$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa File: 4c4c9fac-6d7d-375f-93e9-b348075a4662.roa (raw, json) Hash identifier: Jjq13eW4B6gRyhTjxDfuZoyoZuO2sFnX466i5XKQrsg= Subject key identifier: 37:1D:E6:A3:C8:59:27:85:4B:FD:A0:DA:BA:64:27:76:98:1A:C2:45 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E3A2F1FE7C7E27EEEFB1A60D0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 1280 IP address blocks: 149.20.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:1f:e7:c7:e2:7e:ee:fb:1a:60:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=5dcb302d-e7df-4e2e-a529-18038c65ed05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:88:90:41:ed:bd:7c:1f:42:40:f8:6a:d4: e9:90:28:a7:19:f8:32:1c:0e:7b:f4:3e:cf:b6:71: ff:8a:84:61:cb:45:99:3e:57:70:7e:6e:eb:64:5f: 00:44:c9:06:e8:32:42:24:c5:c0:3b:13:f6:83:57: f8:72:d8:68:62:67:d0:7e:78:b1:dd:87:41:6c:95: c4:cd:76:11:c8:a9:df:5f:c8:55:45:f2:ed:e0:a7: 85:6b:6b:c3:22:67:84:67:0b:ce:88:44:76:88:a1: 52:d4:b7:62:5c:a9:99:6b:37:ab:de:1e:22:a8:97: dd:bb:27:0f:dc:a8:4a:f1:95:12:2e:2f:45:8c:49: e8:2a:91:d2:78:c2:43:0b:80:25:54:91:34:9a:c4: 2c:8f:91:67:12:14:7e:ab:a1:f4:8a:2f:63:1e:3e: b9:a5:32:dd:1e:f4:53:80:be:ab:8a:1d:39:75:39: 95:da:b7:43:e0:16:79:b9:47:4e:6a:0d:23:50:fb: d9:e9:06:29:d3:68:35:8a:d1:6e:1f:d5:0d:67:8b: d5:23:81:3d:14:32:a3:18:a1:9b:64:c9:af:dd:68: b5:cc:9e:af:7f:3f:0e:5d:88:b0:36:c5:ee:79:51: 5f:4a:c2:af:d4:1e:65:02:82:7e:5b:2d:cd:8a:72: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1D:E6:A3:C8:59:27:85:4B:FD:A0:DA:BA:64:27:76:98:1A:C2:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c7:3b:56:7b:c0:9c:51:30:e0:c2:6f:70:15:ff:f9:68:0c: 00:a2:13:fb:05:d6:90:a4:02:d5:01:5b:35:5e:d6:97:f5:71: 78:d9:9e:95:11:33:7c:37:b5:46:76:02:4e:52:3f:b8:0f:45: 5c:c6:2d:1d:6c:5e:2f:1e:6b:2b:01:e2:a7:ef:df:f3:2d:98: 54:bc:c8:12:cf:d6:e8:5a:a8:3f:bd:f0:49:31:f7:f5:20:cf: 0c:16:64:9a:27:32:0e:1b:d5:c7:88:91:1c:8c:b6:e6:e9:bf: 83:38:b4:8e:3d:f7:17:51:d3:70:7e:bf:0f:36:6f:db:a6:68: 7a:ac:7f:09:0a:51:41:66:e1:0b:df:3d:84:d8:48:33:17:72: d7:ee:2c:77:20:74:06:bc:b5:47:19:b3:a0:06:f0:ab:2b:42: 56:3f:21:a7:f3:ce:4d:54:3b:43:69:2f:18:53:d1:26:3a:73: 7c:9a:b0:a1:28:5f:85:d4:c2:5b:19:36:23:5a:12:61:6a:16: 62:10:81:3d:78:75:db:4a:d0:0d:f6:83:83:c3:99:82:36:81: 71:14:93:e5:d7:88:1d:63:3e:c1:04:38:63:0e:97:b6:b3:f4: 6c:49:da:0c:23:e8:64:c9:80:3f:6d:e3:e4:35:29:72:27:2f: 06:78:67:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lx/nx+J+7vsaYNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk NWRjYjMwMmQtZTdkZi00ZTJlLWE1MjktMTgwMzhjNjVlZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9+IkEHtvXwfQkD4atTpkCinGfgyHA579D7P tnH/ioRhy0WZPldwfm7rZF8ARMkG6DJCJMXAOxP2g1f4cthoYmfQfnix3YdBbJXE zXYRyKnfX8hVRfLt4KeFa2vDImeEZwvOiER2iKFS1LdiXKmZazer3h4iqJfduycP 3KhK8ZUSLi9FjEnoKpHSeMJDC4AlVJE0msQsj5FnEhR+q6H0ii9jHj65pTLdHvRT gL6rih05dTmV2rdD4BZ5uUdOag0jUPvZ6QYp02g1itFuH9UNZ4vVI4E9FDKjGKGb ZMmv3Wi1zJ6vfz8OXYiwNsXueVFfSsKv1B5lAoJ+Wy3NinJL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcd5qPIWSeFS/2g2rpkJ3aYGsJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNGM0YzlmYWMtNmQ3ZC0z NzVmLTkzZTktYjM0ODA3NWE0NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/HO1Z7wJxRMODCb3AV//loDACiE/sF1pCkAtUBWzVe1pf1cXjZnpUR M3w3tUZ2Ak5SP7gPRVzGLR1sXi8eaysB4qfv3/MtmFS8yBLP1uhaqD+98Ekx9/Ug zwwWZJonMg4b1ceIkRyMtubpv4M4tI499xdR03B+vw82b9umaHqsfwkKUUFm4Qvf PYTYSDMXctfuLHcgdAa8tUcZs6AG8KsrQlY/Iafzzk1UO0NpLxhT0SY6c3yasKEo X4XUwlsZNiNaEmFqFmIQgT14ddtK0A32g4PDmYI2gXEUk+XXiB1jPsEEOGMOl7az 9GxJ2gwj6GTJgD9t4+Q1KXInLwZ4Z4M= -----END CERTIFICATE-----Generated at Wed Jul 1 09:30:36 2026 by rpki-client