$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa File: a25873ed-8451-344c-af7e-66515db40f53.roa (raw, json) Hash identifier: 7GXkeg7m6sSSCVguJk1KaBnHK+2ArVUwBoCmCSsJris= Subject key identifier: 6C:39:60:1F:9F:FA:2D:AD:49:26:54:F0:EE:17:1A:5B:11:DD:68:62 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584CED2793C7F7C477FE7E43AF80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 30132 IP address blocks: 149.20.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:93:c7:f7:c4:77:fe:7e:43:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=b97aaee8-882b-4463-aff1-16c1c11e7514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6f:02:7b:c7:6f:3e:c2:e4:6a:9c:45:73:6f: fc:9d:b7:34:35:4b:44:0a:e3:4d:5e:4f:31:55:88: 18:03:4d:18:fe:a2:36:54:6e:93:51:4d:3f:dc:bf: 52:f7:49:3c:f2:b4:cb:19:6e:4f:ff:7c:34:00:8f: 0e:69:bc:5b:44:d0:6e:e4:8c:43:61:41:61:be:f6: 3b:6f:06:e5:8a:10:7f:1e:c8:90:ec:1c:07:ff:ca: 12:d4:ed:01:6a:b0:9a:a8:fe:11:9d:41:e8:5a:bf: 21:f6:be:9b:b8:01:0a:e5:0c:ae:d6:9f:a6:1b:62: f1:1e:c2:84:ce:47:4f:e9:f5:23:63:19:ee:99:19: 80:8e:72:32:eb:4e:a3:bb:e5:64:57:be:7a:4e:1f: d0:0c:41:9b:e7:7d:df:07:07:39:62:bc:44:a1:63: 9f:6e:ed:a4:0f:c0:06:70:96:81:c8:0b:0a:d6:d0: 7f:68:5e:e6:43:80:dc:30:e9:4d:b5:7d:64:ab:9c: f9:10:87:dc:2c:e6:d1:54:50:af:70:f3:03:51:86: 55:e6:1f:e3:c6:30:58:27:65:fc:67:16:4e:df:26: a3:e2:68:a8:8e:c5:b2:8d:17:f2:d2:41:c6:fd:6d: 75:92:66:01:24:35:4e:6d:38:76:97:31:77:df:ee: e3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:39:60:1F:9F:FA:2D:AD:49:26:54:F0:EE:17:1A:5B:11:DD:68:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:39:b6:0b:91:cd:26:40:e8:7a:0d:4a:74:14:50:d6:48:ed: 76:88:86:5d:3d:b6:51:6e:5f:ab:2a:bc:21:3c:41:0c:bc:81: e4:09:7d:17:e1:f9:4a:c8:8f:44:91:d0:e0:0e:5e:a2:28:a0: 23:b7:98:b2:10:cd:9a:bb:4f:2e:58:7e:e0:46:91:ae:46:71: 59:de:05:5d:d0:19:87:e5:77:e8:1d:ef:03:91:53:0d:f1:a8: d5:b2:c1:6f:c1:54:d4:b7:71:ad:99:b0:d4:82:0e:e0:22:89: d3:37:e6:5a:b1:62:4c:3c:3d:6e:3b:d2:a3:17:a7:5e:6e:e3: 6a:32:9e:c0:ce:d6:00:85:5b:64:65:a6:5d:b1:41:df:fe:b2: 09:d9:c2:75:be:d7:76:a3:64:ec:c0:df:d4:a5:3e:9c:e9:84: ee:a6:9f:ff:48:2f:22:a7:42:b8:38:cc:2d:0b:a4:9c:8d:b8: 99:47:c5:a1:75:43:e6:0a:3d:48:4a:d8:b6:48:1b:f6:73:58: e8:6b:a2:e0:49:06:c7:fc:5e:af:bf:c1:58:37:5b:82:d3:96: 95:10:e4:d0:c8:b9:de:58:d8:d6:f6:99:ea:02:ec:64:05:02: e9:70:e8:fd:95:59:4d:21:e1:9d:34:da:39:23:4a:c8:47:e0: 81:56:c7:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ5PH98R3/n5Dr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk Yjk3YWFlZTgtODgyYi00NDYzLWFmZjEtMTZjMWMxMWU3NTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk28Ce8dvPsLkapxFc2/8nbc0NUtECuNNXk8x VYgYA00Y/qI2VG6TUU0/3L9S90k88rTLGW5P/3w0AI8OabxbRNBu5IxDYUFhvvY7 bwblihB/HsiQ7BwH/8oS1O0BarCaqP4RnUHoWr8h9r6buAEK5Qyu1p+mG2LxHsKE zkdP6fUjYxnumRmAjnIy606ju+VkV756Th/QDEGb533fBwc5YrxEoWOfbu2kD8AG cJaByAsK1tB/aF7mQ4DcMOlNtX1kq5z5EIfcLObRVFCvcPMDUYZV5h/jxjBYJ2X8 ZxZO3yaj4miojsWyjRfy0kHG/W11kmYBJDVObTh2lzF33+7jnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGw5YB+f+i2tSSZU8O4XGlsR3WhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTI1ODczZWQtODQ1MS0z NDRjLWFmN2UtNjY1MTVkYjQwZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI5tguRzSZA6HoNSnQUUNZI7XaIhl09tlFuX6sqvCE8QQy8geQJfRfh +UrIj0SR0OAOXqIooCO3mLIQzZq7Ty5YfuBGka5GcVneBV3QGYfld+gd7wORUw3x qNWywW/BVNS3ca2ZsNSCDuAiidM35lqxYkw8PW470qMXp15u42oynsDO1gCFW2Rl pl2xQd/+sgnZwnW+13ajZOzA39SlPpzphO6mn/9ILyKnQrg4zC0LpJyNuJlHxaF1 Q+YKPUhK2LZIG/ZzWOhrouBJBsf8Xq+/wVg3W4LTlpUQ5NDIud5Y2Nb2meoC7GQF Aulw6P2VWU0h4Z002jkjSshH4IFWxxI= -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:13 2026 by rpki-client