$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa File: 3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa (raw, json) Hash identifier: gihalEp7K3nhZOxJfo3NxxvovU42PMzlX0EgIUONWic= Subject key identifier: 16:88:8F:BB:7A:3C:D0:94:0C:CF:EB:09:74:3A:CF:31:C2:41:E0:52 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E3A2F1D5B1EEBD23BCFBA4700 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 1280 IP address blocks: 149.20.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:1d:5b:1e:eb:d2:3b:cf:ba:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=28f67ddc-9a7f-4c0c-ba73-c8badd256175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:6d:fc:45:24:5f:2a:c1:bd:8e:98:f6:98: 08:46:6d:5a:f1:ba:34:69:d3:8a:3e:98:ec:9c:60: 1f:84:0a:e4:07:89:08:28:d1:82:0d:1a:6e:04:21: 32:5a:ed:52:8c:f1:86:2e:ec:cc:68:fe:d7:5e:cf: d3:cd:b0:b3:bd:e3:bf:68:59:e7:28:86:d7:8f:25: 0f:0a:f4:b6:15:39:5e:81:48:a3:9b:c1:66:eb:07: 64:df:88:cb:de:0e:ed:45:e6:9d:2d:0a:9b:d0:33: 98:ee:40:86:a9:c9:5e:51:bb:35:88:97:4e:dc:03: 40:af:25:db:c0:2d:28:41:8c:fc:03:02:f2:b7:10: 8d:2f:42:d8:2f:34:e5:71:eb:78:a0:46:41:dc:69: c5:7b:df:df:9a:37:de:f1:b8:51:83:a6:1c:61:6a: 8f:e7:a1:66:9e:cb:ba:8e:ca:df:58:8c:07:b0:e2: f5:88:c0:06:80:f7:25:a7:72:51:df:f0:fd:c4:0c: 0e:d3:23:f9:a7:cf:ae:df:cf:6a:2b:15:3b:78:da: 92:b0:2e:d2:1c:b5:38:71:e7:ba:46:11:30:ec:9e: fa:14:d9:55:d8:e9:e6:ac:cd:da:3c:12:45:f8:48: db:c0:33:cd:46:55:a1:a0:78:b6:95:93:a6:3a:03: 28:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:88:8F:BB:7A:3C:D0:94:0C:CF:EB:09:74:3A:CF:31:C2:41:E0:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:4c:97:78:c4:e9:3b:c2:f9:d0:f1:fe:f2:3e:2b:40:6b:4a: 54:13:da:74:b6:0e:ee:1a:a3:c0:81:10:12:79:b5:a0:bf:b8: 37:18:6b:eb:3b:22:c9:de:f5:23:bc:2b:cf:1f:ee:29:04:fe: 75:0c:3a:de:ff:22:f2:a2:b1:1b:93:34:08:47:f6:a6:b5:da: d8:72:63:d7:41:73:0a:81:ea:e5:51:78:a2:e9:08:a0:54:36: a1:95:c2:c4:89:26:34:39:25:a8:79:76:12:30:43:de:0b:c2: bb:46:95:4a:94:2a:57:0a:b1:a8:54:2a:28:52:34:47:52:7a: 7c:19:7c:69:36:69:b2:7b:5c:5b:2b:b1:d0:e7:8b:f4:8d:bf: e8:59:e3:18:96:4e:29:09:34:51:09:2b:46:5c:63:47:d6:f7: 1f:78:d7:a2:90:44:52:7b:20:88:f1:19:8b:93:d6:e3:e7:0a: f9:3e:6c:28:fd:e1:7d:f1:46:58:a8:8a:e6:3a:88:74:6f:cd: ca:df:90:55:62:92:52:46:0f:2f:a4:2e:91:93:1d:ea:8b:a9: 7b:2c:30:eb:28:cf:44:74:d2:ee:2e:e2:38:7f:bf:72:85:0d: f1:0a:71:b6:31:b1:4c:c8:07:47:d4:0b:57:b3:8f:85:a1:98: 6a:ea:e9:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lx1bHuvSO8+6RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk MjhmNjdkZGMtOWE3Zi00YzBjLWJhNzMtYzhiYWRkMjU2MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArktt/EUkXyrBvY6Y9pgIRm1a8bo0adOKPpjs nGAfhArkB4kIKNGCDRpuBCEyWu1SjPGGLuzMaP7XXs/TzbCzveO/aFnnKIbXjyUP CvS2FTlegUijm8Fm6wdk34jL3g7tReadLQqb0DOY7kCGqcleUbs1iJdO3ANAryXb wC0oQYz8AwLytxCNL0LYLzTlcet4oEZB3GnFe9/fmjfe8bhRg6YcYWqP56Fmnsu6 jsrfWIwHsOL1iMAGgPclp3JR3/D9xAwO0yP5p8+u389qKxU7eNqSsC7SHLU4cee6 RhEw7J76FNlV2OnmrM3aPBJF+EjbwDPNRlWhoHi2lZOmOgMoHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaIj7t6PNCUDM/rCXQ6zzHCQeBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvM2Q4YjQyYTMtZWFlNC0z ZmU2LWIzNjUtNmJmODg4ZGQ2NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClRRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItMl3jE6TvC+dDx/vI+K0BrSlQT2nS2Du4ao8CBEBJ5taC/uDcYa+s7 Isne9SO8K88f7ikE/nUMOt7/IvKisRuTNAhH9qa12thyY9dBcwqB6uVReKLpCKBU NqGVwsSJJjQ5Jah5dhIwQ94LwrtGlUqUKlcKsahUKihSNEdSenwZfGk2abJ7XFsr sdDni/SNv+hZ4xiWTikJNFEJK0ZcY0fW9x9416KQRFJ7IIjxGYuT1uPnCvk+bCj9 4X3xRlioiuY6iHRvzcrfkFViklJGDy+kLpGTHeqLqXssMOsoz0R00u4u4jh/v3KF DfEKcbYxsUzIB0fUC1ezj4WhmGrq6f4= -----END CERTIFICATE-----Generated at Wed Jul 1 09:29:04 2026 by rpki-client