$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd8e30c6-1320-3420-b794-8332e5c08297.roa File: dd8e30c6-1320-3420-b794-8332e5c08297.roa (raw, json) Hash identifier: IoLy+tZXGkYakGqMTVzjzFyoD8p4cECGxM+bLFZGGTM= Subject key identifier: BD:F4:36:21:F1:24:A3:A9:B3:E7:C8:15:EC:63:1B:DB:14:1B:36:6A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E11B4336BB708E4629CBF0100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd8e30c6-1320-3420-b794-8332e5c08297.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 396443 IP address blocks: 149.120.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:33:6b:b7:08:e4:62:9c:bf:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=936d19b2-8f7b-4adc-ba19-fc5fd00df8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:16:ad:6c:10:2c:31:78:15:f0:5c:8b:4d:0a: d2:ee:c0:d4:bb:5e:64:eb:10:6f:30:84:d7:c7:53: ee:17:13:50:43:71:91:25:bc:92:1b:10:17:13:b7: 81:df:b6:e3:ac:9f:19:b5:a5:bd:96:fe:c3:1e:0d: 93:37:6f:c4:da:35:7c:bb:22:e2:0c:8a:7b:ea:18: 58:bb:f1:86:db:56:2a:5e:6d:c5:59:e8:83:af:b8: 9e:de:64:37:d8:c2:d1:7c:e6:77:04:43:08:6e:ae: 7e:73:43:b9:6c:65:d6:79:25:75:a3:88:8f:b0:c6: 01:05:e6:f9:c6:76:0e:6a:03:82:10:89:13:c6:60: 0a:89:80:99:7f:79:fc:ef:b8:09:6b:06:1f:91:6a: fd:d9:9c:a3:5b:b3:9c:fb:e3:24:86:60:bc:13:1b: bf:56:fc:46:58:0a:8b:e7:0c:e9:32:9a:f3:bd:43: 5e:b7:5e:a8:91:c6:09:c8:cd:8e:3c:ed:ab:b1:d1: 0d:ce:88:44:22:8c:0b:63:28:f3:c9:42:95:53:c5: 14:1a:d8:b6:cb:7e:cd:d3:2a:69:9f:e6:c5:31:03: 29:91:34:f8:b4:89:da:f4:aa:fe:45:9c:d6:68:6e: 2d:c2:4d:d3:2a:e5:f9:92:c1:b9:50:f1:16:f8:74: 5b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F4:36:21:F1:24:A3:A9:B3:E7:C8:15:EC:63:1B:DB:14:1B:36:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd8e30c6-1320-3420-b794-8332e5c08297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.120.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e1:d4:00:0b:25:7a:d0:21:73:bc:c8:8d:b1:6e:1e:05:58: 28:e9:6f:41:60:e3:bd:0f:f3:bf:22:d0:64:a5:bb:e7:4a:54: 58:96:0a:a1:10:08:ca:94:8e:7a:0d:2f:ba:d6:c7:a5:7e:e2: 65:c2:ec:82:7a:05:a7:69:db:87:23:cf:27:8d:6d:20:4f:6d: 04:fe:08:09:5a:b9:a0:0f:92:12:50:22:11:73:96:4e:17:d1: ec:c3:33:2d:b1:04:a4:a0:b2:3f:16:ad:63:0d:bf:96:c4:19: 23:98:34:57:24:f4:70:76:ec:f4:97:7f:90:b4:70:e2:36:85: 9a:31:7c:a0:68:6c:5e:a4:f4:02:dd:70:a5:a4:89:03:45:ea: 65:17:8f:ae:69:49:77:e8:88:4f:42:70:13:0b:ce:92:65:f3: 36:2d:39:85:da:5a:23:72:bb:6d:38:47:37:ff:b9:63:b4:47: f2:f6:95:53:ec:2d:01:97:c8:e0:1d:ba:1f:77:16:41:85:d8: a6:7a:22:78:70:fa:b6:8c:10:42:9e:59:e0:17:bb:f7:f2:bc: f1:52:94:11:11:bd:5d:18:db:d6:0f:57:2e:f9:67:41:96:02: 22:a9:45:8d:fd:34:78:94:f6:c7:d3:c3:21:67:49:7b:1f:34: 7c:42:be:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4RtDNrtwjkYpy/AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk OTM2ZDE5YjItOGY3Yi00YWRjLWJhMTktZmM1ZmQwMGRmOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRatbBAsMXgV8FyLTQrS7sDUu15k6xBvMITX x1PuFxNQQ3GRJbySGxAXE7eB37bjrJ8ZtaW9lv7DHg2TN2/E2jV8uyLiDIp76hhY u/GG21YqXm3FWeiDr7ie3mQ32MLRfOZ3BEMIbq5+c0O5bGXWeSV1o4iPsMYBBeb5 xnYOagOCEIkTxmAKiYCZf3n877gJawYfkWr92ZyjW7Oc++MkhmC8Exu/VvxGWAqL 5wzpMprzvUNet16okcYJyM2OPO2rsdENzohEIowLYyjzyUKVU8UUGti2y37N0ypp n+bFMQMpkTT4tIna9Kr+RZzWaG4twk3TKuX5ksG5UPEW+HRbhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL30NiHxJKOps+fIFexjG9sUGzZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGQ4ZTMwYzYtMTMyMC0z NDIwLWI3OTQtODMzMmU1YzA4Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElXgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbh1AALJXrQIXO8yI2xbh4FWCjpb0Fg470P878i0GSlu+dKVFiWCqEQ CMqUjnoNL7rWx6V+4mXC7IJ6Badp24cjzyeNbSBPbQT+CAlauaAPkhJQIhFzlk4X 0ezDMy2xBKSgsj8WrWMNv5bEGSOYNFck9HB27PSXf5C0cOI2hZoxfKBobF6k9ALd cKWkiQNF6mUXj65pSXfoiE9CcBMLzpJl8zYtOYXaWiNyu204Rzf/uWO0R/L2lVPs LQGXyOAduh93FkGF2KZ6Inhw+raMEEKeWeAXu/fyvPFSlBERvV0Y29YPVy75Z0GW AiKpRY39NHiU9sfTwyFnSXsfNHxCvrA= -----END CERTIFICATE-----Generated at Fri Jun 12 22:40:39 2026 by rpki-client