$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/30636b11-8ba4-3e98-9450-4599dd69f72e.roa File: 30636b11-8ba4-3e98-9450-4599dd69f72e.roa (raw, json) Hash identifier: HUCImArVGYYbv9p7QJABdE73hCBNzeE+c5ZDGgc1HCA= Subject key identifier: CE:F2:9A:A2:01:DE:02:2F:C0:8A:68:19:60:87:C1:AC:01:9F:E9:13 Certificate issuer: /CN=45718731-be33-4e2d-a8ff-5c444109d0ad Certificate serial: 010D0C9F4328584D0A7799273FDBC58153DA7680 Authority key identifier: DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/30636b11-8ba4-3e98-9450-4599dd69f72e.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 149.28.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:99:27:3f:db:c5:81:53:da:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45718731-be33-4e2d-a8ff-5c444109d0ad Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=44575b52-b6cf-4ba0-8710-1fd42174a71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:55:6d:af:b7:60:3f:7d:fd:96:b9:71:e9: 9f:58:36:d8:d1:e1:c6:8b:71:b0:30:fc:d4:91:00: 69:f2:31:95:19:ab:4b:d8:c8:21:41:3f:96:66:34: 7d:ef:7b:03:9c:14:42:69:5b:d5:fd:61:3e:8f:ca: d3:a8:15:9b:58:a2:59:f9:da:73:be:9c:86:8e:37: 95:22:44:64:fe:1d:7a:4b:25:b0:50:1d:17:ca:c6: f1:6b:cc:52:b5:24:c6:50:3e:d5:66:00:14:51:be: 52:70:5e:07:84:60:37:9f:83:b8:6c:18:eb:cc:9d: 3c:a0:23:8b:21:14:78:20:90:04:ff:e6:3c:90:a8: d6:fa:88:c9:fc:4c:5a:84:96:28:7a:5f:90:be:4b: 98:38:f4:af:50:df:84:dc:9f:2a:3b:73:3a:18:1e: 47:3e:48:3c:ec:10:d7:99:1f:95:4b:75:56:0b:e6: ea:3e:95:da:76:51:f0:b3:7f:08:8a:c0:06:b8:87: 7a:bc:78:1a:a3:47:0e:bd:b5:1f:29:6e:a1:f2:2b: 7c:63:8f:9b:e7:75:39:74:38:fd:76:99:b9:c2:10: ce:f7:98:3a:64:87:2b:59:a1:dc:8a:2c:0b:c4:73: 86:f8:47:ad:38:b7:0f:e6:f1:59:01:39:d6:57:30: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F2:9A:A2:01:DE:02:2F:C0:8A:68:19:60:87:C1:AC:01:9F:E9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/30636b11-8ba4-3e98-9450-4599dd69f72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.crl X509v3 Authority Key Identifier: keyid:DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer sbgp-ipAddrBlock: critical IPv4: 149.28.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:68:09:bf:d0:f7:c5:67:3a:bf:b2:ed:7b:b8:8b:ef:06:3d: 48:1e:66:14:fd:08:29:22:b5:90:88:18:d1:83:96:0d:f3:ff: 1f:0b:7b:df:a3:69:43:6b:ef:65:2c:da:d4:02:ef:fd:e8:d3: a2:b6:b7:69:59:1d:c6:18:b1:2f:78:97:cc:6d:59:48:bc:01: 36:63:c3:8e:e3:53:18:6e:94:8a:c6:5c:df:ed:30:a7:77:c2: f8:91:f5:9d:85:a8:66:56:76:1a:0f:e2:dd:f9:9d:d8:b7:8b: d9:55:6b:9e:5f:f4:fb:9a:a3:62:90:97:35:ad:41:5e:1f:e6: a0:67:4f:55:43:9d:e7:0e:7d:21:24:03:99:61:22:1e:de:29: 99:bc:e4:0a:b1:70:b8:66:04:4c:76:36:51:65:73:75:ed:34: f8:2b:e4:ea:85:ef:a6:ae:52:69:2c:41:a0:c3:17:94:d8:31: 8c:d0:d8:fe:f8:43:2b:ea:75:3e:09:aa:39:03:ce:06:c7:29: 7e:e3:3a:fa:fe:7e:f2:eb:1c:6d:df:7f:0c:c3:7c:a3:3d:bb: d4:70:cd:13:d9:b3:ff:67:b1:a5:6a:fc:b5:d1:0a:ef:34:0d: b2:da:1c:71:24:27:70:51:c0:e8:2d:76:1c:9c:bd:fc:75:11: cf:1e:20:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd5knP9vFgVPadoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU3MTg3MzEtYmUzMy00ZTJkLWE4ZmYtNWM0NDQxMDlk MGFkMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk NDQ1NzViNTItYjZjZi00YmEwLTg3MTAtMWZkNDIxNzRhNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYVVba+3YD99/Za5cemfWDbY0eHGi3GwMPzU kQBp8jGVGatL2MghQT+WZjR973sDnBRCaVvV/WE+j8rTqBWbWKJZ+dpzvpyGjjeV IkRk/h16SyWwUB0Xysbxa8xStSTGUD7VZgAUUb5ScF4HhGA3n4O4bBjrzJ08oCOL IRR4IJAE/+Y8kKjW+ojJ/ExahJYoel+QvkuYOPSvUN+E3J8qO3M6GB5HPkg87BDX mR+VS3VWC+bqPpXadlHws38IisAGuId6vHgao0cOvbUfKW6h8it8Y4+b53U5dDj9 dpm5whDO95g6ZIcrWaHciiwLxHOG+EetOLcP5vFZATnWVzBteQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7ymqIB3gIvwIpoGWCHwawBn+kTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTcx ODczMS1iZTMzLTRlMmQtYThmZi01YzQ0NDEwOWQwYWQvMzA2MzZiMTEtOGJhNC0z ZTk4LTk0NTAtNDU5OWRkNjlmNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU3MTg3MzEtYmUzMy00ZTJkLWE4 ZmYtNWM0NDQxMDlkMGFkLzQ1NzE4NzMxLWJlMzMtNGUyZC1hOGZmLTVjNDQ0MTA5 ZDBhZC5jcmwwHwYDVR0jBBgwFoAU3vyj43DeIThjPi4QH7jxu69ar2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80NTcxODczMS1iZTMzLTRlMmQtYThmZi01YzQ0 NDEwOWQwYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBoCb/Q98VnOr+y7Xu4i+8GPUgeZhT9CCkitZCIGNGDlg3z/x8Le9+j aUNr72Us2tQC7/3o06K2t2lZHcYYsS94l8xtWUi8ATZjw47jUxhulIrGXN/tMKd3 wviR9Z2FqGZWdhoP4t35ndi3i9lVa55f9Puao2KQlzWtQV4f5qBnT1VDnecOfSEk A5lhIh7eKZm85AqxcLhmBEx2NlFlc3XtNPgr5OqF76auUmksQaDDF5TYMYzQ2P74 QyvqdT4JqjkDzgbHKX7jOvr+fvLrHG3ffwzDfKM9u9RwzRPZs/9nsaVq/LXRCu80 DbLaHHEkJ3BRwOgtdhycvfx1Ec8eIAQ= -----END CERTIFICATE-----Generated at Thu Mar 19 15:34:42 2026 by rpki-client