$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa File: a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa (raw, json) Hash identifier: z4uj0WU6UrF3SOP/Wrr9CnqBiYA2aZbWH954zMP68Mg= Subject key identifier: A0:E3:97:9A:C2:5C:E4:F7:4B:86:C0:54:6D:DC:35:01:7E:1A:15:95 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584D59EA4FC2452EFDCBD6816180 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 30132 IP address blocks: 149.20.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:4f:c2:45:2e:fd:cb:d6:81:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=2284fa72-023c-43bb-8917-bbfcf3eca906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:6b:f2:3c:14:8b:06:6f:a1:ce:1f:c4:49: 44:14:4e:5d:6b:16:23:75:18:06:c1:5c:a9:fc:1a: 79:19:45:fb:41:93:ff:6f:81:9b:26:6d:a8:44:33: 16:3d:93:d4:48:85:e8:09:fb:92:95:f0:d5:67:bd: f7:64:05:ed:15:4a:3c:af:dc:8e:2c:8a:41:c4:39: 22:30:f9:e7:c6:95:73:65:dd:96:fb:c2:5a:78:8c: d5:c2:ef:1e:1c:8e:7e:6d:c1:57:e1:27:4f:cd:e9: 26:76:77:8a:19:20:6b:01:aa:bb:4d:af:4f:f8:a3: 95:cc:9b:90:47:11:ec:dd:83:69:56:90:58:07:4c: 76:33:11:e8:63:02:b5:e9:55:59:db:f8:b0:dd:1e: 53:a0:a4:a2:a3:2d:f8:3c:18:34:0d:64:86:45:6b: 8d:7e:14:ae:19:ca:56:5f:39:22:4c:b7:c8:4b:97: 3c:6e:9a:b1:89:56:8a:b3:4e:3d:d1:18:60:9a:8f: e5:bf:e2:d5:40:86:8b:00:3a:bd:8a:5e:5d:eb:64: 97:a9:fd:b4:31:04:f9:92:b5:b5:86:86:44:67:09: 69:ec:3d:e6:b0:b6:42:b7:4d:11:b5:01:02:e3:bb: 52:0b:59:81:e3:28:73:0d:12:ef:47:4d:2a:07:b3: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E3:97:9A:C2:5C:E4:F7:4B:86:C0:54:6D:DC:35:01:7E:1A:15:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9b:b0:17:a2:d3:ed:78:c7:90:5e:07:e8:08:c6:4f:3b:49: 30:ba:b4:ce:62:5b:bc:17:a8:ee:74:cd:64:a5:16:90:18:64: ca:79:3e:fc:90:e6:09:94:02:e8:fb:15:fc:2a:6c:78:e6:b6: 5e:bb:80:2c:97:3e:20:0f:0f:5f:ed:13:11:48:06:8e:62:6b: 03:bd:0b:96:e0:99:90:27:99:aa:2a:01:83:74:49:53:aa:e9: 75:e8:25:66:2e:ed:ca:16:c3:0f:7f:c3:f7:49:d0:f4:3e:2f: ee:ed:6d:8d:7a:89:fb:9c:27:03:42:c2:fa:84:a8:84:2e:91: f9:97:6b:e7:56:d4:63:18:72:bf:72:ad:15:aa:c1:6f:5d:f7: 68:63:57:19:d8:03:56:f8:d5:ee:0c:4b:e7:ea:d3:d3:23:0b: 59:4b:00:d3:da:cf:4b:56:ac:34:8d:af:07:f9:c3:28:7b:0c: 25:6d:ee:ba:4e:82:68:90:6f:a9:34:58:7c:b2:01:3b:b2:d5: 22:0d:e5:fc:a7:0d:8c:97:1c:89:9f:62:64:e0:e5:86:10:6f: 6f:d4:b9:7c:d8:31:a9:b9:46:52:34:c0:77:3f:59:ee:c6:20: 6e:71:76:96:c8:db:3b:36:f4:cf:da:68:67:d1:2d:2d:8d:c1: 55:ef:74:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6k/CRS79y9aBYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MjI4NGZhNzItMDIzYy00M2JiLTg5MTctYmJmY2YzZWNhOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOlr8jwUiwZvoc4fxElEFE5daxYjdRgGwVyp /Bp5GUX7QZP/b4GbJm2oRDMWPZPUSIXoCfuSlfDVZ733ZAXtFUo8r9yOLIpBxDki MPnnxpVzZd2W+8JaeIzVwu8eHI5+bcFX4SdPzekmdneKGSBrAaq7Ta9P+KOVzJuQ RxHs3YNpVpBYB0x2MxHoYwK16VVZ2/iw3R5ToKSioy34PBg0DWSGRWuNfhSuGcpW XzkiTLfIS5c8bpqxiVaKs0490Rhgmo/lv+LVQIaLADq9il5d62SXqf20MQT5krW1 hoZEZwlp7D3msLZCt00RtQEC47tSC1mB4yhzDRLvR00qB7PfoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDjl5rCXOT3S4bAVG3cNQF+GhWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTRjYTg2Y2YtZmQ0Yy0z M2I3LTljNjUtNGQ0MTRhODQ4MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6bsBei0+14x5BeB+gIxk87STC6tM5iW7wXqO50zWSlFpAYZMp5PvyQ 5gmUAuj7FfwqbHjmtl67gCyXPiAPD1/tExFIBo5iawO9C5bgmZAnmaoqAYN0SVOq 6XXoJWYu7coWww9/w/dJ0PQ+L+7tbY16ifucJwNCwvqEqIQukfmXa+dW1GMYcr9y rRWqwW9d92hjVxnYA1b41e4MS+fq09MjC1lLANPaz0tWrDSNrwf5wyh7DCVt7rpO gmiQb6k0WHyyATuy1SIN5fynDYyXHImfYmTg5YYQb2/UuXzYMam5RlI0wHc/We7G IG5xdpbI2zs29M/aaGfRLS2NwVXvdAw= -----END CERTIFICATE-----Generated at Fri Apr 17 18:33:53 2026 by rpki-client