$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1b7eba2f-7375-388c-aa89-d907adaf73d5.roa File: 1b7eba2f-7375-388c-aa89-d907adaf73d5.roa (raw, json) Hash identifier: y+Os1XNEmeGW/nYjlHIqS+pLUj5nT3hWbiAp8tolJ00= Subject key identifier: 39:3E:E8:D0:2A:6D:5E:11:A2:1F:9F:7E:55:72:23:C8:C6:32:47:B8 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E35FF10CD6FC7C1172CCA8AE8 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1b7eba2f-7375-388c-aa89-d907adaf73d5.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 14618 IP address blocks: 149.20.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:10:cd:6f:c7:c1:17:2c:ca:8a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=acf02317-108b-4f49-b602-01db9bb3f87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:06:d8:4d:9a:01:8f:04:44:13:dc:4e:68: f5:75:a6:31:3c:b5:7b:22:b4:2e:cd:c0:0f:41:68: 98:e6:71:ae:63:22:fe:72:80:f2:8d:2a:bd:95:4c: 46:cc:d2:36:09:31:b4:6a:1e:67:b5:58:f6:b6:ef: fc:4e:84:d6:8d:41:e8:f6:e3:6e:10:08:17:17:f7: bd:2b:99:e2:3c:4d:3f:96:40:92:72:f6:49:3a:94: b4:89:6f:43:f9:69:c3:54:4c:9b:46:eb:4e:11:e6: ba:33:83:2a:eb:72:f1:0c:e6:34:5d:16:4d:85:46: e3:bf:83:05:46:a2:98:f7:68:e7:33:ef:ad:dd:74: 78:af:d5:3e:7c:bf:5a:68:21:8f:f8:65:f2:fc:39: f4:98:6d:16:d8:70:ab:2a:2d:35:82:ab:95:49:f2: f8:3d:31:aa:b3:07:27:1f:ef:35:ed:fb:eb:29:14: 6b:b0:e6:fc:3b:0a:e4:a7:fd:48:22:be:57:7d:c4: 6e:e6:89:69:5e:30:7b:ae:58:5f:1a:d4:d8:d4:fd: d7:1a:af:e9:4e:9b:21:c5:08:fe:62:f3:31:87:34: 3c:36:a2:6b:8c:21:ca:dd:89:f1:cc:fa:fb:de:54: e5:38:8b:2e:f4:e3:9b:48:ed:2e:2b:bb:c5:fd:74: ae:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3E:E8:D0:2A:6D:5E:11:A2:1F:9F:7E:55:72:23:C8:C6:32:47:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1b7eba2f-7375-388c-aa89-d907adaf73d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:67:3b:11:0a:63:da:22:3f:aa:5d:6e:a1:c6:46:d9:d6:8e: 7a:64:13:4f:33:65:65:55:8e:10:28:c5:bc:70:03:26:19:8d: 22:e7:eb:b0:1f:22:f4:c1:22:92:da:72:2f:0c:82:2f:e3:07: 46:a4:bf:86:15:69:57:76:f6:63:06:ab:b0:49:44:ff:1d:69: e8:2c:9b:c4:e0:ed:2a:ad:0a:ec:9a:62:00:d5:d2:90:c5:1d: b4:99:bf:28:cd:74:4a:dd:44:16:4d:86:54:ee:e1:31:1d:57: 13:89:83:4a:ef:7e:43:e8:7f:c7:af:47:47:6b:35:e0:2d:87: a5:e3:04:ec:27:b1:8a:ef:d9:0e:83:0e:eb:fe:f5:f3:0f:b4: 29:ec:a7:12:6b:0d:45:b3:c4:b4:3f:d8:9c:c2:7a:3d:88:70: a3:34:95:44:b8:aa:6e:97:d6:c1:e9:17:eb:8d:c3:26:63:4b: 3a:39:4f:d6:87:22:f9:0d:f8:05:14:56:a2:23:54:b2:40:1e: fc:bb:f5:26:0d:0a:98:42:78:7f:55:1f:e9:f3:20:96:62:80: 36:71:e7:7e:ad:00:08:5f:cb:19:17:48:86:68:4b:72:db:26: 8f:34:ba:73:5a:a7:48:27:b2:88:cf:30:fe:2e:7b:32:d2:f5: 21:c4:5a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/xDNb8fBFyzKiugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk YWNmMDIzMTctMTA4Yi00ZjQ5LWI2MDItMDFkYjliYjNmODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLYG2E2aAY8ERBPcTmj1daYxPLV7IrQuzcAP QWiY5nGuYyL+coDyjSq9lUxGzNI2CTG0ah5ntVj2tu/8ToTWjUHo9uNuEAgXF/e9 K5niPE0/lkCScvZJOpS0iW9D+WnDVEybRutOEea6M4Mq63LxDOY0XRZNhUbjv4MF RqKY92jnM++t3XR4r9U+fL9aaCGP+GXy/Dn0mG0W2HCrKi01gquVSfL4PTGqswcn H+817fvrKRRrsOb8Owrkp/1IIr5XfcRu5olpXjB7rlhfGtTY1P3XGq/pTpshxQj+ YvMxhzQ8NqJrjCHK3YnxzPr73lTlOIsu9OObSO0uK7vF/XSucQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk+6NAqbV4Roh+fflVyI8jGMke4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMWI3ZWJhMmYtNzM3NS0z ODhjLWFhODktZDkwN2FkYWY3M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdnOxEKY9oiP6pdbqHGRtnWjnpkE08zZWVVjhAoxbxwAyYZjSLn67Af IvTBIpLaci8Mgi/jB0akv4YVaVd29mMGq7BJRP8daegsm8Tg7SqtCuyaYgDV0pDF HbSZvyjNdErdRBZNhlTu4TEdVxOJg0rvfkPof8evR0drNeAth6XjBOwnsYrv2Q6D Duv+9fMPtCnspxJrDUWzxLQ/2JzCej2IcKM0lUS4qm6X1sHpF+uNwyZjSzo5T9aH IvkN+AUUVqIjVLJAHvy79SYNCphCeH9VH+nzIJZigDZx536tAAhfyxkXSIZoS3Lb Jo80unNap0gnsojPMP4uezLS9SHEWlM= -----END CERTIFICATE-----Generated at Wed Jul 1 11:41:35 2026 by rpki-client