$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa File: 45d41f15-8492-3fc0-95d1-32224912a7f9.roa (raw, json) Hash identifier: KtPK8hqO8+YJ2ApzzH+mfTppqYQrkEE4+eTa0KfN010= Subject key identifier: 40:8A:7A:4D:EE:DA:35:2B:95:A6:B1:7C:EB:76:2E:6A:A6:48:B8:35 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E3A2F18258B7A6A567D3C6E00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 1280 IP address blocks: 149.20.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:18:25:8b:7a:6a:56:7d:3c:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=c0e79164-66c4-4969-921b-a8820963a682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:62:6a:d3:c9:2f:06:4a:ec:16:3f:b4:5b: 28:7c:7e:0c:2c:c4:a8:51:53:fd:aa:59:5e:4c:46: 9c:31:af:3d:84:53:1f:3c:63:1b:e2:4d:20:ee:ea: c0:f0:38:95:57:18:47:12:d6:6b:d9:de:50:5e:34: 40:c0:69:39:c8:c4:fc:03:0f:a2:7c:cb:d7:01:47: 26:1f:42:7f:07:33:ee:fa:b8:0a:fc:30:80:1c:a6: 70:33:2c:b0:67:49:85:2f:18:05:7e:96:9b:9c:19: 6b:4d:e1:3a:39:d3:1b:a9:20:ab:02:12:c9:3d:5e: 3a:f5:ae:01:3a:51:e7:bf:06:38:3b:b1:d8:da:46: a8:c9:d5:b7:23:2a:21:70:d1:fe:eb:d1:28:28:3f: db:59:fa:71:c1:0a:2d:e1:e5:ca:d4:af:9f:0c:b3: 31:3f:c8:90:9f:18:15:b4:94:76:af:c6:62:e8:d2: 51:bf:c0:7b:0c:50:7d:9d:59:20:2d:6d:79:e6:92: 5c:58:32:e0:36:40:37:0d:5f:df:19:9e:3d:c6:35: ed:da:8f:08:17:e9:d3:b9:2f:e2:b7:ba:c3:86:2d: 2e:18:7c:fb:3d:8d:72:a1:43:39:6b:13:c7:d0:09: 54:8d:3f:1f:22:4f:7e:5b:69:be:85:fb:a8:ee:19: de:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:7A:4D:EE:DA:35:2B:95:A6:B1:7C:EB:76:2E:6A:A6:48:B8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:65:00:99:5b:13:1d:26:41:f8:eb:36:c2:8c:9f:15:e0:b4: fa:ce:4d:42:e5:2e:e6:5e:c0:ea:c2:10:a9:00:38:0f:d7:c1: e1:94:0f:14:d4:9e:00:b3:be:d1:83:39:78:27:7e:99:b3:27: 03:da:09:b9:5d:94:13:0f:96:34:95:70:65:6e:d6:24:be:1e: 06:f6:51:56:3f:4c:1b:d6:50:e3:40:9a:5c:38:0b:d5:b7:fb: 7d:e6:c9:62:b2:5c:bf:88:f0:f1:9a:27:0d:c7:d9:ae:af:16: 3a:36:b4:48:62:99:5a:ad:a6:f0:23:64:b8:4c:ad:fd:32:6e: ea:06:44:ec:d2:4b:a7:e3:ca:63:ef:de:81:2a:18:dd:61:9b: d9:00:e2:76:a2:81:90:b3:6d:24:b8:45:ae:82:f3:32:e1:ac: ab:6d:94:91:0a:da:91:9f:ba:28:da:72:86:3f:48:cc:38:69: 2a:47:8b:1a:ec:57:1d:92:48:e1:f3:05:81:46:b0:d4:c8:41: 35:10:e1:e3:be:07:dd:13:b8:a4:c0:e2:e4:b2:5a:8c:21:30: 4b:70:50:2c:a4:9e:ad:00:b5:96:d6:f6:55:1f:97:b9:40:16: 89:64:66:42:50:6c:a1:4b:af:7f:a1:35:af:eb:fa:c1:5c:73: c7:c2:d6:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lxgli3pqVn08bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk YzBlNzkxNjQtNjZjNC00OTY5LTkyMWItYTg4MjA5NjNhNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7liatPJLwZK7BY/tFsofH4MLMSoUVP9qlle TEacMa89hFMfPGMb4k0g7urA8DiVVxhHEtZr2d5QXjRAwGk5yMT8Aw+ifMvXAUcm H0J/BzPu+rgK/DCAHKZwMyywZ0mFLxgFfpabnBlrTeE6OdMbqSCrAhLJPV469a4B OlHnvwY4O7HY2kaoydW3IyohcNH+69EoKD/bWfpxwQot4eXK1K+fDLMxP8iQnxgV tJR2r8Zi6NJRv8B7DFB9nVkgLW155pJcWDLgNkA3DV/fGZ49xjXt2o8IF+nTuS/i t7rDhi0uGHz7PY1yoUM5axPH0AlUjT8fIk9+W2m+hfuo7hnejQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECKek3u2jUrlaaxfOt2LmqmSLg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDVkNDFmMTUtODQ5Mi0z ZmMwLTk1ZDEtMzIyMjQ5MTJhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9lAJlbEx0mQfjrNsKMnxXgtPrOTULlLuZewOrCEKkAOA/XweGUDxTU ngCzvtGDOXgnfpmzJwPaCbldlBMPljSVcGVu1iS+Hgb2UVY/TBvWUONAmlw4C9W3 +33myWKyXL+I8PGaJw3H2a6vFjo2tEhimVqtpvAjZLhMrf0ybuoGROzSS6fjymPv 3oEqGN1hm9kA4naigZCzbSS4Ra6C8zLhrKttlJEK2pGfuijacoY/SMw4aSpHixrs Vx2SSOHzBYFGsNTIQTUQ4eO+B90TuKTA4uSyWowhMEtwUCyknq0AtZbW9lUfl7lA FolkZkJQbKFLr3+hNa/r+sFcc8fC1ms= -----END CERTIFICATE-----Generated at Wed Jul 1 09:30:40 2026 by rpki-client