$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa File: 43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa (raw, json) Hash identifier: Y1/1F+qpBpOdaShF6xF+5VsknM+tbQ9d5bDo1rblhrk= Subject key identifier: 55:19:B3:FD:99:92:06:05:F6:EF:7F:24:31:47:46:78:10:AC:13:76 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F506D5020FC7987F73D272640 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 64267 IP address blocks: 149.20.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:50:20:fc:79:87:f7:3d:27:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=82f8fc7d-1c77-4a5b-b511-9a04a4fc8749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:ae:63:1b:ba:a7:66:44:d0:19:0a:00:f7: 1f:7a:78:0d:a2:99:c9:7d:48:a9:18:f1:9a:4b:79: 7c:e1:e5:31:84:58:11:bf:22:4c:9f:3d:4f:ff:88: bd:d1:5d:48:06:af:0c:4b:60:66:06:7f:cd:83:f9: 46:3c:a2:a9:6f:ff:d6:e3:34:46:b9:11:b8:1f:b8: a5:06:c8:a4:c1:bb:2a:2c:26:24:73:fa:65:93:f0: 79:7a:c9:5e:01:18:73:bb:79:97:6d:80:7e:79:62: 03:88:05:7f:68:c3:e1:04:11:db:84:db:8c:56:fd: a5:fe:00:07:90:d1:0f:65:ba:00:f1:d0:67:26:d2: 01:ec:ff:1c:13:9b:38:07:b8:1d:97:60:be:bb:d4: ce:28:af:43:37:b0:77:33:1c:f7:61:a2:ea:67:44: 1a:0a:36:81:5a:93:f5:25:38:58:b5:0a:06:00:e7: 9d:84:a1:16:4a:16:f7:b0:c9:c6:d0:68:8d:46:50: 1d:63:0b:01:0b:07:30:a3:0e:f9:6d:d7:49:39:82: 83:4f:bc:05:a6:00:92:ae:b3:4a:bf:6c:19:ad:85: ba:2e:3a:ad:fc:19:37:44:81:a6:ba:a4:d1:b8:f6: 45:77:47:fc:f8:6a:a2:e4:f1:67:06:73:89:cf:3f: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:19:B3:FD:99:92:06:05:F6:EF:7F:24:31:47:46:78:10:AC:13:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:cd:0b:05:c3:1d:49:ad:ff:b4:7f:fc:b7:33:94:cd:a2:6d: 85:a0:5b:21:f1:db:3f:29:83:87:07:9f:12:42:f4:e6:09:6c: d2:17:01:43:14:7b:90:8e:60:b2:df:3b:68:ae:58:ac:33:0c: 29:73:48:95:c7:3d:bc:e3:e3:08:b2:be:92:45:8e:91:8a:ab: 08:c1:8d:74:27:2f:a6:88:8c:1b:22:0e:2a:49:33:03:9a:a6: e5:70:4e:88:0d:42:20:5a:ab:98:b9:43:28:66:16:8b:2b:66: cf:bd:be:ed:76:16:9a:6a:cd:11:4c:99:08:56:dc:bc:9b:56: 56:92:7d:52:dd:4c:7b:bf:74:e0:19:06:b9:93:d5:d8:48:84: eb:06:84:89:a2:31:b3:8e:7e:7a:08:49:24:64:ce:90:3f:e2: b2:d5:e7:ba:6b:e1:27:1d:70:31:4a:61:3f:81:0f:f0:78:a0: 7b:d0:ee:0f:97:f6:d2:b9:7b:93:47:ea:c8:49:15:43:77:d1: 2c:3b:93:a8:fb:65:08:b8:f9:17:0f:f1:cc:0c:60:75:12:cd: cc:8c:8b:5a:6f:11:85:ff:19:8a:32:07:ff:dc:a8:a6:68:e9: dc:bc:44:de:53:71:74:1d:23:e2:d7:97:dc:0a:c8:f7:18:8c: cb:0e:66:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVAg/HmH9z0nJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ODJmOGZjN2QtMWM3Ny00YTViLWI1MTEtOWEwNGE0ZmM4NzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCiuYxu6p2ZE0BkKAPcfengNopnJfUipGPGa S3l84eUxhFgRvyJMnz1P/4i90V1IBq8MS2BmBn/Ng/lGPKKpb//W4zRGuRG4H7il BsikwbsqLCYkc/plk/B5esleARhzu3mXbYB+eWIDiAV/aMPhBBHbhNuMVv2l/gAH kNEPZboA8dBnJtIB7P8cE5s4B7gdl2C+u9TOKK9DN7B3Mxz3YaLqZ0QaCjaBWpP1 JThYtQoGAOedhKEWShb3sMnG0GiNRlAdYwsBCwcwow75bddJOYKDT7wFpgCSrrNK v2wZrYW6Ljqt/Bk3RIGmuqTRuPZFd0f8+Gqi5PFnBnOJzz9t5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUZs/2ZkgYF9u9/JDFHRngQrBN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDNlMDkwNGUtYjNkZC0z OWI1LWE1ZjUtZTIzN2UzOGJiNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnNCwXDHUmt/7R//LczlM2ibYWgWyHx2z8pg4cHnxJC9OYJbNIXAUMU e5COYLLfO2iuWKwzDClzSJXHPbzj4wiyvpJFjpGKqwjBjXQnL6aIjBsiDipJMwOa puVwTogNQiBaq5i5QyhmFosrZs+9vu12FppqzRFMmQhW3LybVlaSfVLdTHu/dOAZ BrmT1dhIhOsGhImiMbOOfnoISSRkzpA/4rLV57pr4ScdcDFKYT+BD/B4oHvQ7g+X 9tK5e5NH6shJFUN30Sw7k6j7ZQi4+RcP8cwMYHUSzcyMi1pvEYX/GYoyB//cqKZo 6dy8RN5TcXQdI+LXl9wKyPcYjMsOZp0= -----END CERTIFICATE-----Generated at Sat Oct 24 20:48:02 2026 by rpki-client