$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7b4ab37-4412-3c1f-b952-5abd1e8db983.roa File: b7b4ab37-4412-3c1f-b952-5abd1e8db983.roa (raw, json) Hash identifier: HYY0xQr9lOTwQweBqdpu46mHqlUElwPKsAhsOWRpbvo= Subject key identifier: DE:D9:19:17:29:16:53:D7:89:E2:B4:55:21:AF:7C:30:D1:17:AF:01 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D362BB2A487299FCD3451B600 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7b4ab37-4412-3c1f-b952-5abd1e8db983.roa Signing time: Wed 18 Mar 2026 17:43:16 +0000 ROA not before: Wed 18 Mar 2026 17:43:16 +0000 ROA not after: Tue 16 Jun 2026 17:43:16 +0000 asID: 20001 IP address blocks: 149.20.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:2b:b2:a4:87:29:9f:cd:34:51:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 18 17:43:16 2026 GMT Not After : Jun 16 17:43:16 2026 GMT Subject: CN=679f46d0-813c-4b3d-882f-c6a6732119c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:87:8f:25:6b:c3:bb:96:84:fa:66:a7:07: 91:1b:67:a2:6e:09:62:3f:66:17:cc:19:b0:c7:9f: 79:9a:38:d0:ec:67:2f:bf:92:50:b3:3d:a5:84:8a: 7c:45:0e:0d:3f:81:2e:d5:94:16:66:3f:54:34:f4: f3:d8:1b:07:18:a4:e8:07:3e:ad:f8:de:68:8d:d6: 37:88:21:aa:d4:48:57:1e:74:a4:90:5b:f3:4f:6f: 51:96:ca:ae:6b:00:6f:3c:16:93:d8:f4:4e:53:00: 32:4b:bc:50:db:00:ca:fe:f4:e2:67:07:d3:1d:c3: c1:2e:60:bd:3c:85:b7:6a:2e:eb:9c:bd:b8:ac:d1: c9:fc:db:db:15:20:b2:46:22:5a:d5:79:7b:db:b4: ec:d9:d3:df:05:a2:37:c1:d9:b8:26:7e:f8:b9:15: 36:48:1f:fd:ff:e2:cd:15:45:9e:87:c5:ff:92:0b: 75:2b:2a:79:57:8c:8a:80:b4:0c:55:4f:b8:f9:7f: 92:91:46:4e:32:0c:2a:63:d8:1f:ba:d7:cb:af:e9: f3:f6:27:28:50:2a:17:8b:68:63:a9:87:01:d0:99: 6c:d9:57:dd:a7:23:7e:c9:78:9c:2a:73:05:ec:75: bc:92:de:7c:74:b3:41:ae:24:a4:89:53:7e:ed:0b: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D9:19:17:29:16:53:D7:89:E2:B4:55:21:AF:7C:30:D1:17:AF:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7b4ab37-4412-3c1f-b952-5abd1e8db983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:9d:0f:03:c4:82:22:1d:42:ef:45:72:8c:0c:f8:8a:57:00: 0f:95:27:3b:f1:7b:e1:aa:e7:1d:f2:5f:bb:5b:37:aa:fc:c1: 6f:d5:19:8c:c0:7d:13:ff:24:01:50:4d:7a:7a:ed:4d:f4:67: d0:3b:50:14:9c:62:53:d1:f5:3e:aa:cc:ef:c4:bd:64:2c:b7: e9:d0:a8:87:12:83:e6:fd:51:63:d7:db:51:86:f3:af:7f:71: fc:0f:a8:72:c5:69:37:6b:58:c2:af:70:d7:e7:9f:dd:01:72: 59:d3:f9:05:da:1a:65:d6:0b:ae:54:80:ca:20:c9:c5:b9:c1: f3:34:48:7f:56:77:c9:51:23:fc:34:e4:b2:7f:70:f6:cd:42: c4:90:e5:12:7f:e2:4d:0f:68:61:9c:5d:d2:ce:7f:8e:2d:31: 86:90:f9:2f:3d:0f:bd:9a:d7:2b:8b:ac:34:50:76:b1:2c:ca: 3d:10:7e:8d:15:39:3d:47:2d:ee:d4:c3:df:73:b8:f3:5e:de: 9b:6b:ac:68:4b:8f:41:58:8e:ae:83:39:36:60:86:a3:8e:29: 77:b3:e5:a0:c6:07:cd:34:2b:b3:09:37:ba:5c:3f:e3:6d:a8: 81:ff:e6:ec:3e:88:37:a3:67:48:d6:38:6a:d1:64:6d:af:53: bc:1d:b0:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02K7KkhymfzTRRtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMxODE3NDMxNloXDTI2MDYxNjE3NDMxNlowLzEtMCsGA1UEAxMk Njc5ZjQ2ZDAtODEzYy00YjNkLTg4MmYtYzZhNjczMjExOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcCHjyVrw7uWhPpmpweRG2eibgliP2YXzBmw x595mjjQ7Gcvv5JQsz2lhIp8RQ4NP4Eu1ZQWZj9UNPTz2BsHGKToBz6t+N5ojdY3 iCGq1EhXHnSkkFvzT29RlsquawBvPBaT2PROUwAyS7xQ2wDK/vTiZwfTHcPBLmC9 PIW3ai7rnL24rNHJ/NvbFSCyRiJa1Xl727Ts2dPfBaI3wdm4Jn74uRU2SB/9/+LN FUWeh8X/kgt1Kyp5V4yKgLQMVU+4+X+SkUZOMgwqY9gfutfLr+nz9icoUCoXi2hj qYcB0Jls2VfdpyN+yXicKnMF7HW8kt58dLNBriSkiVN+7Qt/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7ZGRcpFlPXieK0VSGvfDDRF68BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYjdiNGFiMzctNDQxMi0z YzFmLWI5NTItNWFiZDFlOGRiOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRTyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANWdDwPEgiIdQu9FcowM+IpXAA+VJzvxe+Gq5x3yX7tbN6r8wW/VGYzA fRP/JAFQTXp67U30Z9A7UBScYlPR9T6qzO/EvWQst+nQqIcSg+b9UWPX21GG869/ cfwPqHLFaTdrWMKvcNfnn90BclnT+QXaGmXWC65UgMogycW5wfM0SH9Wd8lRI/w0 5LJ/cPbNQsSQ5RJ/4k0PaGGcXdLOf44tMYaQ+S89D72a1yuLrDRQdrEsyj0Qfo0V OT1HLe7Uw99zuPNe3ptrrGhLj0FYjq6DOTZghqOOKXez5aDGB800K7MJN7pcP+Nt qIH/5uw+iDejZ0jWOGrRZG2vU7wdsHE= -----END CERTIFICATE-----Generated at Thu Mar 26 06:01:08 2026 by rpki-client