$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa File: 43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa (raw, json) Hash identifier: VZGFTaWAvsNgM02rxo2lp5YjogCZAWVH63cdUq3sz8U= Subject key identifier: A3:84:96:FF:97:B8:90:C1:BB:3B:72:D4:3E:B6:54:F0:E6:9E:C6:9A Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584E0C1ED7AFB31A75BDD7B60100 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 64267 IP address blocks: 149.20.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:d7:af:b3:1a:75:bd:d7:b6:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=bb78452c-ed90-4f4f-89ca-2b49c919c4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:02:e1:7e:7f:e7:1d:89:9e:53:ee:9f:96: 9e:a1:c8:58:de:f7:e9:ad:35:c9:c2:06:25:d7:46: 77:0c:c0:47:c4:ce:c3:9f:e6:52:ab:c6:f2:82:3c: 84:b7:3a:50:47:83:2c:e7:a9:51:5a:a8:a3:60:9e: 7e:1d:d0:2b:b4:2d:2f:ea:ff:62:89:b8:b9:17:2e: 68:ba:8a:56:fd:81:ef:d6:70:30:5f:42:75:91:3a: b3:e7:03:2b:ff:9f:1d:51:57:8f:4b:62:f3:96:b2: ca:69:7a:2a:00:2a:be:e4:f1:bf:3e:6a:7c:96:e3: 03:ee:16:6a:b2:e0:b1:95:7a:87:19:4a:00:28:5a: e9:ba:7f:ac:70:bf:ab:ee:18:d2:44:2d:b7:70:36: 3a:c3:1c:fc:c0:c9:c0:6b:4d:a9:aa:45:5c:83:04: 2f:3c:a7:39:5c:28:a1:17:10:44:63:de:44:4c:88: 0e:e8:f2:e0:49:dc:4e:4d:7c:b9:92:96:51:d4:0f: 16:d9:79:c6:de:6f:47:cd:f8:2c:44:56:57:79:79: 6a:ba:9b:38:65:c1:6c:21:6d:a2:49:07:f8:ef:4a: 8f:74:40:fa:51:aa:96:81:bc:23:34:4e:aa:0f:d3: 90:fd:be:e9:84:23:b8:e9:b9:02:3e:d6:ae:7b:a8: 89:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:84:96:FF:97:B8:90:C1:BB:3B:72:D4:3E:B6:54:F0:E6:9E:C6:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:20:6a:be:72:d6:b2:10:1b:f2:a1:7d:98:eb:30:79:2e:45: 79:46:d2:32:05:c0:f1:98:4d:a8:d3:3b:04:b1:6f:91:42:3b: 77:4e:09:e5:06:bf:4b:18:37:f3:4f:9d:bf:14:f6:10:a3:80: 15:79:86:b5:5f:7e:26:fb:c9:a9:f8:f4:3e:ec:99:1f:93:07: f2:c5:ab:32:e8:37:a4:11:c8:97:59:f3:7e:d7:94:c6:36:e7: ab:38:dc:8c:40:ee:14:93:50:a5:a6:ab:c9:59:72:76:e4:a6: a5:b4:57:85:eb:82:10:cb:68:12:ef:1f:1f:1e:2c:ae:36:47: 9a:82:16:55:b0:ed:f7:3f:56:d3:77:79:b0:9b:bf:0a:fe:b0: 3e:a8:53:2f:60:96:f5:3e:8e:26:ff:da:f2:67:a2:f7:83:7d: d9:46:8a:88:fc:e8:a0:64:54:b1:39:bd:72:6b:c2:1b:68:02: 2d:72:a8:1f:d6:7a:c4:ea:1d:b7:3b:d5:44:3e:86:0e:80:c4: b5:a8:1f:6a:48:1e:cf:ae:39:79:27:73:04:ce:80:da:81:25: 20:a4:b7:e2:39:50:97:d3:a0:28:1b:15:e6:7f:64:46:a4:5f: 7e:6c:de:2b:e3:b3:13:78:d0:e0:c2:b8:8c:68:c4:e6:03:3a: 44:ba:e6:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtevsxp1vde2AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YmI3ODQ1MmMtZWQ5MC00ZjRmLTg5Y2EtMmI0OWM5MTljNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDgC4X5/5x2JnlPun5aeochY3vfprTXJwgYl 10Z3DMBHxM7Dn+ZSq8bygjyEtzpQR4Ms56lRWqijYJ5+HdArtC0v6v9iibi5Fy5o uopW/YHv1nAwX0J1kTqz5wMr/58dUVePS2LzlrLKaXoqACq+5PG/Pmp8luMD7hZq suCxlXqHGUoAKFrpun+scL+r7hjSRC23cDY6wxz8wMnAa02pqkVcgwQvPKc5XCih FxBEY95ETIgO6PLgSdxOTXy5kpZR1A8W2XnG3m9HzfgsRFZXeXlqups4ZcFsIW2i SQf470qPdED6UaqWgbwjNE6qD9OQ/b7phCO46bkCPtaue6iJkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOElv+XuJDBuzty1D62VPDmnsaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDNlMDkwNGUtYjNkZC0z OWI1LWE1ZjUtZTIzN2UzOGJiNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIgar5y1rIQG/KhfZjrMHkuRXlG0jIFwPGYTajTOwSxb5FCO3dOCeUG v0sYN/NPnb8U9hCjgBV5hrVffib7yan49D7smR+TB/LFqzLoN6QRyJdZ837XlMY2 56s43IxA7hSTUKWmq8lZcnbkpqW0V4XrghDLaBLvHx8eLK42R5qCFlWw7fc/VtN3 ebCbvwr+sD6oUy9glvU+jib/2vJnoveDfdlGioj86KBkVLE5vXJrwhtoAi1yqB/W esTqHbc71UQ+hg6AxLWoH2pIHs+uOXkncwTOgNqBJSCkt+I5UJfToCgbFeZ/ZEak X35s3ivjsxN40ODCuIxoxOYDOkS65o0= -----END CERTIFICATE-----Generated at Wed Jun 3 23:21:49 2026 by rpki-client