$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa File: 9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa (raw, json) Hash identifier: kV1VdmQwG5CBX010SttO7ZJbdWtbvHsmyldJ3OBNk8U= Subject key identifier: 91:6F:5B:15:D3:89:DB:9A:30:99:9C:30:13:57:35:A2:57:2C:61:32 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584D59EA5A53EDC68A10F7C4F300 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 1280 IP address blocks: 149.20.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5a:53:ed:c6:8a:10:f7:c4:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=e025a592-71d8-4674-a4c6-0dae8295ddcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:23:4e:f7:19:57:7c:a2:f2:44:d0:db:dd:d8: 47:7f:6c:4d:dd:85:5e:86:9e:07:d2:b5:5b:a9:27: c7:77:3e:41:b1:44:71:9e:58:de:e9:1f:64:a2:12: 79:4f:00:65:13:d3:7a:19:a4:3b:38:96:2c:f0:86: 35:72:43:d8:6e:4b:bc:7d:03:d8:c7:dc:7a:17:af: f7:74:91:20:82:d2:54:44:dc:34:bc:b4:4c:9d:6f: 50:16:1c:c3:9e:d1:b3:ee:de:5f:e6:1f:a6:6c:f2: 2b:f0:0d:33:fa:51:28:92:44:7f:14:66:f4:6a:f6: e8:a7:27:a8:b2:de:ab:9a:f3:63:45:f3:b7:21:f2: f1:5b:d7:3a:d2:38:e8:95:7f:b9:ed:0e:01:53:ad: 9b:8e:a9:f8:d7:72:01:99:50:60:4f:f0:e3:3a:4b: 02:e1:35:8f:41:80:77:22:95:73:f2:80:0b:58:02: 68:36:d2:21:84:1f:dd:d5:8a:59:6c:e9:da:64:cd: a3:22:2b:ae:8b:65:46:ee:9a:86:bc:f5:f5:59:16: 8a:a5:8a:22:5c:56:92:d3:3f:22:06:9c:4c:6e:d0: cf:46:d5:16:ac:13:e9:4f:cd:e5:6b:e4:c8:86:78: ac:46:1b:4e:ea:39:fb:a7:81:ad:aa:c1:c0:94:03: 33:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6F:5B:15:D3:89:DB:9A:30:99:9C:30:13:57:35:A2:57:2C:61:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:70:c7:45:b3:d2:b8:c0:a0:20:93:63:c9:32:8c:2f:39:27: 98:31:66:62:3a:49:71:78:14:e4:80:6e:b6:81:ef:c4:a0:ad: 5c:02:7f:2d:fd:2a:50:41:df:f2:0c:cf:fd:fb:05:b8:19:e0: 5e:b4:6f:aa:9f:20:eb:ff:f5:35:46:2c:0e:75:2c:4d:6c:a8: 0e:01:cb:91:7b:6a:27:ff:a1:d1:d8:b6:4f:28:a2:c6:8d:af: 90:7e:7d:24:91:fc:13:d0:10:f0:cc:55:bd:ce:b6:4d:dc:d3: 30:ae:85:14:4e:bf:74:60:f4:c3:2c:6a:b6:9b:77:dd:28:9d: d2:bb:35:36:f7:bb:7d:06:9b:6c:86:8e:a7:bb:2e:42:62:4a: f6:45:61:5a:ea:72:1a:b6:ee:70:12:26:f2:75:70:bb:68:f6: 2a:00:09:b0:20:9b:70:fc:07:09:ac:76:b5:e1:88:ee:1b:91: c2:23:e6:b8:2a:5e:23:ef:2a:55:c8:3d:dc:e6:44:bf:a8:c6: b4:4f:19:89:78:3c:27:ef:f8:d7:58:55:13:aa:b4:e4:09:b6: 84:e3:3f:ee:17:32:0a:f2:5f:f1:7d:7a:52:0c:14:2c:e6:c9: 87:5e:c8:bd:2e:21:81:63:fd:66:bc:e6:60:b2:d8:76:b5:52: 01:12:09:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lpT7caKEPfE8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZTAyNWE1OTItNzFkOC00Njc0LWE0YzYtMGRhZTgyOTVkZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiNO9xlXfKLyRNDb3dhHf2xN3YVehp4H0rVb qSfHdz5BsURxnlje6R9kohJ5TwBlE9N6GaQ7OJYs8IY1ckPYbku8fQPYx9x6F6/3 dJEggtJURNw0vLRMnW9QFhzDntGz7t5f5h+mbPIr8A0z+lEokkR/FGb0avbopyeo st6rmvNjRfO3IfLxW9c60jjolX+57Q4BU62bjqn413IBmVBgT/DjOksC4TWPQYB3 IpVz8oALWAJoNtIhhB/d1YpZbOnaZM2jIiuui2VG7pqGvPX1WRaKpYoiXFaS0z8i BpxMbtDPRtUWrBPpT83la+TIhnisRhtO6jn7p4GtqsHAlAMz2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFvWxXTiduaMJmcMBNXNaJXLGEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvOWRiMGFkMzQtOWExMi0z YTg0LWE5MWItMmZkNmExODZkYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9wx0Wz0rjAoCCTY8kyjC85J5gxZmI6SXF4FOSAbraB78SgrVwCfy39 KlBB3/IMz/37BbgZ4F60b6qfIOv/9TVGLA51LE1sqA4By5F7aif/odHYtk8oosaN r5B+fSSR/BPQEPDMVb3Otk3c0zCuhRROv3Rg9MMsarabd90ondK7NTb3u30Gm2yG jqe7LkJiSvZFYVrqchq27nASJvJ1cLto9ioACbAgm3D8BwmsdrXhiO4bkcIj5rgq XiPvKlXIPdzmRL+oxrRPGYl4PCfv+NdYVROqtOQJtoTjP+4XMgryX/F9elIMFCzm yYdeyL0uIYFj/Wa85mCy2Ha1UgESCX4= -----END CERTIFICATE-----Generated at Fri Apr 17 02:01:39 2026 by rpki-client