$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa File: 8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa (raw, json) Hash identifier: sUCDxvIXsnsBr8lyc7fOIWfbObOLeSo1xIUZDZEv81I= Subject key identifier: CF:EA:F7:C3:01:3C:F3:9C:18:1A:D1:21:B2:C3:10:13:7F:1A:15:46 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584EDC91EAF992DE68630D705AF0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 1280 IP address blocks: 149.20.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:ea:f9:92:de:68:63:0d:70:5a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=81b01868-4484-47f9-b331-e07bc8dcc338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:16:12:c1:95:5f:42:a9:a2:f1:cd:44:bc:fc: fc:e9:00:59:93:1f:78:af:84:42:d0:89:37:9f:02: 9e:0e:52:b0:20:73:ef:f6:d9:44:70:7d:5c:c8:24: 6f:62:32:70:33:d8:8a:bd:b7:8f:69:26:52:79:99: b1:4a:9c:24:57:ba:dc:c8:02:f7:93:3c:66:7f:62: 87:3a:e6:aa:24:78:05:04:a5:02:d0:c9:4e:de:46: aa:fb:6a:6b:1e:7a:8d:76:f8:62:e4:b3:f7:b6:fe: 19:e9:76:c7:6b:22:9c:fb:ee:8c:e9:18:0b:ae:4e: 82:bd:2d:fd:e7:bb:27:d9:5a:b8:0d:41:1c:66:5f: 3a:9a:44:b4:89:8f:30:33:f1:43:31:76:46:6a:dd: 16:2f:5c:18:a7:54:ef:3e:1e:ff:bb:97:60:ac:55: ec:ab:a8:43:d6:83:05:5d:e2:10:89:42:c8:1a:a4: f8:fb:49:ca:6d:3a:46:da:36:96:56:77:d3:80:be: 5c:62:5f:26:0e:2d:d8:09:4b:61:09:47:1a:79:bf: 06:90:99:c1:e0:2f:99:a4:25:0e:90:3d:79:63:d8: e5:29:b7:9d:78:f7:4e:71:40:f7:9d:08:4e:6e:a2: b5:83:b4:37:0a:2b:5f:72:c1:79:2f:21:3e:6f:2d: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EA:F7:C3:01:3C:F3:9C:18:1A:D1:21:B2:C3:10:13:7F:1A:15:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:af:2c:e8:bb:dd:97:f4:f3:3e:76:76:09:e0:df:2f:6a:dd: 20:31:b2:d7:50:19:a0:c2:da:01:40:9b:93:02:c2:92:df:1d: 8a:a5:53:db:8c:8e:2b:8d:5f:12:b1:25:f6:d4:4e:58:ee:1f: e0:d4:57:3b:1b:67:ea:a3:7c:d3:c0:39:5c:51:3e:d3:3a:29: 30:de:de:b0:90:3e:45:ee:24:a4:f5:42:fe:04:ab:14:a5:df: c5:60:2b:59:d2:aa:5b:e4:38:0d:65:2e:e8:4c:51:52:4a:56: 71:04:7b:56:46:d2:48:b9:52:77:4a:14:33:80:47:eb:71:fc: e9:06:d2:cb:ac:b9:e2:b1:6e:f8:d1:3e:58:c0:fd:0f:97:25: c5:81:2e:6e:b2:4f:c0:41:c8:90:92:85:f2:cd:e2:c8:dc:63: ae:6a:95:f3:66:96:61:b1:92:8d:32:c3:2b:a9:e0:79:16:b3: 15:d6:fe:1f:1b:36:39:61:44:bd:49:8c:3b:78:a3:71:c7:2e: 74:5f:d5:f5:dd:3f:e0:2f:ba:b1:39:2f:87:ae:3a:55:0c:f8: dd:57:16:28:b9:a4:78:81:3c:c0:dc:50:c6:d0:c3:a5:26:f8: de:2b:f5:aa:08:0f:72:6b:81:47:c6:dc:ab:d1:4c:6c:2c:49: 0d:21:0c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7cker5kt5oYw1wWvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk ODFiMDE4NjgtNDQ4NC00N2Y5LWIzMzEtZTA3YmM4ZGNjMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxYSwZVfQqmi8c1EvPz86QBZkx94r4RC0Ik3 nwKeDlKwIHPv9tlEcH1cyCRvYjJwM9iKvbePaSZSeZmxSpwkV7rcyAL3kzxmf2KH OuaqJHgFBKUC0MlO3kaq+2prHnqNdvhi5LP3tv4Z6XbHayKc++6M6RgLrk6CvS39 57sn2Vq4DUEcZl86mkS0iY8wM/FDMXZGat0WL1wYp1TvPh7/u5dgrFXsq6hD1oMF XeIQiULIGqT4+0nKbTpG2jaWVnfTgL5cYl8mDi3YCUthCUcaeb8GkJnB4C+ZpCUO kD15Y9jlKbedePdOcUD3nQhObqK1g7Q3CitfcsF5LyE+by2c0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/q98MBPPOcGBrRIbLDEBN/GhVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODI5MWI4MjUtNTI2Yy0z ZGMyLWJhOWYtYWY2ZDdmNjYwN2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKvLOi73Zf08z52dgng3y9q3SAxstdQGaDC2gFAm5MCwpLfHYqlU9uM jiuNXxKxJfbUTljuH+DUVzsbZ+qjfNPAOVxRPtM6KTDe3rCQPkXuJKT1Qv4EqxSl 38VgK1nSqlvkOA1lLuhMUVJKVnEEe1ZG0ki5UndKFDOAR+tx/OkG0susueKxbvjR PljA/Q+XJcWBLm6yT8BByJCShfLN4sjcY65qlfNmlmGxko0ywyup4HkWsxXW/h8b NjlhRL1JjDt4o3HHLnRf1fXdP+AvurE5L4euOlUM+N1XFii5pHiBPMDcUMbQw6Um +N4r9aoID3JrgUfG3KvRTGwsSQ0hDMk= -----END CERTIFICATE-----Generated at Thu Oct 8 02:00:40 2026 by rpki-client