$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa File: 2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa (raw, json) Hash identifier: NG7uEwPDoPCIaSjIqa3J2pF6iXs6hLWd9vTTNtrnW3o= Subject key identifier: 33:DF:1C:6E:BB:A3:5F:30:0E:DA:E5:F0:3D:37:BF:04:A6:9C:0F:E5 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584D55BA3BA6F58BC1663053E540 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 16509 IP address blocks: 149.20.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3b:a6:f5:8b:c1:66:30:53:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=ecbb2b79-3a35-4013-970d-0e4867ae3709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:99:96:a7:86:b9:e0:51:8e:bd:6b:9d:c9: 44:3a:51:24:8f:4c:84:f3:b6:db:9f:69:18:d4:b7: 23:22:4e:c2:f1:cc:7b:61:2c:28:17:ba:39:f7:ba: 28:f9:47:82:13:64:c3:3e:e2:26:e0:3b:09:ed:ab: 08:75:bc:fa:26:fe:6f:c0:f8:fc:29:ef:bf:fc:ac: 25:0d:b5:2b:11:70:90:07:8b:cd:3d:63:2d:9a:c6: 90:38:a2:48:6a:32:06:12:73:93:b6:97:e1:a4:27: aa:18:50:28:1f:22:43:89:15:e9:cc:27:b1:1f:7e: 4c:20:a7:ea:74:95:73:5e:ac:05:04:f5:45:d5:df: 34:51:0f:c0:1d:25:90:77:d1:b2:9c:49:45:76:ca: 75:69:61:21:ea:7d:88:e6:5a:71:22:85:a9:78:a6: 87:48:98:e6:d8:ec:9f:ea:3a:20:52:0d:4c:00:d6: ed:67:6d:6a:97:d6:56:31:01:0c:d8:e2:06:28:0c: 4f:05:d3:5c:60:65:6b:ff:07:ba:59:be:fe:cb:3e: 9b:9f:ed:92:9b:93:d2:7b:f6:8e:da:55:58:6e:c9: ab:c1:cc:76:43:e1:15:d8:36:83:3d:cd:8a:7c:c6: 54:0c:2b:ae:1d:73:c5:af:fb:5d:9f:c4:ec:2b:4e: 2e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DF:1C:6E:BB:A3:5F:30:0E:DA:E5:F0:3D:37:BF:04:A6:9C:0F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f1:65:1a:f1:bb:8d:83:86:22:2f:53:13:28:0c:31:78:64: 45:c9:b5:b2:43:7b:42:67:b7:43:4d:58:1a:a9:1b:34:80:3b: d7:a5:39:23:05:71:69:74:ef:89:f5:7b:74:5f:9d:0b:ab:a8: 54:1c:d6:31:e1:93:0c:ff:13:71:60:96:3e:39:64:1c:32:91: 0d:53:0f:f8:4e:01:09:b0:65:15:ef:dd:a5:16:9b:d1:22:a5: 7e:66:52:60:68:74:ea:8f:02:1f:40:71:9d:25:e3:ee:2d:73: 43:f8:5b:75:27:91:ca:d5:9d:c2:56:3f:93:9b:f7:ff:a9:72: d5:85:6e:5c:6c:45:7a:47:55:54:7f:43:03:fa:3b:75:64:5d: e8:8f:a4:7e:1e:46:d5:aa:66:7a:0a:42:34:07:e3:fe:52:3e: ba:00:6b:09:97:81:a4:1d:c2:12:db:7f:43:d0:f0:0f:c5:ef: 9c:4d:e8:15:41:9b:4c:29:cc:b5:df:4e:c2:2d:c8:e2:8b:1a: fe:bc:ca:fa:34:85:fd:a8:81:e1:6b:4a:e2:73:4f:e5:1e:92: 1c:07:92:07:dc:d5:a0:13:e7:49:62:a8:23:0e:c7:b1:96:c4: 36:e8:97:3e:61:c7:54:a8:11:1d:d2:c9:32:3b:ba:ac:67:d3: 9f:6f:7c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vujum9YvBZjBT5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZWNiYjJiNzktM2EzNS00MDEzLTk3MGQtMGU0ODY3YWUzNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilKZlqeGueBRjr1rnclEOlEkj0yE87bbn2kY 1LcjIk7C8cx7YSwoF7o597oo+UeCE2TDPuIm4DsJ7asIdbz6Jv5vwPj8Ke+//Kwl DbUrEXCQB4vNPWMtmsaQOKJIajIGEnOTtpfhpCeqGFAoHyJDiRXpzCexH35MIKfq dJVzXqwFBPVF1d80UQ/AHSWQd9GynElFdsp1aWEh6n2I5lpxIoWpeKaHSJjm2Oyf 6jogUg1MANbtZ21ql9ZWMQEM2OIGKAxPBdNcYGVr/we6Wb7+yz6bn+2Sm5PSe/aO 2lVYbsmrwcx2Q+EV2DaDPc2KfMZUDCuuHXPFr/tdn8TsK04uqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPfHG67o18wDtrl8D03vwSmnA/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMmIxZjQ0YTQtYzg3Ni0z ZWNkLWI2YTYtMjM4OWYyNjEwZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3xZRrxu42DhiIvUxMoDDF4ZEXJtbJDe0Jnt0NNWBqpGzSAO9elOSMF cWl074n1e3RfnQurqFQc1jHhkwz/E3Fglj45ZBwykQ1TD/hOAQmwZRXv3aUWm9Ei pX5mUmBodOqPAh9AcZ0l4+4tc0P4W3UnkcrVncJWP5Ob9/+pctWFblxsRXpHVVR/ QwP6O3VkXeiPpH4eRtWqZnoKQjQH4/5SProAawmXgaQdwhLbf0PQ8A/F75xN6BVB m0wpzLXfTsItyOKLGv68yvo0hf2ogeFrSuJzT+UekhwHkgfc1aAT50liqCMOx7GW xDbolz5hx1SoER3SyTI7uqxn059vfEk= -----END CERTIFICATE-----Generated at Fri Apr 17 19:57:53 2026 by rpki-client