$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa File: 3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa (raw, json) Hash identifier: CJDHIt8z3pqUAC/NwNkYKZsczil83iRGdk+cBh+xyZg= Subject key identifier: 63:B3:E5:63:23:3E:86:DD:A5:BB:D7:48:8C:A8:93:DF:B1:CE:BA:35 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584EDC91EE1456E8177ACD57FF80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 1280 IP address blocks: 149.20.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:ee:14:56:e8:17:7a:cd:57:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=07c867b4-a798-4a8f-b787-9b350ff3ae03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:53:2b:34:9b:43:48:32:1a:99:18:3e:c7: 92:8b:b3:2e:eb:62:30:6c:8a:62:5f:62:43:94:60: 41:00:ec:e9:a1:43:d0:b7:b0:40:bd:58:53:0a:04: 0f:ac:fb:08:a5:4d:fe:4e:db:04:4a:0d:3e:9b:7e: 55:a9:06:30:7b:ef:7e:85:b3:5a:28:25:40:af:e1: f2:ab:00:91:d2:8d:0c:72:04:41:68:35:c7:11:fd: 79:5f:e4:d8:c0:5b:c5:17:db:60:7a:96:0b:ae:00: 59:ff:2f:b0:ac:d8:58:be:9a:e3:2b:b4:3c:ae:3e: b7:ed:e9:e3:c8:22:01:2e:4f:0e:cf:54:05:62:ad: 7e:c0:1e:af:30:f0:1a:5a:3e:31:60:26:00:99:67: 83:af:e5:89:96:32:19:a9:c2:84:b4:ac:3b:fe:2d: 1d:bb:ff:cd:9d:88:fa:e4:3e:d6:52:2e:a4:c9:cd: 57:10:99:2d:33:b5:13:56:c8:8e:4d:04:ce:53:ae: e7:e9:5a:c1:65:25:cc:2b:84:07:41:6f:7b:33:1f: ad:1f:a4:0c:01:30:bb:57:15:14:67:c4:97:a7:0c: a5:e5:35:19:c5:49:7f:27:5d:7b:7f:46:52:27:07: c4:db:f7:13:49:71:2e:46:78:cf:d5:63:a0:3a:f2: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B3:E5:63:23:3E:86:DD:A5:BB:D7:48:8C:A8:93:DF:B1:CE:BA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:39:4d:55:48:ef:16:a1:65:26:d2:b6:8b:33:7a:5a:1d:4e: 58:4a:2a:05:cb:22:7b:61:9c:34:09:db:2c:1c:e4:13:06:64: d7:7d:76:48:2a:af:c1:f5:63:1c:75:de:20:7f:85:b3:0d:7e: 22:23:22:23:6d:64:66:1f:33:21:c2:41:c8:e9:5e:e3:2e:44: ef:73:5a:b9:76:9e:37:1f:37:7b:27:eb:dc:af:bc:4f:f6:ac: 71:4a:d1:11:58:31:3f:0c:e1:96:87:f9:5d:d7:91:1e:17:c8: ec:38:40:68:96:fe:f6:a9:d2:60:7b:af:fa:70:08:e6:10:23: c9:54:a7:9e:4c:b6:55:05:6e:25:75:b4:0f:c3:21:7b:4b:ff: 99:0a:15:e7:ac:e2:d9:c7:07:48:d1:1b:9c:8d:d5:dc:f3:98: 76:c3:d5:a8:9c:ea:2e:52:dc:eb:85:25:98:5f:0a:c1:b8:0b: 5f:c7:f2:dc:87:06:90:f9:89:7a:5e:75:7d:4d:83:bc:65:36: 3b:59:5f:b5:45:42:66:c6:b2:1f:b1:82:bd:79:26:39:47:48: 50:fa:38:fe:bc:c2:97:e5:bd:12:38:fb:22:24:81:23:b4:f4: 6e:30:75:c1:0b:7c:a1:74:1c:e6:8a:63:84:5c:3b:ed:3c:fe: bd:16:30:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7cke4UVugXes1X/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MDdjODY3YjQtYTc5OC00YThmLWI3ODctOWIzNTBmZjNhZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0ZTKzSbQ0gyGpkYPseSi7Mu62IwbIpiX2JD lGBBAOzpoUPQt7BAvVhTCgQPrPsIpU3+TtsESg0+m35VqQYwe+9+hbNaKCVAr+Hy qwCR0o0McgRBaDXHEf15X+TYwFvFF9tgepYLrgBZ/y+wrNhYvprjK7Q8rj637enj yCIBLk8Oz1QFYq1+wB6vMPAaWj4xYCYAmWeDr+WJljIZqcKEtKw7/i0du//NnYj6 5D7WUi6kyc1XEJktM7UTVsiOTQTOU67n6VrBZSXMK4QHQW97Mx+tH6QMATC7VxUU Z8SXpwyl5TUZxUl/J117f0ZSJwfE2/cTSXEuRnjP1WOgOvLKOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOz5WMjPobdpbvXSIyok9+xzro1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvM2Q4YjQyYTMtZWFlNC0z ZmU2LWIzNjUtNmJmODg4ZGQ2NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClRRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs5TVVI7xahZSbStoszelodTlhKKgXLInthnDQJ2ywc5BMGZNd9dkgq r8H1Yxx13iB/hbMNfiIjIiNtZGYfMyHCQcjpXuMuRO9zWrl2njcfN3sn69yvvE/2 rHFK0RFYMT8M4ZaH+V3XkR4XyOw4QGiW/vap0mB7r/pwCOYQI8lUp55MtlUFbiV1 tA/DIXtL/5kKFees4tnHB0jRG5yN1dzzmHbD1aic6i5S3OuFJZhfCsG4C1/H8tyH BpD5iXpedX1Ng7xlNjtZX7VFQmbGsh+xgr15JjlHSFD6OP68wpflvRI4+yIkgSO0 9G4wdcELfKF0HOaKY4RcO+08/r0WMCk= -----END CERTIFICATE-----Generated at Mon Oct 5 05:19:53 2026 by rpki-client