$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa File: 9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa (raw, json) Hash identifier: EVtC/rQnjMDtn1WK7XIW+ciNeIh9I8LQPvODR/0sATQ= Subject key identifier: 28:08:96:94:26:EF:26:F7:E7:A4:7E:AD:B4:B9:60:97:66:B2:ED:B1 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E3A2F1FF4D5C8B5639CA63580 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 1280 IP address blocks: 149.20.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:1f:f4:d5:c8:b5:63:9c:a6:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=838a6648-8425-4ba4-bbbe-4141cbfc1d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:13:10:d1:1d:36:3f:54:c7:16:6b:e8:0e: 99:0f:8a:e9:60:da:c0:da:16:fa:d6:45:b0:8b:fc: 7c:07:55:c9:9e:53:33:6e:79:d9:08:86:ca:e1:ba: 09:67:7e:57:f7:5b:33:ce:48:b5:4e:cf:70:a7:5e: 58:fa:26:ab:8b:aa:55:32:e4:09:e8:0f:6d:1e:e8: 24:8f:c9:87:d4:9f:f5:c7:cf:6c:cd:6b:20:d0:05: fc:5d:84:d9:5e:09:3c:74:c6:4f:85:34:da:8c:29: 12:ac:4d:b2:15:33:7e:ee:f8:a7:8b:e1:21:a4:26: f6:22:23:d6:de:6e:d7:ff:6a:17:f2:3b:8f:6a:16: e8:03:d7:19:a4:ae:0a:78:cc:97:43:e7:c7:6d:36: 33:31:68:34:7f:cc:22:c5:6d:85:64:ed:14:e2:96: 3f:aa:71:0d:90:19:38:33:a0:e5:e9:67:5d:1e:0e: a5:a8:8e:56:0f:d5:ba:81:0b:dc:6d:f2:1b:77:2e: b4:c8:54:3c:40:a9:0d:0e:ed:d0:52:f3:da:bb:78: cd:64:e3:21:29:a2:2e:d2:36:4d:89:d1:c5:27:87: 89:e6:ef:76:35:c6:3a:24:91:e4:1a:3d:6e:84:28: e4:c2:37:ec:9f:2e:3a:fa:4f:e9:ec:f6:23:09:64: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:08:96:94:26:EF:26:F7:E7:A4:7E:AD:B4:B9:60:97:66:B2:ED:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:cf:95:bd:48:3f:d1:e6:80:7a:3e:ce:49:1b:ea:cd:28:a7: 72:98:11:51:3c:ea:04:cb:e8:2d:4b:5b:87:a7:18:b9:af:08: 6e:93:8f:49:5f:69:0c:97:0a:e5:b2:be:b0:a5:0b:ca:e0:6a: cb:3b:38:99:5c:ca:9e:9e:0d:01:8c:88:37:5b:d2:25:9e:d4: 3e:a9:a7:22:d5:f2:be:94:04:42:b0:1f:e4:4f:8e:80:f8:4b: 2f:e7:46:55:53:c1:ed:3a:41:e1:dc:33:2f:08:c1:72:6f:1c: 67:29:09:a8:18:a9:d4:88:f1:03:ea:53:9b:e4:3a:1e:8e:ea: 6d:7f:c0:41:d4:72:91:7f:54:6f:34:e6:8f:5e:51:29:c2:c7: 77:2c:92:50:5d:9e:f8:f9:2b:e5:c9:cb:76:66:08:59:56:f9: a8:2f:d8:1f:1b:81:34:ba:99:84:32:85:6a:70:92:f6:af:c6: 85:f9:94:61:04:c9:e8:b9:74:71:b4:bc:72:9d:c0:fd:af:fb: 3b:ad:a3:08:2b:44:61:fc:fc:f7:5b:27:a6:ed:c5:b3:c5:3e: ee:0f:e2:95:81:54:18:ff:e3:50:a4:fd:b3:c1:65:7f:12:70: 9f:a0:2c:f3:57:41:08:73:4d:c6:1d:36:09:48:19:09:8e:3e: 48:a7:2c:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lx/01ci1Y5ymNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ODM4YTY2NDgtODQyNS00YmE0LWJiYmUtNDE0MWNiZmMxZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVkTENEdNj9UxxZr6A6ZD4rpYNrA2hb61kWw i/x8B1XJnlMzbnnZCIbK4boJZ35X91szzki1Ts9wp15Y+iari6pVMuQJ6A9tHugk j8mH1J/1x89szWsg0AX8XYTZXgk8dMZPhTTajCkSrE2yFTN+7vini+EhpCb2IiPW 3m7X/2oX8juPahboA9cZpK4KeMyXQ+fHbTYzMWg0f8wixW2FZO0U4pY/qnENkBk4 M6Dl6WddHg6lqI5WD9W6gQvcbfIbdy60yFQ8QKkNDu3QUvPau3jNZOMhKaIu0jZN idHFJ4eJ5u92NcY6JJHkGj1uhCjkwjfsny46+k/p7PYjCWRqBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgIlpQm7yb356R+rbS5YJdmsu2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvOWRiMGFkMzQtOWExMi0z YTg0LWE5MWItMmZkNmExODZkYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfPlb1IP9HmgHo+zkkb6s0op3KYEVE86gTL6C1LW4enGLmvCG6Tj0lf aQyXCuWyvrClC8rgass7OJlcyp6eDQGMiDdb0iWe1D6ppyLV8r6UBEKwH+RPjoD4 Sy/nRlVTwe06QeHcMy8IwXJvHGcpCagYqdSI8QPqU5vkOh6O6m1/wEHUcpF/VG80 5o9eUSnCx3csklBdnvj5K+XJy3ZmCFlW+agv2B8bgTS6mYQyhWpwkvavxoX5lGEE yei5dHG0vHKdwP2v+zutowgrRGH8/PdbJ6btxbPFPu4P4pWBVBj/41Ck/bPBZX8S cJ+gLPNXQQhzTcYdNglIGQmOPkinLKQ= -----END CERTIFICATE-----Generated at Wed Jul 1 09:29:16 2026 by rpki-client