$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa File: 4c4c9fac-6d7d-375f-93e9-b348075a4662.roa (raw, json) Hash identifier: GQaOzbBxUROeypiNCI1sCxCmwrVKPsRkPYGi5h3a0zw= Subject key identifier: 22:57:D4:3C:5A:F6:C7:BA:D8:0F:6E:79:5F:C3:7C:DE:F8:5E:C1:10 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584F7E7DB1203453A0A2A9219DA0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 1280 IP address blocks: 149.20.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:b1:20:34:53:a0:a2:a9:21:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=fbaec9d1-913b-40db-9e57-025bc70b988d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:8d:88:c7:d9:98:19:7f:87:92:3d:f7:2a: 72:ec:8c:26:65:67:19:b2:bb:f4:d7:36:fd:c1:04: a9:c5:69:34:b3:99:cc:bf:f0:39:da:4a:44:5f:8f: 38:d0:73:f6:e4:c2:d1:0b:1f:1b:90:33:43:36:01: 5a:db:4f:96:54:79:6b:d7:44:4d:ae:f6:54:b8:06: ee:42:1c:87:37:d2:9e:33:e0:bc:95:48:f7:fa:34: dc:50:a8:21:19:85:08:a0:f3:81:6a:c5:25:e3:f9: 58:d2:d7:c0:c5:e2:73:3b:00:dd:59:d8:07:2a:20: a8:d3:86:59:76:8a:e7:b6:6d:85:85:21:29:ae:86: e9:62:c6:44:a3:fe:59:62:45:27:b3:ad:f6:b5:63: 38:fa:8c:a6:a5:1c:81:ff:a5:d0:2e:9f:03:71:5c: 4f:1c:3f:d8:aa:80:ae:0d:66:23:18:4a:c2:19:63: 52:a9:07:f8:32:46:c1:2b:87:a6:38:7f:cd:b2:7b: 1d:27:e2:44:05:73:26:ba:9e:47:c0:3c:85:fa:04: fb:df:ec:17:95:cd:4c:11:f9:42:73:02:e5:d5:a2: 41:94:91:54:32:96:a6:24:74:d3:ac:5f:20:5f:f2: 36:c4:d2:ae:ac:ab:97:27:ba:47:cb:75:c9:d7:0b: 38:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:57:D4:3C:5A:F6:C7:BA:D8:0F:6E:79:5F:C3:7C:DE:F8:5E:C1:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:4c:dc:d9:6e:71:ef:a0:6b:17:6f:a4:56:a7:4e:94:e9:80: 6d:ec:a7:d2:28:54:fa:77:f3:82:40:da:54:08:ff:bd:c5:2d: 18:3a:ad:95:ba:fe:aa:18:5c:45:3f:a4:66:57:04:1e:d4:a0: ab:2f:35:a9:f8:c4:37:64:b0:4b:63:4b:d5:55:6f:7a:2c:b1: cb:c2:d2:fd:f9:00:56:c6:d3:b0:bc:d4:57:c7:07:ff:27:95: d5:ac:c5:f9:a3:2e:02:e0:2a:10:78:bd:18:89:55:8b:db:28: 91:a7:bb:d8:70:2d:a7:30:86:c3:26:8f:76:72:4e:a7:cc:10: e4:32:6e:7c:3d:c1:0e:e0:7d:0d:48:83:09:c7:1e:25:fe:87: d6:39:bd:54:48:fd:be:52:fe:1e:e2:99:d8:dd:a8:67:11:3f: 98:ff:1f:3d:b1:6e:c2:76:40:36:ac:ba:6f:37:4c:1a:cf:de: 11:56:a8:11:d8:d3:f5:b7:4c:a4:51:00:ec:c6:b5:6b:0f:8d: e5:f2:87:87:1a:71:c2:c5:6e:cc:ac:6e:c9:0f:c0:46:82:ed: ea:db:35:3b:ba:55:43:9d:3a:75:7e:f1:cd:cb:2e:30:f2:83: 29:33:8b:54:9c:fa:7f:1a:2b:d8:f8:d4:d7:d5:71:8d:9b:3a: ad:4c:17:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fbEgNFOgoqkhnaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZmJhZWM5ZDEtOTEzYi00MGRiLTllNTctMDI1YmM3MGI5ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk6NiMfZmBl/h5I99ypy7IwmZWcZsrv01zb9 wQSpxWk0s5nMv/A52kpEX4840HP25MLRCx8bkDNDNgFa20+WVHlr10RNrvZUuAbu QhyHN9KeM+C8lUj3+jTcUKghGYUIoPOBasUl4/lY0tfAxeJzOwDdWdgHKiCo04ZZ dorntm2FhSEprobpYsZEo/5ZYkUns632tWM4+oympRyB/6XQLp8DcVxPHD/YqoCu DWYjGErCGWNSqQf4MkbBK4emOH/NsnsdJ+JEBXMmup5HwDyF+gT73+wXlc1MEflC cwLl1aJBlJFUMpamJHTTrF8gX/I2xNKurKuXJ7pHy3XJ1ws4CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJX1Dxa9se62A9ueV/DfN74XsEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNGM0YzlmYWMtNmQ3ZC0z NzVmLTkzZTktYjM0ODA3NWE0NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpM3Nluce+gaxdvpFanTpTpgG3sp9IoVPp384JA2lQI/73FLRg6rZW6 /qoYXEU/pGZXBB7UoKsvNan4xDdksEtjS9VVb3osscvC0v35AFbG07C81FfHB/8n ldWsxfmjLgLgKhB4vRiJVYvbKJGnu9hwLacwhsMmj3ZyTqfMEOQybnw9wQ7gfQ1I gwnHHiX+h9Y5vVRI/b5S/h7imdjdqGcRP5j/Hz2xbsJ2QDasum83TBrP3hFWqBHY 0/W3TKRRAOzGtWsPjeXyh4caccLFbsysbskPwEaC7erbNTu6VUOdOnV+8c3LLjDy gykzi1Sc+n8aK9j41NfVcY2bOq1MFxQ= -----END CERTIFICATE-----Generated at Wed Oct 14 06:31:09 2026 by rpki-client