$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa File: a25873ed-8451-344c-af7e-66515db40f53.roa (raw, json) Hash identifier: 7xN3Cyb1nAIXhIWaM7T4/jzMr24DUZksuQkcERIgAyc= Subject key identifier: 35:3B:DA:E2:E8:0D:C5:29:FD:00:72:2E:66:1E:EA:C7:42:FE:11:63 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584F497673D7DC1CC448DA637CC3 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30132 IP address blocks: 149.20.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:73:d7:dc:1c:c4:48:da:63:7c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d28a6681-ad58-4ff1-9e92-0d2cef3bd322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ce:aa:00:e4:03:75:55:a3:22:b4:75:d9:76: 71:b0:7e:f4:b6:4a:06:6f:54:bf:d7:59:b0:68:44: 6c:66:23:bd:1b:43:65:61:b5:12:e0:13:2d:ee:91: 31:68:24:5a:9a:e2:8c:47:e4:c8:03:17:7d:c6:80: d1:30:ac:39:b4:fb:57:04:6f:34:ac:f5:36:37:cc: 2c:25:fd:be:48:8a:b9:4f:03:f6:be:09:21:ae:39: 71:2f:a5:1e:7d:92:d7:e6:c7:67:31:05:cd:fc:11: ca:88:98:bd:80:81:84:83:e3:d9:80:5d:44:89:33: a9:a6:af:9f:4e:df:e9:73:07:95:d9:ba:66:36:7f: cc:01:21:8e:c9:4c:a2:eb:f5:82:7c:f5:7e:f0:91: 97:20:fd:49:71:f8:07:d9:d5:45:60:3c:6b:f4:a6: d9:41:8f:98:87:91:fd:fc:5f:b5:aa:02:e0:9f:46: 07:6f:cd:a8:ea:b8:a1:5d:87:ff:ee:9f:75:d3:d9: 26:a0:4a:38:42:80:cd:e6:9a:53:a5:ec:60:b3:a4: 58:d9:73:1c:aa:01:56:5c:99:5b:10:a3:ad:60:dd: cc:78:48:db:3b:3e:43:70:10:df:67:52:be:23:64: fd:21:74:7f:ad:eb:67:47:d4:db:7f:f1:a1:f6:ec: 2b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3B:DA:E2:E8:0D:C5:29:FD:00:72:2E:66:1E:EA:C7:42:FE:11:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d9:cd:a1:a6:ba:c8:c5:3c:c9:67:d6:6e:59:c9:5b:22:ec: 13:af:4a:36:63:58:01:ae:c5:00:4d:5e:7a:0f:06:04:3b:2a: 00:a8:a2:22:ec:a9:3a:4e:df:90:26:c0:2c:e0:5c:48:6e:73: bd:d6:2d:c3:3c:32:13:2e:c4:48:37:ef:31:68:8f:a5:85:59: ed:c5:9c:6a:88:25:3c:90:bb:4c:f2:5f:a7:d2:33:b2:dd:a8: 8c:85:d0:05:a8:14:e5:31:b7:76:4f:6d:e6:77:d6:a6:b7:46: 63:22:90:80:48:b3:b0:d5:4c:fb:7f:40:24:29:29:b8:3b:c3: c4:b9:38:4e:4b:bf:3a:62:47:54:fb:40:26:e4:65:ef:72:a8: d6:61:d6:62:57:4f:58:e2:5b:81:25:21:11:84:33:ac:a9:81: 3e:a4:6e:65:77:6d:d8:0c:ac:49:86:d4:73:01:0c:dc:b7:11: 9a:e1:5c:4f:ac:58:71:8d:3f:b7:a3:dd:16:6c:a9:05:98:15: b1:36:da:46:61:89:d2:76:1e:0b:28:fc:92:fa:c7:8a:69:57: 58:a5:c4:43:7b:36:57:51:15:e4:e0:c7:d0:af:b0:06:b0:56: 89:fd:fd:89:40:35:1d:c9:7f:3e:72:ef:d2:06:7b:0a:1c:67: a0:16:1a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdnPX3BzESNpjfMMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDI4YTY2ODEtYWQ1OC00ZmYxLTllOTItMGQyY2VmM2JkMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh86qAOQDdVWjIrR12XZxsH70tkoGb1S/11mw aERsZiO9G0NlYbUS4BMt7pExaCRamuKMR+TIAxd9xoDRMKw5tPtXBG80rPU2N8ws Jf2+SIq5TwP2vgkhrjlxL6UefZLX5sdnMQXN/BHKiJi9gIGEg+PZgF1EiTOppq+f Tt/pcweV2bpmNn/MASGOyUyi6/WCfPV+8JGXIP1JcfgH2dVFYDxr9KbZQY+Yh5H9 /F+1qgLgn0YHb82o6rihXYf/7p9109kmoEo4QoDN5ppTpexgs6RY2XMcqgFWXJlb EKOtYN3MeEjbOz5DcBDfZ1K+I2T9IXR/retnR9Tbf/Gh9uwr8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDU72uLoDcUp/QByLmYe6sdC/hFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTI1ODczZWQtODQ1MS0z NDRjLWFmN2UtNjY1MTVkYjQwZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPZzaGmusjFPMln1m5ZyVsi7BOvSjZjWAGuxQBNXnoPBgQ7KgCooiLs qTpO35AmwCzgXEhuc73WLcM8MhMuxEg37zFoj6WFWe3FnGqIJTyQu0zyX6fSM7Ld qIyF0AWoFOUxt3ZPbeZ31qa3RmMikIBIs7DVTPt/QCQpKbg7w8S5OE5LvzpiR1T7 QCbkZe9yqNZh1mJXT1jiW4ElIRGEM6ypgT6kbmV3bdgMrEmG1HMBDNy3EZrhXE+s WHGNP7ej3RZsqQWYFbE22kZhidJ2Hgso/JL6x4ppV1ilxEN7NldRFeTgx9CvsAaw Von9/YlANR3Jfz5y79IGewocZ6AWGkE= -----END CERTIFICATE-----Generated at Fri Oct 9 21:51:44 2026 by rpki-client