$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa File: fd1f75bb-b322-31d2-97d8-2837137ee140.roa (raw, json) Hash identifier: l1eE7mjxwbQ1L/V55Y28ZLjSHP+o/MaSFdKPXVK0RCk= Subject key identifier: 24:93:7C:45:B2:F7:53:67:9E:79:D1:DE:DB:41:B6:AF:72:7F:90:CB Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584D59EA577D859F926E764D8E80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 1280 IP address blocks: 149.20.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:57:7d:85:9f:92:6e:76:4d:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=b6801eae-fc33-4e40-ada2-109774a09b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:af:ce:77:9a:82:75:a1:7c:69:30:ea:00:a2: 5e:51:63:38:22:2e:fa:15:7a:6d:6a:5a:33:d6:a3: 75:62:f3:fa:6a:49:6a:29:dd:50:49:b0:b3:0f:8b: 23:2e:fd:12:26:e0:28:3a:90:5e:61:fd:4c:e6:be: 82:7e:36:4a:0d:14:2c:39:b0:79:5e:8b:2f:5d:a7: 0e:bc:75:20:2a:0f:de:02:66:28:33:8a:9f:8b:03: 95:61:09:7b:97:1e:07:c7:60:5d:a3:c4:48:83:c5: 7a:0d:54:79:f3:cd:40:c8:af:da:bb:e7:50:7c:62: 8b:0a:5c:30:c0:9d:74:e3:27:d2:dc:67:31:31:16: 13:52:1c:80:ae:a8:17:c4:8b:cf:38:7f:a0:d4:10: cc:1e:b7:2b:a3:f6:b8:6f:f7:bd:d9:a9:63:df:ee: 04:9a:b0:2e:0b:d7:8d:75:f2:d3:5f:74:99:ad:ae: 53:3a:88:0c:23:76:67:04:9a:25:4a:71:99:1a:81: c3:bb:c3:4b:da:c3:b3:9f:e8:55:bc:5d:3b:3b:8a: 8a:b3:60:ab:1e:b2:35:aa:6b:81:93:e7:60:0b:dc: 59:b9:ae:27:1b:82:7b:52:75:4b:cd:30:e0:a5:c4: 72:f2:03:3e:fc:ed:90:66:58:81:c2:3e:94:a6:56: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:93:7C:45:B2:F7:53:67:9E:79:D1:DE:DB:41:B6:AF:72:7F:90:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a3:7a:78:94:10:13:65:e4:64:36:97:72:02:d3:92:06:ed: f3:65:22:58:47:31:9f:ae:b3:a6:eb:8d:ad:ce:a9:a6:d6:da: 2a:90:30:29:81:49:19:f6:44:dd:f1:12:1f:37:8e:bd:9e:4a: e2:45:91:57:02:dc:4f:79:8d:4d:c5:39:6c:50:f5:aa:a0:72: 6c:42:ab:35:d5:70:db:b5:a3:1a:d5:2d:13:08:a6:40:e9:5c: 88:89:04:d4:80:2d:a9:8c:8c:38:e5:68:64:54:7a:d3:9e:fa: 4c:f7:c7:aa:a9:33:d1:c9:3a:69:e9:fc:17:ed:49:33:2e:a7: 9a:3b:ff:c0:2f:eb:f2:23:2a:01:f4:92:67:de:d3:ba:f4:40: c2:2b:d0:cd:f7:67:fc:05:d4:e8:a4:3a:39:81:64:30:a9:0a: cf:e3:6c:f0:c9:95:fc:aa:97:b4:b3:fd:16:ce:76:d4:27:34: da:24:66:29:d4:81:90:36:bd:5a:9c:3b:6a:03:4a:1a:99:ab: 69:f8:33:05:12:ce:d6:4f:60:94:a6:c5:47:23:be:49:53:e0: 07:86:a4:e6:04:25:07:09:36:0e:e0:6d:48:f1:45:34:69:83: 77:3c:8f:b1:b1:3e:e0:92:90:2c:d8:d2:fa:82:94:a9:25:5f: e7:0f:f2:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6ld9hZ+SbnZNjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YjY4MDFlYWUtZmMzMy00ZTQwLWFkYTItMTA5Nzc0YTA5YjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q/Od5qCdaF8aTDqAKJeUWM4Ii76FXptaloz 1qN1YvP6aklqKd1QSbCzD4sjLv0SJuAoOpBeYf1M5r6CfjZKDRQsObB5XosvXacO vHUgKg/eAmYoM4qfiwOVYQl7lx4Hx2Bdo8RIg8V6DVR5881AyK/au+dQfGKLClww wJ104yfS3GcxMRYTUhyArqgXxIvPOH+g1BDMHrcro/a4b/e92alj3+4EmrAuC9eN dfLTX3SZra5TOogMI3ZnBJolSnGZGoHDu8NL2sOzn+hVvF07O4qKs2CrHrI1qmuB k+dgC9xZua4nG4J7UnVLzTDgpcRy8gM+/O2QZliBwj6Uplad+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSTfEWy91NnnnnR3ttBtq9yf5DLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvZmQxZjc1YmItYjMyMi0z MWQyLTk3ZDgtMjgzNzEzN2VlMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2jeniUEBNl5GQ2l3IC05IG7fNlIlhHMZ+us6brja3OqabW2iqQMCmB SRn2RN3xEh83jr2eSuJFkVcC3E95jU3FOWxQ9aqgcmxCqzXVcNu1oxrVLRMIpkDp XIiJBNSALamMjDjlaGRUetOe+kz3x6qpM9HJOmnp/BftSTMup5o7/8Av6/IjKgH0 kmfe07r0QMIr0M33Z/wF1OikOjmBZDCpCs/jbPDJlfyql7Sz/RbOdtQnNNokZinU gZA2vVqcO2oDShqZq2n4MwUSztZPYJSmxUcjvklT4AeGpOYEJQcJNg7gbUjxRTRp g3c8j7GxPuCSkCzY0vqClKklX+cP8l0= -----END CERTIFICATE-----Generated at Fri Apr 17 22:31:14 2026 by rpki-client