$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa File: fd1f75bb-b322-31d2-97d8-2837137ee140.roa (raw, json) Hash identifier: F/EIyOxOBglAnm9Ld3IdFPM4N2oK3oB1nrPkWc4Xskw= Subject key identifier: 54:FE:7D:C5:31:03:18:B9:EE:A3:66:48:56:D0:3D:E3:8E:EB:E1:2C Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E3A2F1DA3BB43E2109A2F34C0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 1280 IP address blocks: 149.20.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:1d:a3:bb:43:e2:10:9a:2f:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=80142fee-062f-4bc4-b5b1-63b4c15748ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:79:2d:ef:fb:c3:0f:6a:2b:c4:35:b0:bc: 61:0b:3d:d3:36:f7:b5:af:7f:b0:80:3f:08:4e:d9: 15:05:92:32:ff:ae:9f:5c:f7:59:97:f0:5e:23:01: 62:75:fc:0a:38:9f:a9:65:9e:02:37:71:13:03:4d: 98:cb:7c:0c:a6:d3:31:e5:f8:8f:f6:bf:76:5e:56: 05:f5:e5:16:10:7a:a9:0f:a7:ad:d8:7a:83:79:4c: 52:42:0a:59:a5:87:76:d2:01:56:02:12:2e:d9:be: 35:2a:0b:cb:08:81:ef:97:be:71:56:87:47:91:41: 12:69:22:3f:31:d3:4f:a5:63:d2:6b:e7:0e:6f:ce: 07:37:1d:bd:66:a7:9f:4f:d5:fc:00:96:ee:b7:34: 51:d5:dd:17:4e:5d:3b:91:3e:63:20:b7:c2:73:a5: 29:c1:ec:40:88:a0:f4:7a:a0:7e:d0:93:d3:a9:18: ab:f8:71:1b:84:57:64:7a:87:82:6c:e8:4f:00:68: cb:31:06:c2:79:ee:ed:da:e2:3c:e5:57:ee:2e:97: 61:68:d6:22:2b:38:87:51:18:3d:90:b9:37:62:86: d5:ef:c3:de:de:8c:1b:3f:98:74:e4:cb:c0:77:b1: 63:f3:8c:0e:86:c1:4b:6b:16:31:59:75:a0:41:ad: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FE:7D:C5:31:03:18:B9:EE:A3:66:48:56:D0:3D:E3:8E:EB:E1:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5a:4b:01:81:0d:54:81:b6:fd:fd:be:ba:14:41:be:9b:20: 42:b1:ff:62:41:24:18:1a:26:39:a7:60:f0:07:44:f5:64:72: e3:1a:28:0b:36:5e:00:c9:ef:5a:89:cf:e8:0a:96:1e:8d:94: 4d:c8:55:50:85:41:03:f8:00:85:e6:e4:66:05:00:80:5b:d6: 1e:6e:02:c5:4e:c7:bf:1b:2d:7f:38:9c:1b:08:b4:31:33:b7: 41:43:25:54:32:1a:31:af:79:22:9e:7c:b3:b1:40:78:14:2e: 07:67:e0:12:73:76:11:aa:2b:33:c9:f4:bd:08:4c:29:bc:32: a8:cb:76:68:f2:c7:08:ff:05:9c:e2:4b:f1:8b:8c:9c:eb:84: 42:54:96:5d:ca:2c:cf:3d:aa:d8:3b:50:ae:76:8b:4c:d7:58: 53:f4:2a:97:3f:39:67:5e:3d:cd:c8:c1:54:21:e2:01:9a:69: 51:4d:e8:4e:2b:25:7c:95:7f:22:eb:8d:56:d0:71:58:2e:94: 00:d2:e7:4d:dc:43:22:56:1e:a6:da:80:8f:b4:7e:89:35:71: 92:d4:9b:53:79:1e:c0:cc:cc:3a:f3:69:30:cf:9b:eb:1f:af: 79:81:06:51:1b:8c:cf:a7:d9:e0:ea:0b:5f:93:c1:2a:d7:79: 2a:1f:fd:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lx2ju0PiEJovNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ODAxNDJmZWUtMDYyZi00YmM0LWI1YjEtNjNiNGMxNTc0OGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYx5Le/7ww9qK8Q1sLxhCz3TNve1r3+wgD8I TtkVBZIy/66fXPdZl/BeIwFidfwKOJ+pZZ4CN3ETA02Yy3wMptMx5fiP9r92XlYF 9eUWEHqpD6et2HqDeUxSQgpZpYd20gFWAhIu2b41KgvLCIHvl75xVodHkUESaSI/ MdNPpWPSa+cOb84HNx29ZqefT9X8AJbutzRR1d0XTl07kT5jILfCc6UpwexAiKD0 eqB+0JPTqRir+HEbhFdkeoeCbOhPAGjLMQbCee7t2uI85VfuLpdhaNYiKziHURg9 kLk3YobV78Pe3owbP5h05MvAd7Fj84wOhsFLaxYxWXWgQa2MJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFT+fcUxAxi57qNmSFbQPeOO6+EsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvZmQxZjc1YmItYjMyMi0z MWQyLTk3ZDgtMjgzNzEzN2VlMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9aSwGBDVSBtv39vroUQb6bIEKx/2JBJBgaJjmnYPAHRPVkcuMaKAs2 XgDJ71qJz+gKlh6NlE3IVVCFQQP4AIXm5GYFAIBb1h5uAsVOx78bLX84nBsItDEz t0FDJVQyGjGveSKefLOxQHgULgdn4BJzdhGqKzPJ9L0ITCm8MqjLdmjyxwj/BZzi S/GLjJzrhEJUll3KLM89qtg7UK52i0zXWFP0Kpc/OWdePc3IwVQh4gGaaVFN6E4r JXyVfyLrjVbQcVgulADS503cQyJWHqbagI+0fok1cZLUm1N5HsDMzDrzaTDPm+sf r3mBBlEbjM+n2eDqC1+TwSrXeSof/eA= -----END CERTIFICATE-----Generated at Wed Jul 1 09:30:35 2026 by rpki-client