$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3ca3c550-517f-3ec2-8f5c-7462c111b151.roa File: 3ca3c550-517f-3ec2-8f5c-7462c111b151.roa (raw, json) Hash identifier: MS/otvLb+s4VLDMMo9+Q2vk09vFIa3+ChgB/Dk+pHxg= Subject key identifier: E2:98:46:53:EA:92:F5:C8:C4:A9:F2:E7:30:59:49:C1:91:9B:81:B3 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E35FF1112E087120C628EC000 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3ca3c550-517f-3ec2-8f5c-7462c111b151.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 1280 IP address blocks: 149.20.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:11:12:e0:87:12:0c:62:8e:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=45b13dd0-666e-47f5-9c45-ce6116d88fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:9d:fa:1f:2d:f5:fd:d2:16:46:28:d9:67: 37:f7:ee:fa:76:8c:e5:1c:0e:7f:1d:f3:6e:bd:eb: 37:82:8e:ec:13:45:f0:1a:7f:55:68:20:07:e7:9a: bc:1d:42:ee:05:d8:7d:bd:9b:32:01:7e:fa:89:da: 7a:8d:7e:d6:af:30:5f:6e:9c:1c:07:78:00:a1:ec: f2:6e:ae:49:2a:4e:9a:a8:0e:b3:29:4f:f0:13:aa: 26:24:f3:e4:46:93:c1:df:3a:cc:d4:7c:e6:61:2b: 24:f6:06:59:a7:5b:94:e4:17:82:0b:20:78:f1:77: e5:f8:77:41:fb:66:d3:94:02:35:93:21:89:c1:aa: 62:f5:56:78:5e:af:cb:d7:25:78:33:41:31:cd:df: a4:41:a4:0b:c7:d9:4b:17:79:f5:04:fb:ac:68:98: 8c:68:1c:d8:a0:df:2d:81:01:10:82:fd:83:b9:c9: bd:f6:7c:03:7d:a7:82:bb:28:f9:af:d7:ad:4a:22: 1a:5f:6e:fc:ed:30:78:ea:6e:6f:50:53:67:33:6c: 0b:13:7a:b1:81:2d:00:19:0e:39:0f:45:e3:6e:70: 80:31:5a:2a:f3:b4:e2:e1:4c:be:aa:eb:90:40:db: 94:93:a2:78:0a:7a:2d:1f:98:49:b2:22:53:ca:94: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:98:46:53:EA:92:F5:C8:C4:A9:F2:E7:30:59:49:C1:91:9B:81:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3ca3c550-517f-3ec2-8f5c-7462c111b151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:90:28:9e:cf:3f:45:fc:98:69:1e:3a:21:7c:0d:f2:79:b9: f6:ff:c1:63:c9:7a:16:36:e2:48:e9:16:d7:be:f5:61:d3:45: 3d:b2:dc:00:b6:fa:b5:e5:96:00:0d:c3:05:63:9d:52:fb:e3: 15:43:3d:f5:02:a8:7a:49:63:72:06:ca:bd:28:01:a0:be:df: bc:04:b0:73:af:5b:f3:83:b5:0a:0d:ab:35:f5:88:10:de:76: 08:55:8c:0f:7d:36:41:dc:af:70:8b:1b:47:89:00:7b:d1:21: f5:fb:e6:2a:17:ed:61:d5:05:61:e5:0f:ac:38:46:2c:92:4a: dc:54:c3:98:89:04:fb:49:17:4e:dd:68:d5:77:b6:ea:0a:56: 69:4a:4c:7a:32:e4:c1:26:dd:7d:69:93:c9:b6:b4:76:33:dd: ca:cf:9d:9b:be:c1:08:be:ef:90:ff:4e:b4:e0:c1:95:9f:8b: 7f:de:d5:41:5b:84:81:0e:48:0c:c0:68:3e:3a:2e:9d:98:c6: bb:97:0a:72:11:f0:17:50:fa:50:2e:82:cf:83:b2:f0:e3:70: e7:13:ef:af:25:13:13:ce:1f:b0:2a:83:cc:74:7c:de:c4:8e: 19:61:94:50:6a:f0:2b:a9:3e:ec:69:ef:4b:44:99:e9:c3:c3: 3c:ea:f6:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/xES4IcSDGKOwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk NDViMTNkZDAtNjY2ZS00N2Y1LTljNDUtY2U2MTE2ZDg4ZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Sd+h8t9f3SFkYo2Wc39+76dozlHA5/HfNu ves3go7sE0XwGn9VaCAH55q8HULuBdh9vZsyAX76idp6jX7WrzBfbpwcB3gAoezy bq5JKk6aqA6zKU/wE6omJPPkRpPB3zrM1HzmYSsk9gZZp1uU5BeCCyB48Xfl+HdB +2bTlAI1kyGJwapi9VZ4Xq/L1yV4M0Exzd+kQaQLx9lLF3n1BPusaJiMaBzYoN8t gQEQgv2Ducm99nwDfaeCuyj5r9etSiIaX2787TB46m5vUFNnM2wLE3qxgS0AGQ45 D0XjbnCAMVoq87Ti4Uy+quuQQNuUk6J4CnotH5hJsiJTypS0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKYRlPqkvXIxKny5zBZScGRm4GzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvM2NhM2M1NTAtNTE3Zi0z ZWMyLThmNWMtNzQ2MmMxMTFiMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOQKJ7PP0X8mGkeOiF8DfJ5ufb/wWPJehY24kjpFte+9WHTRT2y3AC2 +rXllgANwwVjnVL74xVDPfUCqHpJY3IGyr0oAaC+37wEsHOvW/ODtQoNqzX1iBDe dghVjA99NkHcr3CLG0eJAHvRIfX75ioX7WHVBWHlD6w4RiySStxUw5iJBPtJF07d aNV3tuoKVmlKTHoy5MEm3X1pk8m2tHYz3crPnZu+wQi+75D/TrTgwZWfi3/e1UFb hIEOSAzAaD46Lp2YxruXCnIR8BdQ+lAugs+DsvDjcOcT768lExPOH7Aqg8x0fN7E jhlhlFBq8CupPuxp70tEmenDwzzq9rM= -----END CERTIFICATE-----Generated at Wed Jul 1 09:29:42 2026 by rpki-client