$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4876b7b-e753-3c1c-a3ee-6749a1495184.roa File: f4876b7b-e753-3c1c-a3ee-6749a1495184.roa (raw, json) Hash identifier: ZVMrhjbM9h/IBA87kQsg6nrAA3a7CAM2mslhLuhZKlY= Subject key identifier: E7:42:A8:8F:52:89:95:8A:E3:20:75:44:08:67:73:D2:99:9E:6F:7D Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D2BDA198DD2C2B4A41C62B1B0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4876b7b-e753-3c1c-a3ee-6749a1495184.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 64267 IP address blocks: 149.20.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:19:8d:d2:c2:b4:a4:1c:62:b1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=ede3f995-d0d9-4280-918f-544d04c3f5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:3e:f6:fa:4f:d8:d4:cb:09:f4:f7:d4:5c: 9b:07:96:a1:01:1c:10:99:03:33:df:93:db:14:c6: 8f:0d:de:fc:ad:01:b2:2a:a3:8d:01:f1:f7:cd:c3: 6b:2b:0e:f5:a1:0a:c5:cb:ad:41:52:c8:32:41:0d: ec:97:db:27:3d:a2:5a:c3:30:23:4e:44:c6:cc:3f: 6a:06:7e:c8:25:5f:91:50:a1:ef:fd:de:78:2e:00: 5c:93:9d:17:66:05:2d:b0:9a:7b:7b:b4:ae:2d:5a: 79:52:67:fb:85:06:ac:28:70:30:28:48:5d:f3:f9: 8c:b9:30:c4:74:ed:2f:f1:d8:d0:86:41:f1:66:24: c1:e7:f9:d4:5b:87:b1:3d:52:ea:89:39:12:2f:03: d2:da:f5:3f:0b:12:6f:44:5c:10:e1:3a:03:d1:ef: 32:46:25:f3:ab:02:69:a2:ca:8f:00:0b:7e:02:8b: af:70:8c:3f:8a:2e:06:aa:a6:23:b1:4a:df:f1:41: 03:d4:b2:21:58:5f:fe:86:b0:6e:0f:7a:67:e3:d4: 68:50:3e:fc:bc:fe:aa:cb:58:4c:a2:74:5e:70:a4: c4:39:e7:87:d8:aa:83:34:84:b7:2f:6e:36:e0:73: c5:16:e6:6e:d7:c6:cc:d6:1b:04:34:60:48:c0:bc: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:42:A8:8F:52:89:95:8A:E3:20:75:44:08:67:73:D2:99:9E:6F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4876b7b-e753-3c1c-a3ee-6749a1495184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7c:58:f9:59:ab:78:b0:be:62:9a:5d:f7:b1:65:65:22:d0: eb:f0:c2:64:f9:b2:d1:2f:14:b2:b8:2f:54:2e:12:7b:67:09: 51:34:44:b9:78:17:33:89:5a:44:20:59:f8:2b:43:2d:96:e2: 11:44:71:6e:d1:91:3b:91:42:91:af:f9:21:58:f4:8f:1c:a3: e2:76:df:1b:7f:3f:fb:2f:60:52:c5:cd:95:61:d6:2a:e2:40: 4d:bd:60:92:28:f7:f6:15:c6:ff:90:6f:c0:1d:d2:7e:54:dc: 8c:53:74:14:41:98:36:dc:cc:c6:22:35:2b:a9:ef:58:98:5f: 65:cb:33:2c:62:46:bb:e0:7e:68:d3:97:18:53:ad:27:75:ed: 3c:d9:d4:2b:5c:f5:ea:77:ad:bc:d3:46:0c:d6:2d:a2:4c:5c: 27:dc:66:af:40:80:b0:9b:1f:eb:a6:ec:9a:82:de:ab:7c:ed: c3:ee:c3:7d:70:f0:e9:3e:64:62:dd:7a:f5:db:67:70:d0:63: 06:0a:56:0c:70:a9:0c:86:9a:71:65:4d:72:28:82:48:ef:d7: 0a:80:f2:6f:64:37:50:53:ea:cd:5a:d6:d9:29:53:5c:c9:da: 73:31:9b:53:2d:91:fc:ac:e9:c3:34:18:f9:f9:08:f3:12:7b: f4:bd:75:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hmN0sK0pBxisbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZWRlM2Y5OTUtZDBkOS00MjgwLTkxOGYtNTQ0ZDA0YzNmNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4c+9vpP2NTLCfT31FybB5ahARwQmQMz35Pb FMaPDd78rQGyKqONAfH3zcNrKw71oQrFy61BUsgyQQ3sl9snPaJawzAjTkTGzD9q Bn7IJV+RUKHv/d54LgBck50XZgUtsJp7e7SuLVp5Umf7hQasKHAwKEhd8/mMuTDE dO0v8djQhkHxZiTB5/nUW4exPVLqiTkSLwPS2vU/CxJvRFwQ4ToD0e8yRiXzqwJp osqPAAt+AouvcIw/ii4GqqYjsUrf8UED1LIhWF/+hrBuD3pn49RoUD78vP6qy1hM onRecKTEOeeH2KqDNIS3L2424HPFFuZu18bM1hsENGBIwLyk2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdCqI9SiZWK4yB1RAhnc9KZnm99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZjQ4NzZiN2ItZTc1My0z YzFjLWEzZWUtNjc0OWExNDk1MTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV8WPlZq3iwvmKaXfexZWUi0OvwwmT5stEvFLK4L1QuEntnCVE0RLl4 FzOJWkQgWfgrQy2W4hFEcW7RkTuRQpGv+SFY9I8co+J23xt/P/svYFLFzZVh1iri QE29YJIo9/YVxv+Qb8Ad0n5U3IxTdBRBmDbczMYiNSup71iYX2XLMyxiRrvgfmjT lxhTrSd17TzZ1Ctc9ep3rbzTRgzWLaJMXCfcZq9AgLCbH+um7JqC3qt87cPuw31w 8Ok+ZGLdevXbZ3DQYwYKVgxwqQyGmnFlTXIogkjv1wqA8m9kN1BT6s1a1tkpU1zJ 2nMxm1Mtkfys6cM0GPn5CPMSe/S9dQw= -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:22 2026 by rpki-client