$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa File: cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa (raw, json) Hash identifier: k3syy8Dk4h54T+hJ0wmg03r2EX2QIIP3OTWPjd5PwRA= Subject key identifier: C1:DA:56:4A:3A:96:23:10:1B:C8:A1:E6:39:35:95:2A:0C:E9:45:65 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D2BDA199D8D1C1D48209C3560 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 64267 IP address blocks: 149.20.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:19:9d:8d:1c:1d:48:20:9c:35:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=2ba79db2-131d-485f-b301-6b8e6f060223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:0b:cc:df:97:81:4a:c4:43:66:48:33:bb: c0:13:b8:25:3e:72:28:89:a7:25:a3:cd:91:db:ba: d4:95:0d:fd:bc:66:9d:5b:30:03:d6:44:c3:6b:67: 4b:f0:de:8e:65:be:79:d1:c2:8e:45:66:4c:4d:d9: 8d:15:cb:8d:b8:8c:d2:d1:66:12:fe:fa:fa:b5:e2: 1d:ca:d1:28:fb:1e:c9:6b:18:d5:8c:bb:25:36:47: 01:5d:43:6e:71:9c:b8:5d:62:89:93:ca:88:b4:33: 54:c1:f5:b9:e4:49:58:41:cd:3a:e3:63:be:d7:ad: 9c:3f:c8:33:8c:86:18:f8:17:28:f0:a5:bf:6a:7d: 2b:3b:e9:33:63:8a:43:18:d6:38:4b:70:79:48:7f: be:bf:c1:f0:19:e8:15:eb:f0:4b:fe:cc:1e:a3:5a: 08:d4:a0:ba:8b:74:0c:a0:15:36:3d:71:4b:c3:94: 58:90:a6:0f:d6:4d:68:2e:8e:5e:33:04:33:7c:f0: 6b:73:77:7f:89:31:dc:87:d8:fa:aa:01:c6:4f:37: 2c:4d:31:14:60:e3:6c:2e:c4:2d:b8:a1:4f:f2:f0: ab:e7:ce:39:99:e7:40:63:72:7b:a0:83:92:d1:85: 11:b6:b7:ef:a2:1d:b8:b5:80:24:fb:60:7d:9f:2f: 2c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DA:56:4A:3A:96:23:10:1B:C8:A1:E6:39:35:95:2A:0C:E9:45:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e9:12:da:ca:a7:bb:d0:42:d5:00:97:5f:f3:72:f6:93:ac: ad:2a:e3:19:b1:a0:f9:55:e0:8d:0c:1f:02:43:c9:61:0e:b7: 32:07:70:db:fc:90:d2:0d:14:8b:9d:1e:82:7d:61:2a:be:08: 89:ff:01:c5:c9:fe:10:d6:82:41:4d:6a:6b:6e:00:c9:d4:0a: 18:81:c2:9b:c8:bc:73:32:46:8a:69:c7:6d:a2:cc:08:2a:16: 3d:e5:94:8e:ff:50:ec:0c:67:8e:68:f2:ae:4a:6b:5e:65:78: 0b:b7:92:ea:20:b4:1f:2a:aa:78:d7:ab:32:82:f3:58:1b:1b: c8:1c:1c:0c:0e:4f:05:65:18:1e:be:e8:dd:94:55:a1:e6:01: f4:16:60:dd:3c:e3:2e:e3:d5:51:78:57:2b:b7:3b:d6:3a:1a: bc:14:37:b4:8c:16:0d:92:12:84:07:ac:94:2e:ae:37:e2:34: 03:9d:15:7f:9e:f8:96:8a:d2:4f:8c:15:cb:16:0b:e1:18:e4: 8d:8f:22:38:d8:2e:a0:75:40:ab:76:b4:36:2e:e4:db:b9:3c: 84:67:d8:aa:61:b7:1d:ff:a7:4c:4d:ec:2a:dc:d9:95:51:74: d8:b2:64:73:12:07:c5:ae:22:13:ce:73:fc:e2:7a:23:a4:06: bc:fb:84:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hmdjRwdSCCcNWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MmJhNzlkYjItMTMxZC00ODVmLWIzMDEtNmI4ZTZmMDYwMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/cLzN+XgUrEQ2ZIM7vAE7glPnIoiaclo82R 27rUlQ39vGadWzAD1kTDa2dL8N6OZb550cKORWZMTdmNFcuNuIzS0WYS/vr6teId ytEo+x7JaxjVjLslNkcBXUNucZy4XWKJk8qItDNUwfW55ElYQc0642O+162cP8gz jIYY+Bco8KW/an0rO+kzY4pDGNY4S3B5SH++v8HwGegV6/BL/sweo1oI1KC6i3QM oBU2PXFLw5RYkKYP1k1oLo5eMwQzfPBrc3d/iTHch9j6qgHGTzcsTTEUYONsLsQt uKFP8vCr5845medAY3J7oIOS0YURtrfvoh24tYAk+2B9ny8sdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHaVko6liMQG8ih5jk1lSoM6UVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvY2Q5ZmFkYzktYTAyYy0z NzJmLTllNzMtZWYxYjJiYWU1ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXpEtrKp7vQQtUAl1/zcvaTrK0q4xmxoPlV4I0MHwJDyWEOtzIHcNv8 kNINFIudHoJ9YSq+CIn/AcXJ/hDWgkFNamtuAMnUChiBwpvIvHMyRoppx22izAgq Fj3llI7/UOwMZ45o8q5Ka15leAu3kuogtB8qqnjXqzKC81gbG8gcHAwOTwVlGB6+ 6N2UVaHmAfQWYN084y7j1VF4Vyu3O9Y6GrwUN7SMFg2SEoQHrJQurjfiNAOdFX+e +JaK0k+MFcsWC+EY5I2PIjjYLqB1QKt2tDYu5Nu5PIRn2Kphtx3/p0xN7Crc2ZVR dNiyZHMSB8WuIhPOc/zieiOkBrz7hLg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:53 2026 by rpki-client