$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa File: 45d41f15-8492-3fc0-95d1-32224912a7f9.roa (raw, json) Hash identifier: AgQ40Wlj6pGj5gBezlcrKS7edM55fqAnfDNbn96wua4= Subject key identifier: 3D:A4:A5:BA:63:1A:72:44:1E:6B:F3:2C:91:57:09:B5:1C:58:98:C6 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584F7E7DA960AD869068A3B633C0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 1280 IP address blocks: 149.20.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:a9:60:ad:86:90:68:a3:b6:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=56870e15-0f1f-405e-bfb0-34a83d80e8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:50:5c:62:0c:e2:36:29:b0:a6:10:48:4c:e1: eb:9a:0b:09:51:9c:0c:b0:fb:de:e0:27:6e:db:bf: eb:76:47:cb:2f:5a:50:c4:ef:38:15:e6:b7:d0:e7: 3f:a4:97:ba:5f:35:42:35:90:72:6f:a5:d2:03:4a: d7:a7:e8:1a:21:b4:4a:aa:f9:30:7d:ab:3a:88:fa: d9:b6:ea:51:6f:87:57:48:dd:4d:4b:2a:30:ea:1f: d9:af:53:b1:81:e8:9e:e4:96:a8:fd:a9:ff:c7:06: 58:3d:b2:4f:ad:cf:00:bd:a0:c2:c0:e6:0b:8d:2c: a3:33:de:1a:0a:69:01:84:f6:d9:2c:f5:55:d0:10: c3:f3:46:2c:cb:d9:12:24:3f:89:b0:0c:33:ed:b9: 07:63:77:84:ad:17:de:b6:99:a6:55:c0:34:b0:6a: e9:c7:b6:fc:a9:4b:5c:d0:f4:6a:7c:97:da:d0:b4: 14:9a:7c:fd:19:e9:62:45:de:63:90:9e:b8:58:f1: e3:83:c4:fc:95:a2:9e:25:5c:15:06:25:da:d3:83: d3:9f:2e:a3:c4:43:d7:9f:51:ee:a8:ab:3a:d7:7b: f0:34:6e:75:94:94:70:d6:a8:2b:44:7a:26:22:15: 2f:23:f1:6b:cb:c4:79:0a:e7:19:d8:cd:f1:55:c6: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A4:A5:BA:63:1A:72:44:1E:6B:F3:2C:91:57:09:B5:1C:58:98:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:7d:f6:b1:e6:bf:20:a6:c2:d9:b6:5d:89:71:13:33:75:de: 12:2e:49:d1:13:8e:0b:fc:b7:09:6e:32:a5:3c:50:96:3a:69: 33:14:ec:5c:47:b9:bc:4e:23:cf:02:89:0e:24:24:3d:97:27: 32:54:d8:51:ce:28:a2:9a:1e:81:1a:32:84:bd:a9:96:4d:7e: a3:03:31:f2:97:3f:85:c7:c7:8d:8d:5a:45:2c:97:83:9e:dc: c4:21:b5:68:bf:b5:54:4f:7c:4f:97:dc:04:93:45:1a:80:88: 69:82:44:e7:1d:9a:7d:9e:fb:8c:7b:74:07:51:b1:5a:dd:00: 1a:9b:38:95:e3:68:19:8f:97:8d:e8:4e:1e:2f:62:e6:45:64: b9:54:63:ad:92:0c:53:40:e0:3e:b8:62:0d:f2:81:e5:b9:e2: a1:83:aa:42:98:9b:5a:3f:03:ac:c6:c8:c2:db:1b:e7:c4:22: 21:7f:7b:a4:57:71:62:f8:a5:c2:0a:0e:a0:e0:98:ed:74:8e: 7e:b6:7d:98:bc:57:66:8e:3b:8f:55:de:7b:7d:70:c6:e8:44: 5b:bb:0b:65:ce:e4:ff:20:0b:1c:ca:17:28:b4:b5:8d:52:38: 98:f2:11:0a:84:c4:b6:92:d5:54:a2:af:b7:56:e0:79:b5:59: ed:5c:df:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+falgrYaQaKO2M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NTY4NzBlMTUtMGYxZi00MDVlLWJmYjAtMzRhODNkODBlOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFBcYgziNimwphBITOHrmgsJUZwMsPve4Cdu 27/rdkfLL1pQxO84Fea30Oc/pJe6XzVCNZByb6XSA0rXp+gaIbRKqvkwfas6iPrZ tupRb4dXSN1NSyow6h/Zr1Oxgeie5Jao/an/xwZYPbJPrc8AvaDCwOYLjSyjM94a CmkBhPbZLPVV0BDD80Ysy9kSJD+JsAwz7bkHY3eErRfetpmmVcA0sGrpx7b8qUtc 0PRqfJfa0LQUmnz9GeliRd5jkJ64WPHjg8T8laKeJVwVBiXa04PTny6jxEPXn1Hu qKs613vwNG51lJRw1qgrRHomIhUvI/Fry8R5CucZ2M3xVcbbxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2kpbpjGnJEHmvzLJFXCbUcWJjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDVkNDFmMTUtODQ5Mi0z ZmMwLTk1ZDEtMzIyMjQ5MTJhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN99rHmvyCmwtm2XYlxEzN13hIuSdETjgv8twluMqU8UJY6aTMU7FxH ubxOI88CiQ4kJD2XJzJU2FHOKKKaHoEaMoS9qZZNfqMDMfKXP4XHx42NWkUsl4Oe 3MQhtWi/tVRPfE+X3ASTRRqAiGmCROcdmn2e+4x7dAdRsVrdABqbOJXjaBmPl43o Th4vYuZFZLlUY62SDFNA4D64Yg3ygeW54qGDqkKYm1o/A6zGyMLbG+fEIiF/e6RX cWL4pcIKDqDgmO10jn62fZi8V2aOO49V3nt9cMboRFu7C2XO5P8gCxzKFyi0tY1S OJjyEQqExLaS1VSir7dW4Hm1We1c3wo= -----END CERTIFICATE-----Generated at Wed Oct 14 22:15:28 2026 by rpki-client