVa 3+a2cA2kButV2aQCwEE74H9h3rFXxP+RpFqdknwXD0IQxpTYg+cE9kPNYrVWgpOL PPeAmOJh8BcEZH66hLzUItJu8BI8vfQdd9tG+f/eWYTP72o1yVmLY1/I1Xzv/nyu 2nb98544o/7a+i5emHHCF+ETBh7txv//+Som74VuTbSd+ZxIvMAVNveqGMD9I3B2 690FfA5b+6lPN+7L2/Zh6HGv1v9tmuEgRsHqu+hYKNJIFU/L+ZDEbBGnA3sp5ooP j4/G32dVwuAR/UT9GS3p4K03ybd9hiTjaKkgDGuPdojN3nxXRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUquDhMH9Oc2UwxiacI7AGbDAcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMmIxZjQ0YTQtYzg3Ni0z ZWNkLWI2YTYtMjM4OWYyNjEwZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1OtJq/cwT0r5NCd5uF2D6kzKSJa8UR7a3vtdJWMs7M0zhFPm64bvT9 xPzMvt57gunDrrFF1wGOjHZ8h1z6ElGe7NfDQbR8fWgWwFolZ7fb01i5iA+kKAkz q2ig8V4gri1RCB319JiCSTegweOkAilkUFgyUwUvVfOf7xSSe7OSU3dA8ZSYVtxP xrfsHS6orTOK+rOa61cKOqj8hZLpI7mMOQBeh08FA3o7r6X23sEwiXnURkukyutP 40LHwMUrBcVULlJ9nCZAr3DnVIstzKE0uN3mnga3gyN3efGSt0PS6uCb1UeToTqk wUOMdFXR2t/p5q+YFwZdP88mqKq8Jl8= -----END CERTIFICATE-----Generated at Wed Oct 14 23:26:39 2026 by rpki-client