$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa File: 800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa (raw, json) Hash identifier: b2yTeMB7Rw77ygvLoVsTA4qIRZD244z9YB08Ap95plo= Subject key identifier: A6:31:DC:7C:4C:94:D6:83:90:F8:12:92:1D:4A:62:C0:53:A5:EC:93 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584F4973D4EC65102FB949E03B80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 27321 IP address blocks: 149.20.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d4:ec:65:10:2f:b9:49:e0:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=21c57507-066d-4899-a2ef-ad3e5a2fe5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:12:5f:f3:ff:66:26:6c:c7:cd:63:11:0f:12: e0:08:e0:cb:e0:ba:44:f0:59:12:4f:52:36:f1:ae: 98:57:76:8a:f7:53:69:c0:6f:65:04:c9:6b:f5:bc: 4e:f0:74:1b:6d:c9:32:62:cd:81:aa:1a:d4:50:57: d5:7e:08:bd:1c:d8:91:54:33:85:ba:25:73:48:a6: 07:67:40:b9:1b:76:65:34:23:92:26:6f:ee:96:33: 87:61:d3:87:9f:7d:73:13:1e:b3:34:cc:ee:15:d7: 09:99:d7:f5:ff:41:ac:ac:86:f6:d0:8d:3a:68:00: 15:de:01:a3:04:de:4f:b7:39:3c:d5:0d:8d:87:79: 81:1f:36:74:5c:34:e2:33:c3:f3:fd:eb:d5:36:28: c2:bb:9d:83:cd:4d:26:85:33:4c:2a:7f:34:df:9f: 15:45:4b:cf:39:f6:65:1b:1a:16:8f:58:5f:3d:34: cc:0e:b1:4a:08:3d:6d:46:c8:61:22:4b:56:47:e1: 93:71:b2:0c:ef:4e:f4:58:e1:d3:09:6b:3e:64:6f: 7b:d1:03:2a:44:40:70:93:35:c1:e7:78:d2:c4:dc: 11:d3:41:a8:51:33:b5:a6:f1:3d:4c:c3:96:39:0d: 15:56:97:59:2d:6c:a4:ec:bc:39:07:08:be:19:61: e0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:31:DC:7C:4C:94:D6:83:90:F8:12:92:1D:4A:62:C0:53:A5:EC:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:52:9b:65:31:19:0d:27:e3:2d:20:ea:d1:81:f0:78:e8:aa: c3:4e:04:af:68:5d:51:37:fc:65:37:d8:46:90:70:cc:92:f1: 15:4f:3c:a1:64:88:e3:19:78:a9:e6:65:a8:56:7f:fe:41:aa: 56:25:f7:43:a3:3c:09:b4:00:18:33:3f:a4:08:85:45:2b:c2: 57:60:a6:a3:62:54:c7:d5:1a:4e:3f:32:e7:74:b2:a8:ff:67: 49:59:93:81:de:6a:d4:ab:8f:57:97:b0:77:7d:05:db:6b:2d: 43:8c:27:40:a4:e1:1f:4c:ab:91:0c:57:c3:e8:24:eb:ed:99: 12:f2:f3:a4:34:79:3b:d5:24:b4:b3:af:e6:1e:a9:3a:d5:ab: e8:27:dc:ac:06:db:13:f6:93:99:58:f1:72:e9:5b:dd:34:ac: 3b:23:e3:3c:9b:c8:2c:ff:b3:b9:b7:83:a1:52:19:aa:7f:d1: a3:39:43:00:55:5b:7d:ad:2c:44:ef:60:38:90:5a:c1:22:0b: d3:c4:80:fe:89:bc:d3:0e:31:06:ae:5d:82:2d:42:cf:c0:4d: 51:d1:06:b8:14:fa:89:60:26:53:64:28:36:76:ac:4d:ae:cb: ea:99:69:2a:c2:f1:0e:a9:b0:61:7f:5f:1b:6a:cb:7e:2a:49: 01:71:12:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9TsZRAvuUngO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjFjNTc1MDctMDY2ZC00ODk5LWEyZWYtYWQzZTVhMmZlNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBJf8/9mJmzHzWMRDxLgCODL4LpE8FkST1I2 8a6YV3aK91NpwG9lBMlr9bxO8HQbbckyYs2BqhrUUFfVfgi9HNiRVDOFuiVzSKYH Z0C5G3ZlNCOSJm/uljOHYdOHn31zEx6zNMzuFdcJmdf1/0GsrIb20I06aAAV3gGj BN5Ptzk81Q2Nh3mBHzZ0XDTiM8Pz/evVNijCu52DzU0mhTNMKn80358VRUvPOfZl GxoWj1hfPTTMDrFKCD1tRshhIktWR+GTcbIM7070WOHTCWs+ZG970QMqREBwkzXB 53jSxNwR00GoUTO1pvE9TMOWOQ0VVpdZLWyk7Lw5Bwi+GWHgDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYx3HxMlNaDkPgSkh1KYsBTpeyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODAwYzVmMmQtMWVmMi0z NTE5LThhODItMzMwM2QxZTBjMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5Sm2UxGQ0n4y0g6tGB8HjoqsNOBK9oXVE3/GU32EaQcMyS8RVPPKFk iOMZeKnmZahWf/5BqlYl90OjPAm0ABgzP6QIhUUrwldgpqNiVMfVGk4/Mud0sqj/ Z0lZk4HeatSrj1eXsHd9BdtrLUOMJ0Ck4R9Mq5EMV8PoJOvtmRLy86Q0eTvVJLSz r+YeqTrVq+gn3KwG2xP2k5lY8XLpW900rDsj4zybyCz/s7m3g6FSGap/0aM5QwBV W32tLETvYDiQWsEiC9PEgP6JvNMOMQauXYItQs/ATVHRBrgU+olgJlNkKDZ2rE2u y+qZaSrC8Q6psGF/Xxtqy34qSQFxEqU= -----END CERTIFICATE-----Generated at Sun Oct 4 01:29:54 2026 by rpki-client