$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa File: a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa (raw, json) Hash identifier: v5vWCJZVa3J046lOwiMetIe/spGXXvZfS9lUQi0xQlU= Subject key identifier: A4:04:8E:2C:F7:A0:68:52:02:93:9A:D7:95:2D:47:41:A8:C0:CA:43 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584EDC91E86186AE12719C395D80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 30132 IP address blocks: 149.20.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:e8:61:86:ae:12:71:9c:39:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=37b63e21-ba69-4682-806b-0d18126d5915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:8b:45:42:fa:7a:84:cd:b6:72:1e:af:25: cd:01:ff:a5:ba:9a:6e:ee:05:d0:75:ae:2a:1e:e5: 46:aa:19:60:b5:92:b5:06:83:f0:1b:2e:e7:4e:ac: 1f:b0:49:06:62:9c:64:b3:27:12:d0:d5:64:43:06: d9:36:3e:b2:93:28:3d:34:77:7d:7f:4a:c7:0d:04: df:5d:35:c5:c3:72:1b:cf:3c:55:c0:3b:ec:bb:ce: 92:69:74:36:08:b5:33:3d:6d:61:46:82:ff:ec:04: 6e:56:06:c9:dd:0d:82:c7:e6:bb:32:b4:5d:c7:c3: 08:2f:66:15:c1:d4:91:67:93:01:8a:d9:9f:47:ba: b9:f6:dd:b3:31:ec:e8:89:23:cc:94:5f:43:2f:b6: 2b:7d:39:ec:6a:b9:96:b7:a0:67:e1:57:dc:0a:14: 41:47:8c:54:42:ec:89:d9:9a:00:df:d2:f1:71:16: 5e:5e:cb:3a:fc:c0:71:6e:a9:4f:cc:0e:2d:2f:25: f4:cb:07:7b:4a:ca:10:f2:c2:0f:bd:64:ad:64:4b: cf:f9:4b:7a:79:e0:df:c3:d8:66:f1:17:2a:fe:e7: 10:de:6e:5f:e5:69:2d:66:b7:a4:7f:f0:b2:e1:a0: ab:b3:61:72:92:21:83:7c:db:c8:32:83:45:10:d5: 5d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:04:8E:2C:F7:A0:68:52:02:93:9A:D7:95:2D:47:41:A8:C0:CA:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e2:7a:55:7e:b1:66:16:a3:9a:fb:79:98:7c:0c:2f:2b:2f: 0c:e6:5a:f2:5d:d7:0e:4f:aa:79:47:bd:72:34:2d:75:ec:e0: c2:15:c8:f8:cf:7c:02:bf:71:77:39:a5:77:56:33:ee:30:db: fe:97:16:53:e1:9c:bb:37:66:12:fd:b3:68:a2:4d:cf:db:a1: ec:7d:56:7b:8a:8a:69:0e:e6:20:f3:0b:47:22:d8:72:9a:ea: 90:87:d5:49:e3:ad:8c:68:d8:17:fa:8a:49:15:ec:aa:91:d6: e2:8a:54:23:bd:d7:ef:88:29:55:b5:58:38:bc:8e:e3:e2:21: 68:40:67:1d:7a:61:8e:19:7e:d7:57:4a:3f:b3:36:b5:c7:a5: 0e:38:a7:23:e9:ef:d8:da:50:f8:c4:a7:cd:b1:6d:43:31:1d: 74:b8:c0:c3:d7:e9:1d:8c:ea:d5:36:ca:5d:42:f8:50:12:51: 40:59:c7:0e:6b:a9:22:79:2b:bd:62:25:a7:7d:4e:1d:0c:e9: 5d:a5:fe:eb:26:82:b9:11:0d:8b:b9:42:3e:24:cb:20:b4:34: aa:92:5f:5d:e7:87:2f:44:13:bc:63:a1:03:34:4d:de:cf:b5: 15:ec:e3:9f:a7:ee:b7:3a:b4:9c:98:6b:fd:45:5c:f5:5a:94: 8a:f5:43:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckehhhq4ScZw5XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MzdiNjNlMjEtYmE2OS00NjgyLTgwNmItMGQxODEyNmQ1OTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PuLRUL6eoTNtnIeryXNAf+luppu7gXQda4q HuVGqhlgtZK1BoPwGy7nTqwfsEkGYpxksycS0NVkQwbZNj6ykyg9NHd9f0rHDQTf XTXFw3IbzzxVwDvsu86SaXQ2CLUzPW1hRoL/7ARuVgbJ3Q2Cx+a7MrRdx8MIL2YV wdSRZ5MBitmfR7q59t2zMezoiSPMlF9DL7YrfTnsarmWt6Bn4VfcChRBR4xUQuyJ 2ZoA39LxcRZeXss6/MBxbqlPzA4tLyX0ywd7SsoQ8sIPvWStZEvP+Ut6eeDfw9hm 8Rcq/ucQ3m5f5WktZrekf/Cy4aCrs2FykiGDfNvIMoNFENVd7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQEjiz3oGhSApOa15UtR0GowMpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTRjYTg2Y2YtZmQ0Yy0z M2I3LTljNjUtNGQ0MTRhODQ4MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTielV+sWYWo5r7eZh8DC8rLwzmWvJd1w5PqnlHvXI0LXXs4MIVyPjP fAK/cXc5pXdWM+4w2/6XFlPhnLs3ZhL9s2iiTc/boex9VnuKimkO5iDzC0ci2HKa 6pCH1UnjrYxo2Bf6ikkV7KqR1uKKVCO91++IKVW1WDi8juPiIWhAZx16YY4ZftdX Sj+zNrXHpQ44pyPp79jaUPjEp82xbUMxHXS4wMPX6R2M6tU2yl1C+FASUUBZxw5r qSJ5K71iJad9Th0M6V2l/usmgrkRDYu5Qj4kyyC0NKqSX13nhy9EE7xjoQM0Td7P tRXs45+n7rc6tJyYa/1FXPValIr1Q98= -----END CERTIFICATE-----Generated at Sat Oct 10 15:58:27 2026 by rpki-client