$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa File: 8578f51c-1b6a-3105-b746-5bdf914f63b4.roa (raw, json) Hash identifier: RAJxMxXRHvUlv4KPY7MX7ixMg247+Uu70V0PClHVZr4= Subject key identifier: AD:20:1F:5E:C4:65:B9:39:DE:0D:06:B5:71:C8:93:6A:FB:6B:3E:4F Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E3A2F200141D000845D86D950 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 1280 IP address blocks: 149.20.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:20:01:41:d0:00:84:5d:86:d9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=7a6060cf-3b0a-470e-be64-76e1fae89bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2a:e0:07:64:48:ea:ac:c4:89:46:2d:73:43: a5:ea:dc:80:d1:f9:53:24:73:d8:81:13:bc:ca:7e: f4:de:47:b6:84:4d:62:74:62:c1:2c:cf:b8:80:af: 6c:19:e7:c3:e5:d0:5f:3b:0a:e0:ca:2b:70:09:92: db:58:ae:70:b8:aa:01:bd:de:56:f9:70:f6:15:bd: ad:a4:34:c2:47:91:d6:bd:8c:a5:a4:e6:c3:ad:77: d2:3b:3b:68:45:12:2a:be:ee:2c:de:f6:0f:63:4f: 3e:f5:dd:8e:49:cd:c9:78:71:cf:39:ab:5d:3c:40: d8:72:12:20:18:f8:dc:a9:33:be:82:5b:ef:e3:fb: 1b:9e:c1:45:69:ea:87:81:17:02:7d:fa:22:15:b2: eb:d6:03:7e:84:8d:8e:f9:c3:38:34:61:3e:0b:44: 2f:a5:6b:3a:95:c4:ca:8b:04:35:fe:4f:11:9a:c4: eb:02:ea:0e:7a:31:d6:fc:b6:6f:67:c6:2d:dd:9d: 28:99:a9:da:ac:63:a2:ae:32:cc:bb:c6:2e:d9:cd: a0:72:65:d5:db:6f:ef:5c:d3:55:b0:1f:a0:6c:09: 6b:63:88:f8:0a:a2:fd:b4:bf:bf:20:77:30:e2:74: e8:b3:ca:f5:50:b9:65:9c:8e:21:20:c0:a7:77:a8: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:20:1F:5E:C4:65:B9:39:DE:0D:06:B5:71:C8:93:6A:FB:6B:3E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:3d:b3:a1:5f:d8:e6:59:3a:53:94:d3:11:53:c5:7f:d5:95: fa:5b:88:24:d9:40:dc:d7:bd:9f:73:83:16:4a:36:cc:4e:ec: 7a:4e:01:7a:57:b2:25:37:7f:97:31:ba:b4:7b:2e:33:f8:c0: 70:b9:2a:84:03:eb:15:64:56:f3:fe:a1:ed:0d:34:62:76:bf: eb:8d:f4:e4:cb:8f:e0:eb:1c:7d:8e:fe:0f:6c:a9:08:79:12: c4:f0:33:28:4d:64:dc:e7:9b:22:c8:34:81:0a:6e:0e:b6:ac: f4:b4:93:da:7d:55:0e:e9:c0:e6:79:54:ea:d6:a2:39:ad:d8: 3b:84:3c:66:7c:68:e8:ca:e5:c2:2c:d5:b3:4d:9b:8f:11:33: f9:2c:92:24:03:19:7d:e1:31:ef:71:57:4f:d6:21:c0:a5:19: 26:81:a9:52:c5:5c:2d:b7:ec:23:8f:b1:be:99:9e:b5:38:5e: 30:c5:e3:85:e8:df:3b:cf:25:d5:2d:1e:9e:6b:c7:b9:8a:ed: 26:b9:d3:37:b7:b7:12:f2:7a:c5:f0:af:52:c1:98:16:62:38: 2a:a7:ff:dd:47:3d:6f:eb:18:77:4c:a2:21:74:3c:ab:34:90: 27:51:94:ec:6b:de:4d:f5:d2:da:d9:6c:eb:36:04:d1:5f:45: ff:2d:bf:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LyABQdAAhF2G2VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk N2E2MDYwY2YtM2IwYS00NzBlLWJlNjQtNzZlMWZhZTg5YmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSrgB2RI6qzEiUYtc0Ol6tyA0flTJHPYgRO8 yn703ke2hE1idGLBLM+4gK9sGefD5dBfOwrgyitwCZLbWK5wuKoBvd5W+XD2Fb2t pDTCR5HWvYylpObDrXfSOztoRRIqvu4s3vYPY08+9d2OSc3JeHHPOatdPEDYchIg GPjcqTO+glvv4/sbnsFFaeqHgRcCffoiFbLr1gN+hI2O+cM4NGE+C0QvpWs6lcTK iwQ1/k8RmsTrAuoOejHW/LZvZ8Yt3Z0omanarGOirjLMu8Yu2c2gcmXV22/vXNNV sB+gbAlrY4j4CqL9tL+/IHcw4nTos8r1ULllnI4hIMCnd6jDXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0gH17EZbk53g0GtXHIk2r7az5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODU3OGY1MWMtMWI2YS0z MTA1LWI3NDYtNWJkZjkxNGY2M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA9s6Ff2OZZOlOU0xFTxX/VlfpbiCTZQNzXvZ9zgxZKNsxO7HpOAXpX siU3f5cxurR7LjP4wHC5KoQD6xVkVvP+oe0NNGJ2v+uN9OTLj+DrHH2O/g9sqQh5 EsTwMyhNZNznmyLINIEKbg62rPS0k9p9VQ7pwOZ5VOrWojmt2DuEPGZ8aOjK5cIs 1bNNm48RM/kskiQDGX3hMe9xV0/WIcClGSaBqVLFXC237COPsb6ZnrU4XjDF44Xo 3zvPJdUtHp5rx7mK7Sa50ze3txLyesXwr1LBmBZiOCqn/91HPW/rGHdMoiF0PKs0 kCdRlOxr3k310trZbOs2BNFfRf8tvzo= -----END CERTIFICATE-----Generated at Wed Jul 1 09:30:35 2026 by rpki-client