$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa File: a91395db-8f35-3e47-962d-19b64b128e81.roa (raw, json) Hash identifier: 0MQ/SIP72lJwYJH2CXlwSPjdormQaWNOk0lh6cnjM88= Subject key identifier: 3F:50:CE:A5:B0:0E:E0:EC:06:7A:1E:D4:39:AA:2B:03:8A:1C:A2:17 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E35FF10DA7E9020D29A1EC080 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 55440 IP address blocks: 149.20.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:10:da:7e:90:20:d2:9a:1e:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=fd1f1145-6bc9-4b8a-a537-6ef3f4aa5b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dd:79:6e:62:2d:86:9e:ea:5c:f9:38:2b:24: 0c:ea:eb:9d:e2:d3:6d:af:9b:74:8e:96:65:51:c6: c6:6d:7c:cd:99:39:8c:23:51:5c:5e:4e:81:13:2c: 2f:3a:d7:cf:d2:1e:32:3c:4f:e8:d0:e8:10:b4:77: 82:79:30:43:5c:61:53:44:86:29:24:d9:1a:d1:32: 74:1d:be:52:73:7e:9b:3f:4c:16:b9:db:bd:f9:36: 4a:12:a0:a9:3a:46:f1:dc:32:84:02:90:86:7c:ed: 23:43:11:4d:d2:ee:41:50:35:fe:9a:dd:86:e8:56: 18:97:22:6f:3b:b7:c1:cb:00:e4:30:1b:1a:6b:22: 51:9b:25:63:fa:25:41:72:91:03:c3:9a:39:9b:1f: bc:68:ec:34:28:84:db:f7:61:2c:76:77:7b:4f:8a: d5:83:2b:22:d9:6e:5d:77:22:4a:4f:9c:64:87:a4: cc:40:ec:ce:8b:7d:23:e1:d2:64:aa:e9:00:62:fe: 0b:c3:31:0e:0b:92:57:ca:e4:ce:fc:97:26:c2:53: 50:32:d5:ca:7d:61:41:c3:db:50:dc:97:a9:15:fe: 96:c3:c6:d3:b8:3c:0a:26:83:d1:2a:b9:26:6d:1e: 95:f3:b4:c6:c0:e3:e1:dd:21:de:ba:6b:30:21:06: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:50:CE:A5:B0:0E:E0:EC:06:7A:1E:D4:39:AA:2B:03:8A:1C:A2:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:59:71:a1:b2:68:5a:cd:61:f7:2a:11:56:af:d2:3d:74:bf: 5c:d6:ba:d1:85:b2:2e:00:4e:2a:06:74:91:27:2b:9c:0f:0c: 27:2b:78:48:fb:76:f6:98:d7:e1:b1:5c:f2:39:fd:e7:b2:cf: cc:e1:48:e7:f0:ea:ac:32:fa:70:75:c7:5b:de:50:df:59:92: ca:d2:59:df:56:c4:96:79:a7:5d:b9:4f:d8:df:70:1d:42:77: 67:b0:61:12:0a:23:13:28:dc:c8:ec:9b:fb:fc:3f:cc:6e:2c: 84:6a:93:dd:52:30:82:b3:a3:68:9b:c3:07:f5:c3:01:00:0c: 8a:b4:fb:ef:8c:fe:73:f9:62:98:32:41:af:b1:6a:48:f8:f2: 9a:e7:6c:71:24:50:49:91:5f:fb:0f:b0:37:67:ac:73:86:3b: 21:7f:41:16:c2:2f:0c:d3:fb:1e:14:2b:99:c9:fa:3f:06:69: d0:d7:33:8b:16:71:63:b8:28:7d:fa:6c:21:ff:50:5a:4a:76: 4b:1c:95:3c:1f:e1:62:35:8c:31:7a:4c:ea:a1:d2:35:45:2c: 45:af:15:e2:06:f4:66:4d:97:e6:2d:86:86:62:9b:27:c9:ca: 4c:6d:92:63:06:a8:4b:92:47:ad:ec:e8:4f:01:a1:b0:f2:84: 79:32:e7:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/xDafpAg0poewIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk ZmQxZjExNDUtNmJjOS00YjhhLWE1MzctNmVmM2Y0YWE1Yjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN15bmIthp7qXPk4KyQM6uud4tNtr5t0jpZl UcbGbXzNmTmMI1FcXk6BEywvOtfP0h4yPE/o0OgQtHeCeTBDXGFTRIYpJNka0TJ0 Hb5Sc36bP0wWudu9+TZKEqCpOkbx3DKEApCGfO0jQxFN0u5BUDX+mt2G6FYYlyJv O7fBywDkMBsaayJRmyVj+iVBcpEDw5o5mx+8aOw0KITb92Esdnd7T4rVgysi2W5d dyJKT5xkh6TMQOzOi30j4dJkqukAYv4LwzEOC5JXyuTO/JcmwlNQMtXKfWFBw9tQ 3JepFf6Ww8bTuDwKJoPRKrkmbR6V87TGwOPh3SHeumswIQYQdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9QzqWwDuDsBnoe1DmqKwOKHKIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTkxMzk1ZGItOGYzNS0z ZTQ3LTk2MmQtMTliNjRiMTI4ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBZcaGyaFrNYfcqEVav0j10v1zWutGFsi4ATioGdJEnK5wPDCcreEj7 dvaY1+GxXPI5/eeyz8zhSOfw6qwy+nB1x1veUN9ZksrSWd9WxJZ5p125T9jfcB1C d2ewYRIKIxMo3Mjsm/v8P8xuLIRqk91SMIKzo2ibwwf1wwEADIq0+++M/nP5Ypgy Qa+xakj48prnbHEkUEmRX/sPsDdnrHOGOyF/QRbCLwzT+x4UK5nJ+j8GadDXM4sW cWO4KH36bCH/UFpKdksclTwf4WI1jDF6TOqh0jVFLEWvFeIG9GZNl+YthoZimyfJ ykxtkmMGqEuSR63s6E8BobDyhHky52M= -----END CERTIFICATE-----Generated at Wed Jul 1 09:49:05 2026 by rpki-client