$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/20de0f53-770f-3aae-b344-44ff91dc2251.roa File: 20de0f53-770f-3aae-b344-44ff91dc2251.roa (raw, json) Hash identifier: hFPoaZLJ0sy9joItAcEjv4oZ1e5BTWL4/mn4w94uLbs= Subject key identifier: 1B:BE:55:A2:60:41:BE:90:7B:08:3C:4B:E0:83:89:9B:F0:6C:0E:0F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EE6AC1C3F4065FB5929280800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/20de0f53-770f-3aae-b344-44ff91dc2251.roa Signing time: Thu 20 Aug 2026 15:51:13 +0000 ROA not before: Thu 20 Aug 2026 15:51:13 +0000 ROA not after: Wed 18 Nov 2026 16:51:13 +0000 asID: 9009 IP address blocks: 149.18.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:ac:1c:3f:40:65:fb:59:29:28:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 20 15:51:13 2026 GMT Not After : Nov 18 16:51:13 2026 GMT Subject: CN=0d3af63b-829e-406c-bbd4-5ed7d032a407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:90:d1:0f:f5:e9:47:7b:ba:42:19:5d:a7: 71:85:16:f4:dd:61:d9:d5:90:08:76:01:b5:94:82: 39:eb:82:53:55:50:7c:96:af:62:a2:e7:dd:e9:08: b1:a4:f0:1a:dd:83:18:02:59:fc:bb:b8:69:16:04: c6:95:c7:74:03:39:43:5a:13:e4:b0:43:17:89:58: 9d:1d:6f:23:47:fa:1e:1e:53:38:46:45:56:0d:8b: 42:ab:a1:98:2b:cc:ff:f6:78:1c:a1:11:b7:29:4b: 5f:90:4c:6c:16:c6:30:2d:31:96:21:44:da:24:98: 47:ac:66:27:87:fd:b9:67:99:8a:d3:48:c4:d3:22: e3:5f:0c:15:3d:fd:50:a1:53:66:d1:c0:a2:1d:45: 3e:fb:64:36:ab:c6:ef:38:c2:0c:58:8b:36:9c:3b: b5:b2:02:96:f2:4a:1a:04:bf:6c:97:a8:82:47:22: 9e:87:4c:69:47:e9:54:7b:26:10:a8:bb:bf:d6:8a: b6:3c:12:ec:8c:04:10:bd:5e:91:1d:54:bb:ac:7d: 13:4c:67:a6:c3:a1:bd:17:b8:61:95:be:6c:19:5a: f1:66:5d:57:7c:ed:40:6a:8e:83:60:e5:9f:6e:60: a0:40:53:f3:b3:82:08:91:a2:33:76:58:f6:d2:99: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BE:55:A2:60:41:BE:90:7B:08:3C:4B:E0:83:89:9B:F0:6C:0E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/20de0f53-770f-3aae-b344-44ff91dc2251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.18.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b4:e8:57:81:77:e7:6b:7b:a9:ac:57:e2:a2:19:bb:95:53: 6b:b3:f5:b2:f0:0e:40:8d:30:4d:db:3a:2e:91:87:c9:07:bb: 38:6c:67:cb:5f:1c:b9:2c:f5:8b:f8:a7:b3:12:78:f5:ad:5a: 22:10:c6:01:52:cf:28:b8:23:1b:a9:49:df:55:33:28:95:d8: 21:64:ad:e9:a6:6e:2e:65:ac:2b:dd:58:53:73:c3:cf:78:6c: 58:89:55:8a:c8:e1:c6:94:74:69:6e:c4:10:02:81:bd:a9:96: a3:b9:c0:ef:ae:7e:ed:a7:b1:53:4b:e4:84:72:f6:47:0e:28: 4c:c1:17:46:31:c1:73:31:38:3b:51:df:92:cb:02:4b:8d:bf: 87:f4:07:08:58:9d:cb:f0:c6:e8:b2:0c:7a:f4:4f:d6:c2:88: 27:8d:fd:ac:12:9d:52:4c:e3:05:e8:f0:5e:91:b1:0a:26:46: 9e:4e:2e:e3:66:86:5f:07:a5:7a:3c:75:19:92:1d:fb:e4:d9: 06:1d:ad:93:37:e5:3c:d9:5b:d1:29:33:3b:b9:2e:ff:94:be: 6f:40:6f:30:f9:ad:6e:df:44:c9:28:c0:ee:c1:93:29:50:c6: 47:c3:6f:4f:da:76:86:b7:58:a8:91:6c:03:2f:93:6f:6c:88: a2:33:d7:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7mrBw/QGX7WSkoCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMDE1NTExM1oXDTI2MTExODE2NTExM1owLzEtMCsGA1UEAxMk MGQzYWY2M2ItODI5ZS00MDZjLWJiZDQtNWVkN2QwMzJhNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst+Q0Q/16Ud7ukIZXadxhRb03WHZ1ZAIdgG1 lII564JTVVB8lq9ioufd6QixpPAa3YMYAln8u7hpFgTGlcd0AzlDWhPksEMXiVid HW8jR/oeHlM4RkVWDYtCq6GYK8z/9ngcoRG3KUtfkExsFsYwLTGWIUTaJJhHrGYn h/25Z5mK00jE0yLjXwwVPf1QoVNm0cCiHUU++2Q2q8bvOMIMWIs2nDu1sgKW8koa BL9sl6iCRyKeh0xpR+lUeyYQqLu/1oq2PBLsjAQQvV6RHVS7rH0TTGemw6G9F7hh lb5sGVrxZl1XfO1Aao6DYOWfbmCgQFPzs4IIkaIzdlj20pm6LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBu+VaJgQb6Qewg8S+CDiZvwbA4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjBkZTBmNTMtNzcwZi0z YWFlLWIzNDQtNDRmZjkxZGMyMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRL1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu06FeBd+dre6msV+KiGbuVU2uz9bLwDkCNME3bOi6Rh8kHuzhsZ8tf HLks9Yv4p7MSePWtWiIQxgFSzyi4IxupSd9VMyiV2CFkremmbi5lrCvdWFNzw894 bFiJVYrI4caUdGluxBACgb2plqO5wO+ufu2nsVNL5IRy9kcOKEzBF0YxwXMxODtR 35LLAkuNv4f0BwhYncvwxuiyDHr0T9bCiCeN/awSnVJM4wXo8F6RsQomRp5OLuNm hl8HpXo8dRmSHfvk2QYdrZM35TzZW9EpMzu5Lv+Uvm9AbzD5rW7fRMkowO7BkylQ xkfDb0/adoa3WKiRbAMvk29siKIz14c= -----END CERTIFICATE-----Generated at Tue Sep 1 02:08:45 2026 by rpki-client