$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa File: 43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa (raw, json) Hash identifier: t/94nB5pikfQGGqIhrZPKs4zVoMN+u6ZMUAFFmTO6Oc= Subject key identifier: 8B:97:CC:9F:C1:D4:72:03:64:B7:2A:0C:18:C2:C3:29:D8:20:36:13 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D2BDA197E1C76712D1E38B2A0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 64267 IP address blocks: 149.20.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:19:7e:1c:76:71:2d:1e:38:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=c32f72aa-6e67-4704-9bc2-9724bcc0e0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:eb:2d:11:8c:7e:da:66:34:bd:40:5a:78: 97:d6:89:d3:1f:18:ff:69:8d:2b:9a:fe:58:c9:00: e9:45:35:66:fb:90:18:83:dd:62:14:18:c6:92:c3: dc:bf:c1:1c:5e:2f:cc:43:f2:18:0f:1a:58:3d:14: 9b:ab:f8:d7:65:59:60:b2:97:aa:83:f9:87:d7:cb: c1:47:03:6c:3b:40:3c:81:d0:5c:ac:85:77:04:a5: 4f:56:6e:4e:01:f2:6a:d4:50:ec:27:11:0e:7d:de: 1b:5c:8c:5e:d3:fa:c7:d7:a1:32:79:52:88:5e:af: c8:3e:bf:b7:83:3c:6c:e4:04:1c:3a:00:24:bb:44: 75:39:bd:3b:40:c2:f4:bc:8a:df:ce:4a:c4:d9:30: f2:89:98:50:f5:07:79:fa:52:7f:f5:51:72:f8:f5: 7b:d0:bb:7d:7d:44:64:8e:00:9e:1d:c9:ea:d8:04: 18:a6:4b:6b:ed:be:10:a2:f0:26:41:37:7a:3e:d3: 40:de:bb:f3:b7:48:f0:88:a5:5f:80:b1:63:72:eb: 10:17:d5:73:3e:57:22:80:ca:97:d6:9b:e3:97:37: 20:1c:1b:0f:8c:98:41:73:99:de:3a:56:b3:ba:a8: aa:4e:88:8e:11:fc:bf:bb:1e:05:37:eb:26:5a:34: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:97:CC:9F:C1:D4:72:03:64:B7:2A:0C:18:C2:C3:29:D8:20:36:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5a:28:26:a2:4d:49:a9:5b:c1:1d:86:91:58:91:3c:01:66: 57:90:da:d0:43:7f:48:e3:81:ab:c8:21:66:5c:01:1a:f6:10: 9b:ca:a9:1d:bd:13:e7:b3:97:44:fc:19:fa:87:69:71:4d:f5: 90:10:87:cc:f8:51:8c:f2:0b:b3:43:a1:04:a4:43:77:6a:a5: 0e:c1:6f:ae:4b:00:ed:48:e5:98:d9:23:24:05:df:ff:30:d6: 27:7f:fc:4d:fc:91:da:03:71:07:69:7f:30:66:f6:cc:6e:82: a8:80:d6:2d:e1:c7:98:70:4a:22:d2:9e:f3:ed:cf:6b:4a:42: 99:96:16:be:f4:a5:fd:69:39:2e:12:29:cf:e0:57:19:40:65: d4:b2:a9:15:4f:70:21:b2:d6:c0:5b:63:c9:d2:9d:2c:9d:de: 48:a4:d7:24:03:e6:7b:f9:38:e2:cb:d4:9b:77:03:be:61:3b: cb:57:f5:d4:15:34:e6:94:fb:b3:12:2c:bf:64:0f:fe:cb:83: 2b:c3:b6:2f:b0:bc:94:16:da:8f:63:f8:16:c2:ce:1b:79:5b: 71:72:40:a0:d0:82:d6:85:b9:04:2e:23:62:c2:41:d5:2e:49: f1:ea:23:e7:f2:9f:8d:9a:30:ea:5d:a3:42:56:2c:b1:b4:ea: 7f:3f:ff:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hl+HHZxLR44sqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YzMyZjcyYWEtNmU2Ny00NzA0LTliYzItOTcyNGJjYzBlMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgPrLRGMftpmNL1AWniX1onTHxj/aY0rmv5Y yQDpRTVm+5AYg91iFBjGksPcv8EcXi/MQ/IYDxpYPRSbq/jXZVlgspeqg/mH18vB RwNsO0A8gdBcrIV3BKVPVm5OAfJq1FDsJxEOfd4bXIxe0/rH16EyeVKIXq/IPr+3 gzxs5AQcOgAku0R1Ob07QML0vIrfzkrE2TDyiZhQ9Qd5+lJ/9VFy+PV70Lt9fURk jgCeHcnq2AQYpktr7b4QovAmQTd6PtNA3rvzt0jwiKVfgLFjcusQF9VzPlcigMqX 1pvjlzcgHBsPjJhBc5neOlazuqiqToiOEfy/ux4FN+smWjQSfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuXzJ/B1HIDZLcqDBjCwynYIDYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDNlMDkwNGUtYjNkZC0z OWI1LWE1ZjUtZTIzN2UzOGJiNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBaKCaiTUmpW8EdhpFYkTwBZleQ2tBDf0jjgavIIWZcARr2EJvKqR29 E+ezl0T8GfqHaXFN9ZAQh8z4UYzyC7NDoQSkQ3dqpQ7Bb65LAO1I5ZjZIyQF3/8w 1id//E38kdoDcQdpfzBm9sxugqiA1i3hx5hwSiLSnvPtz2tKQpmWFr70pf1pOS4S Kc/gVxlAZdSyqRVPcCGy1sBbY8nSnSyd3kik1yQD5nv5OOLL1Jt3A75hO8tX9dQV NOaU+7MSLL9kD/7LgyvDti+wvJQW2o9j+BbCzht5W3FyQKDQgtaFuQQuI2LCQdUu SfHqI+fyn42aMOpdo0JWLLG06n8//64= -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:52 2026 by rpki-client