$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa File: 800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa (raw, json) Hash identifier: Wx6dcB4oy3UHMiLOlKawAZZK9AKimc61fZPiYg1Nl/E= Subject key identifier: 34:59:25:D7:91:A6:81:F8:D8:A7:A2:4A:F5:DD:A3:61:BF:CC:CA:59 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584EA795215585AEE4F0132C0400 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 27321 IP address blocks: 149.20.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:21:55:85:ae:e4:f0:13:2c:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bc0f4617-3a03-4f81-85ce-8180dee93b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:ce:f7:43:b8:23:20:5a:1f:c6:0e:f9:5f: aa:67:ab:aa:12:77:14:e9:67:b0:ca:79:b7:2a:12: 9c:ab:ea:51:c6:7f:fa:8d:99:19:fc:16:fe:3d:ae: b4:05:a9:7f:5b:26:fa:7e:d2:c5:11:59:f3:41:b3: 7f:01:04:70:a3:86:b7:6f:7c:ce:ca:24:3d:ac:c2: a4:72:fd:8f:86:4b:f4:68:f6:53:75:20:84:3b:5b: 2c:ed:71:5e:25:db:96:e3:cb:e9:63:4c:0e:10:ed: 79:98:df:58:4c:b4:27:d1:ff:97:54:c8:67:26:13: 39:da:b8:85:15:d9:2a:15:cc:40:82:91:49:6e:93: 6e:c2:fa:44:c1:b2:d9:75:19:a9:ba:03:d5:b4:dd: 84:5c:03:94:29:3d:c3:d7:2c:12:cb:28:b0:94:9b: b8:9f:3b:c1:a0:06:73:8d:9a:4b:06:7a:9b:74:09: da:5a:0c:bb:8a:d4:77:20:d0:85:51:59:eb:0e:35: 9f:19:97:81:bb:22:f9:62:7c:59:19:25:3f:d8:19: 28:03:3e:d9:7e:49:9b:cb:93:ba:a7:ef:23:f6:82: c9:f8:f0:83:20:2c:cf:72:23:ad:3b:be:02:cd:c9: 00:e6:6e:bf:16:1c:92:3a:93:0d:48:c8:12:c6:37: b2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:59:25:D7:91:A6:81:F8:D8:A7:A2:4A:F5:DD:A3:61:BF:CC:CA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:23:3a:12:fc:b4:89:10:22:23:c3:8a:d2:3c:68:19:ff:e9: 18:e5:4c:de:71:54:30:16:96:62:e7:91:f6:49:de:a1:4c:39: 76:b4:a9:3f:eb:2a:dc:fb:3b:ee:6a:05:56:77:62:74:c7:ac: b8:a8:5a:31:9b:ab:f3:49:0f:ae:2e:ae:2d:4d:d1:ae:58:63: 30:e0:6f:84:98:54:03:61:f5:72:95:93:e3:12:67:62:0c:6f: 5f:e6:ba:a5:2f:81:4e:b3:9b:31:04:f2:14:37:27:8b:62:1b: 69:86:ab:63:02:b9:72:51:81:d1:64:9f:18:c4:dd:bb:9e:cf: 8e:1a:7a:1e:a1:be:ec:d0:4b:aa:a5:b6:09:cc:bb:ad:71:f1: a6:03:2c:5a:43:80:3a:24:a6:b5:6f:b9:b3:48:61:cc:3c:88: 18:2d:f9:4c:c1:52:d3:38:25:ce:da:58:93:53:31:bc:9a:33: a8:19:01:02:4f:cf:5d:a4:83:42:a8:fc:77:73:61:53:79:a9: d6:d2:6c:f1:79:5b:6c:55:da:93:76:68:ff:92:c5:9e:73:26: 5e:c7:a1:ca:b1:dd:ca:fe:b9:dd:a4:59:58:66:19:de:29:44: 5c:bf:b8:1c:41:53:af:58:a8:96:3b:1d:cb:fd:d2:f7:f3:95: 6b:68:3c:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlSFVha7k8BMsBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmMwZjQ2MTctM2EwMy00ZjgxLTg1Y2UtODE4MGRlZTkzYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYXO90O4IyBaH8YO+V+qZ6uqEncU6Wewynm3 KhKcq+pRxn/6jZkZ/Bb+Pa60Bal/Wyb6ftLFEVnzQbN/AQRwo4a3b3zOyiQ9rMKk cv2Phkv0aPZTdSCEO1ss7XFeJduW48vpY0wOEO15mN9YTLQn0f+XVMhnJhM52riF FdkqFcxAgpFJbpNuwvpEwbLZdRmpugPVtN2EXAOUKT3D1ywSyyiwlJu4nzvBoAZz jZpLBnqbdAnaWgy7itR3INCFUVnrDjWfGZeBuyL5YnxZGSU/2BkoAz7Zfkmby5O6 p+8j9oLJ+PCDICzPciOtO74CzckA5m6/FhySOpMNSMgSxjeyhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRZJdeRpoH42KeiSvXdo2G/zMpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODAwYzVmMmQtMWVmMi0z NTE5LThhODItMzMwM2QxZTBjMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMjOhL8tIkQIiPDitI8aBn/6RjlTN5xVDAWlmLnkfZJ3qFMOXa0qT/r Ktz7O+5qBVZ3YnTHrLioWjGbq/NJD64uri1N0a5YYzDgb4SYVANh9XKVk+MSZ2IM b1/muqUvgU6zmzEE8hQ3J4tiG2mGq2MCuXJRgdFknxjE3buez44aeh6hvuzQS6ql tgnMu61x8aYDLFpDgDokprVvubNIYcw8iBgt+UzBUtM4Jc7aWJNTMbyaM6gZAQJP z12kg0Ko/HdzYVN5qdbSbPF5W2xV2pN2aP+SxZ5zJl7Hocqx3cr+ud2kWVhmGd4p RFy/uBxBU69YqJY7Hcv90vfzlWtoPOs= -----END CERTIFICATE-----Generated at Wed Jul 29 09:10:05 2026 by rpki-client