$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa File: 2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa (raw, json) Hash identifier: jRSmHhz/7Dz0wIGDmWEuwhWmngKRCMOGYwnGoh+WuGU= Subject key identifier: 4B:DB:36:A0:48:70:91:4E:D5:F7:C9:20:A3:03:D6:EC:55:74:B6:ED Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E35FF1350F4222F2542DDE280 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 149.20.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:13:50:f4:22:2f:25:42:dd:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=7d506b27-6794-4a76-889f-bcee7abcbb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:5f:cb:49:eb:be:7f:3e:15:90:ec:b1:e6: e1:75:09:23:81:8a:00:f1:0f:fb:a4:df:77:3e:1e: 43:96:91:80:c9:9f:c8:8d:f1:47:8a:c2:a2:a3:0f: fb:78:de:d1:0c:ff:a5:0d:26:6d:13:f2:d9:cd:c5: c7:27:ba:f4:ae:fb:41:5d:4b:7f:ac:e5:d8:ee:fe: 9b:a8:6f:34:1c:fc:5e:09:24:6c:f6:24:cf:6d:13: 87:0e:04:92:a9:e5:1a:2f:99:b7:d6:b7:0d:dc:e3: 4e:54:fc:42:71:a7:e5:cf:cc:eb:ee:8b:97:58:ae: 6d:88:6c:f9:fb:88:0b:c2:32:f9:d8:24:27:a6:22: 14:82:33:a8:57:60:59:a9:0d:d7:5e:55:2e:f0:7e: 3a:0e:e1:e8:06:c5:65:f4:6e:11:a7:01:c3:92:bf: 5c:6c:59:5f:96:ac:3d:c2:9d:f3:39:85:07:0a:bd: fa:98:49:4c:fb:be:ac:9e:63:08:34:36:99:02:d4: 52:3e:67:99:57:32:f2:e4:10:ab:05:d5:8c:2b:1d: 97:e5:42:37:7a:6e:31:a1:15:cd:34:0c:04:3d:16: 8a:47:0c:dd:1d:78:af:31:6a:46:eb:c1:49:b4:62: 8d:af:f0:3b:cd:ef:d2:a6:c1:75:56:0d:95:46:78: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DB:36:A0:48:70:91:4E:D5:F7:C9:20:A3:03:D6:EC:55:74:B6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:32:1d:d6:49:9b:7d:e3:99:6a:38:c4:eb:6a:55:3f:88:9e: 8a:64:4c:69:51:94:2a:53:7a:58:12:5e:6f:22:a9:56:0e:f9: 1a:9f:23:55:44:70:d1:a6:ce:06:de:73:7d:10:52:5b:b0:21: 87:ef:c7:d1:b6:2c:61:26:77:b2:20:71:65:6f:3b:30:08:d3: c4:cc:b1:17:63:ef:b8:70:c7:1f:63:b6:86:9c:a5:b7:b2:03: b5:ef:41:10:8f:7d:10:1a:75:9d:f6:85:2c:fe:e2:b4:73:01: 78:d3:10:4f:43:f6:6a:a0:a5:54:8a:25:57:b9:f4:62:a9:29: 49:c4:da:51:0c:59:39:19:1a:12:4c:b5:0f:06:e1:53:08:3a: 33:32:0b:27:22:04:08:ae:50:3e:15:20:a5:e4:d2:55:dc:c1: 0e:63:a2:38:8a:f6:69:33:3c:0d:6c:ac:ce:dd:09:e9:34:7a: 3d:93:b1:30:87:86:e5:15:14:86:c1:21:40:a5:98:7e:67:f8: 18:b8:43:d0:fd:10:78:f5:28:5b:ed:3c:e4:0a:27:a5:74:0b: 0d:5d:13:91:d1:e6:c0:7b:18:1c:64:38:61:a3:5a:0f:6a:7a: a4:f8:d1:44:ff:41:6c:06:4a:d3:a9:f4:1b:47:88:39:50:6a: 23:10:dc:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/xNQ9CIvJULd4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk N2Q1MDZiMjctNjc5NC00YTc2LTg4OWYtYmNlZTdhYmNiYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOlfy0nrvn8+FZDssebhdQkjgYoA8Q/7pN93 Ph5DlpGAyZ/IjfFHisKiow/7eN7RDP+lDSZtE/LZzcXHJ7r0rvtBXUt/rOXY7v6b qG80HPxeCSRs9iTPbROHDgSSqeUaL5m31rcN3ONOVPxCcaflz8zr7ouXWK5tiGz5 +4gLwjL52CQnpiIUgjOoV2BZqQ3XXlUu8H46DuHoBsVl9G4RpwHDkr9cbFlflqw9 wp3zOYUHCr36mElM+76snmMINDaZAtRSPmeZVzLy5BCrBdWMKx2X5UI3em4xoRXN NAwEPRaKRwzdHXivMWpG68FJtGKNr/A7ze/SpsF1Vg2VRngOywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvbNqBIcJFO1ffJIKMD1uxVdLbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMmIxZjQ0YTQtYzg3Ni0z ZWNkLWI2YTYtMjM4OWYyNjEwZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoyHdZJm33jmWo4xOtqVT+InopkTGlRlCpTelgSXm8iqVYO+RqfI1VE cNGmzgbec30QUluwIYfvx9G2LGEmd7IgcWVvOzAI08TMsRdj77hwxx9jtoacpbey A7XvQRCPfRAadZ32hSz+4rRzAXjTEE9D9mqgpVSKJVe59GKpKUnE2lEMWTkZGhJM tQ8G4VMIOjMyCyciBAiuUD4VIKXk0lXcwQ5jojiK9mkzPA1srM7dCek0ej2TsTCH huUVFIbBIUClmH5n+Bi4Q9D9EHj1KFvtPOQKJ6V0Cw1dE5HR5sB7GBxkOGGjWg9q eqT40UT/QWwGStOp9BtHiDlQaiMQ3AQ= -----END CERTIFICATE-----Generated at Wed Jul 1 11:40:16 2026 by rpki-client