$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa File: 8578f51c-1b6a-3105-b746-5bdf914f63b4.roa (raw, json) Hash identifier: 9BCnx5EPzbnvbwjHOB4A9bgkT0fDDu6BdCiZrFuq+TE= Subject key identifier: 3D:03:F0:28:04:75:3D:09:A6:1C:FB:D5:A3:1D:E2:16:AC:65:3F:5B Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584F7E7DB138197FB0276B0B5F80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 1280 IP address blocks: 149.20.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:b1:38:19:7f:b0:27:6b:0b:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=9ef12e18-e174-4c85-bd3c-bbf8f26a3927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:30:24:72:1a:53:b6:10:e7:2e:dd:24:7a:61: 02:f9:e4:0b:18:8b:09:25:5a:78:48:04:9b:c5:39: ca:75:40:0d:3e:48:28:71:51:9a:60:06:8f:30:05: 9f:65:fc:29:5c:86:13:ba:55:c8:1f:48:02:00:1f: c4:dd:a8:f3:7a:0d:e2:82:0d:83:45:4b:c0:47:ba: 9b:a8:31:36:ad:d1:0c:6f:94:74:8c:d5:de:68:1c: 50:ff:c3:20:58:22:e0:a9:dc:e1:a5:13:00:19:0e: 19:52:02:d8:22:e8:62:dc:89:cf:ef:65:23:97:ef: 9e:ed:42:71:6b:65:87:de:f4:47:a2:c4:c5:48:7c: a1:c1:02:61:ff:ed:cf:f2:10:82:92:6b:23:a2:ad: 97:c4:74:6e:d8:ef:5a:dc:21:38:ad:82:36:57:25: 71:8f:b8:47:08:51:69:41:ca:46:2a:67:11:b8:2a: e9:10:4f:a6:89:3f:3c:db:c8:f2:a1:fc:0e:17:77: cd:19:06:ec:01:57:9c:e0:96:cc:26:61:2a:82:fd: 3a:23:a0:b8:46:65:c7:ff:26:55:e8:fe:79:1f:ba: 4c:5d:85:2e:02:e1:a1:00:a1:81:81:93:43:ba:06: 55:af:38:42:27:4e:50:d2:e0:63:3b:5f:de:8a:fa: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:03:F0:28:04:75:3D:09:A6:1C:FB:D5:A3:1D:E2:16:AC:65:3F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:a4:75:e3:3d:91:dc:a3:c8:6b:ef:b2:49:ff:45:1e:23:16: 2b:8e:e6:c1:18:b9:09:d0:5e:38:00:77:1f:1d:e5:b4:87:07: 1d:3d:c8:50:15:8a:6c:46:21:0a:d0:86:e3:f5:b9:65:5d:c1: 83:57:75:d5:e2:83:86:5c:62:ec:8c:c5:32:57:ec:09:c6:f9: 7d:ae:49:96:bd:f3:21:43:18:29:28:7b:47:92:fe:05:44:3d: 01:98:37:f6:85:cd:24:87:5a:be:7e:70:28:fb:ac:f2:9e:d5: 36:46:b1:8e:d8:2c:58:b5:9b:5a:f2:5d:19:26:6f:2c:d3:a9: fe:5c:92:ed:2f:1d:06:27:e6:bd:54:d7:42:56:cf:b4:cd:8a: 45:78:e9:af:a1:65:b7:d6:79:6c:1e:14:31:41:81:1e:c0:a7: 3d:87:50:2e:88:64:ff:fc:53:59:32:23:c2:2b:6f:34:ba:66: b1:c8:a1:14:40:43:f3:18:e0:23:57:13:bb:6a:c8:3f:33:e6: a8:6c:d8:ab:42:d8:da:1e:61:47:85:39:2c:a6:30:ee:97:ff: 5d:c8:4c:4f:8d:2d:c9:88:a9:38:6c:86:0e:83:bb:54:57:4b: 20:02:73:d8:76:4d:b1:90:8e:19:94:8f:27:de:99:a7:fe:f6: 32:56:96:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fbE4GX+wJ2sLX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk OWVmMTJlMTgtZTE3NC00Yzg1LWJkM2MtYmJmOGYyNmEzOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDAkchpTthDnLt0kemEC+eQLGIsJJVp4SASb xTnKdUANPkgocVGaYAaPMAWfZfwpXIYTulXIH0gCAB/E3ajzeg3igg2DRUvAR7qb qDE2rdEMb5R0jNXeaBxQ/8MgWCLgqdzhpRMAGQ4ZUgLYIuhi3InP72Ujl++e7UJx a2WH3vRHosTFSHyhwQJh/+3P8hCCkmsjoq2XxHRu2O9a3CE4rYI2VyVxj7hHCFFp QcpGKmcRuCrpEE+miT8828jyofwOF3fNGQbsAVec4JbMJmEqgv06I6C4RmXH/yZV 6P55H7pMXYUuAuGhAKGBgZNDugZVrzhCJ05Q0uBjO1/eivpmiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0D8CgEdT0Jphz71aMd4hasZT9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODU3OGY1MWMtMWI2YS0z MTA1LWI3NDYtNWJkZjkxNGY2M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCkdeM9kdyjyGvvskn/RR4jFiuO5sEYuQnQXjgAdx8d5bSHBx09yFAV imxGIQrQhuP1uWVdwYNXddXig4ZcYuyMxTJX7AnG+X2uSZa98yFDGCkoe0eS/gVE PQGYN/aFzSSHWr5+cCj7rPKe1TZGsY7YLFi1m1ryXRkmbyzTqf5cku0vHQYn5r1U 10JWz7TNikV46a+hZbfWeWweFDFBgR7Apz2HUC6IZP/8U1kyI8IrbzS6ZrHIoRRA Q/MY4CNXE7tqyD8z5qhs2KtC2NoeYUeFOSymMO6X/13ITE+NLcmIqThshg6Du1RX SyACc9h2TbGQjhmUjyfemaf+9jJWli4= -----END CERTIFICATE-----Generated at Wed Oct 14 21:23:55 2026 by rpki-client