$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa File: 774a050a-18b3-390e-8bca-f3119f67dd8a.roa (raw, json) Hash identifier: s5hl8H0yinvfO9QX6xqFv6YprxDqTijxQ36JerVNKzE= Subject key identifier: 5C:FE:91:EF:D6:EA:4C:1B:4A:CF:B6:0C:B7:00:F7:72:6A:69:01:46 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E3A2F1A32D15E7595E8390050 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 1280 IP address blocks: 149.20.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:1a:32:d1:5e:75:95:e8:39:00:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=5f07c0ce-0d9f-45d6-b4fb-83316dfadf44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:65:49:26:3a:08:f0:77:3b:7e:05:06:74: d1:98:c2:0e:f8:5f:0d:06:bc:fe:02:31:39:09:d0: 73:dc:d1:07:9f:fe:06:34:f9:2e:85:43:79:e6:6f: d2:04:68:95:22:8e:77:2b:b5:02:68:ee:37:03:bb: ab:b6:fd:cc:42:51:04:f5:f4:74:46:53:fc:84:88: 27:8a:8f:fa:1d:c4:d9:b0:19:75:be:28:dc:f5:5b: 5d:fb:45:f1:ad:6f:53:3b:86:ac:d3:0b:c6:55:91: 20:bf:57:3e:19:b0:45:11:b0:82:ee:8f:ee:82:d8: 5d:68:2b:8a:f1:ec:64:90:84:b3:77:7b:4c:f3:66: 14:64:90:d6:ef:70:c3:88:3b:96:f3:31:fa:08:42: 7d:fb:f4:7b:a2:78:2c:09:34:aa:3f:9e:ee:3d:7d: 7d:17:e3:62:44:6c:c1:25:e0:f0:b9:67:64:84:6b: fc:7d:b9:a0:62:dd:7c:d1:7b:1a:40:95:76:e7:ae: d0:19:19:d6:a5:b1:30:ab:a0:81:ef:ff:32:5b:d5: 96:a0:12:a6:d8:51:4c:15:73:86:d6:ef:e6:23:f9: 23:66:bb:b5:56:56:54:4d:9d:85:f6:33:cd:a1:74: 9e:1d:f2:58:67:e7:4d:7d:c9:cf:6c:02:82:3e:8c: 14:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FE:91:EF:D6:EA:4C:1B:4A:CF:B6:0C:B7:00:F7:72:6A:69:01:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:57:ec:33:4b:2e:24:a3:70:7a:6f:a2:cf:af:68:10:c2:69: 3a:c9:40:19:36:6e:04:4f:91:0a:4e:45:71:cc:9e:dd:3d:a5: bc:47:83:67:ee:95:27:63:3f:14:b2:77:d8:4f:30:d0:85:44: f0:4a:db:dc:09:da:64:d9:6d:3a:2b:11:6c:e3:86:1f:d5:81: 45:88:01:5e:54:85:20:40:b3:31:eb:94:fe:51:19:de:fc:83: c6:67:3a:7b:bd:c0:aa:3c:5f:92:d7:70:d2:9b:5a:a7:93:ec: 4a:c2:9d:9d:2a:fa:41:56:ad:18:5a:a9:4c:4f:0d:75:d0:9f: 8f:29:20:3b:37:a6:70:61:ce:dc:25:c6:cc:25:1b:aa:17:c4: b8:a5:f4:af:00:5c:ed:19:da:6f:c9:3f:83:2e:3c:28:66:56: 03:dc:78:6f:18:c7:c5:c8:1a:60:f7:92:5f:3b:45:d0:da:c9: 54:19:42:17:d2:8f:87:dc:94:da:bb:41:46:f6:43:89:e4:34: 37:a1:10:ea:31:e4:cd:89:99:81:48:00:4d:1d:c3:a2:0c:47: af:c8:25:88:32:20:24:86:88:77:1b:67:e5:29:f3:76:70:de: ae:db:16:a1:a4:cc:ce:d4:c5:24:b5:5d:33:13:fd:c3:57:b0: 1f:5f:7d:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lxoy0V51leg5AFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk NWYwN2MwY2UtMGQ5Zi00NWQ2LWI0ZmItODMzMTZkZmFkZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbdlSSY6CPB3O34FBnTRmMIO+F8NBrz+AjE5 CdBz3NEHn/4GNPkuhUN55m/SBGiVIo53K7UCaO43A7urtv3MQlEE9fR0RlP8hIgn io/6HcTZsBl1vijc9Vtd+0XxrW9TO4as0wvGVZEgv1c+GbBFEbCC7o/ugthdaCuK 8exkkISzd3tM82YUZJDW73DDiDuW8zH6CEJ9+/R7ongsCTSqP57uPX19F+NiRGzB JeDwuWdkhGv8fbmgYt180XsaQJV2567QGRnWpbEwq6CB7/8yW9WWoBKm2FFMFXOG 1u/mI/kjZru1VlZUTZ2F9jPNoXSeHfJYZ+dNfcnPbAKCPowUnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz+ke/W6kwbSs+2DLcA93JqaQFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNzc0YTA1MGEtMThiMy0z OTBlLThiY2EtZjMxMTlmNjdkZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRX7DNLLiSjcHpvos+vaBDCaTrJQBk2bgRPkQpORXHMnt09pbxHg2fu lSdjPxSyd9hPMNCFRPBK29wJ2mTZbTorEWzjhh/VgUWIAV5UhSBAszHrlP5RGd78 g8ZnOnu9wKo8X5LXcNKbWqeT7ErCnZ0q+kFWrRhaqUxPDXXQn48pIDs3pnBhztwl xswlG6oXxLil9K8AXO0Z2m/JP4MuPChmVgPceG8Yx8XIGmD3kl87RdDayVQZQhfS j4fclNq7QUb2Q4nkNDehEOox5M2JmYFIAE0dw6IMR6/IJYgyICSGiHcbZ+Up83Zw 3q7bFqGkzM7UxSS1XTMT/cNXsB9ffak= -----END CERTIFICATE-----Generated at Wed Jul 1 09:30:40 2026 by rpki-client