$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa File: 800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa (raw, json) Hash identifier: Axa3kR+yQbKewIHHbbFPX15KJ0yjBYjuAOVhHt2EntE= Subject key identifier: 55:3D:27:9B:60:67:52:4C:81:E3:21:62:6D:AD:51:B3:4A:2A:01:9F Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584D11725EA1C8E63BE8CEEE2C80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 27321 IP address blocks: 149.20.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:5e:a1:c8:e6:3b:e8:ce:ee:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=9a8022aa-2756-40aa-b4b5-a4e6091a1e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:22:9d:d8:0d:c1:6c:dc:5f:59:85:b9:a7:80: 5a:16:04:45:db:2a:85:2f:d6:9d:14:a3:2b:b6:a0: c8:39:91:b0:8b:08:2d:a5:25:17:87:30:eb:9e:ed: 7f:99:82:4f:4e:29:6e:2c:5c:9a:6e:9e:b4:6b:6b: 99:85:bf:70:63:63:3e:3f:b6:8c:75:c9:e8:f5:b2: 75:89:84:02:03:ba:ab:7d:65:a8:89:0e:80:38:9f: d7:a4:4b:af:2b:4d:a9:d2:60:c2:8d:da:f9:67:3f: be:d6:69:e6:c8:af:89:f6:33:00:77:8e:d9:69:a0: 61:70:1c:fd:78:f9:f8:b2:ff:f6:e3:a5:1d:40:7d: d5:4d:58:cf:55:a6:98:3f:00:04:02:18:12:71:0c: dd:28:19:46:77:f4:4f:a5:ab:73:aa:d8:4d:7b:b4: 71:f6:f7:04:ed:11:34:53:67:26:32:81:fd:f2:c9: 6b:c4:57:6a:36:0f:a0:5f:c5:64:e2:48:40:97:1d: 4b:d4:39:54:47:14:0d:19:4d:04:5f:cd:83:c9:68: bb:ce:2d:ab:13:16:f0:c2:e5:94:9f:ec:6d:da:18: 01:2e:d7:3a:20:ad:34:49:92:5f:f3:d5:98:8d:1f: 90:15:a9:04:f8:de:f7:6e:3d:7a:f2:85:4b:18:77: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3D:27:9B:60:67:52:4C:81:E3:21:62:6D:AD:51:B3:4A:2A:01:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ea:ce:a6:41:a3:e0:ba:8d:d9:fa:63:69:8d:8d:fd:96:a6: 4f:d9:8e:4a:58:7c:63:cb:a6:40:d3:08:51:1a:97:d4:5b:c6: 72:4b:92:69:76:3b:72:41:36:c8:09:70:5a:2d:b3:15:40:26: 71:d2:5d:94:09:1d:0c:d8:de:7b:19:c5:c8:b0:ff:fc:9f:31: f9:06:92:bf:c0:7b:b9:ba:a9:dd:8a:e8:11:32:a2:92:cd:b4: f6:69:7d:c4:31:d5:b9:e2:07:76:43:e7:a0:9a:c6:38:87:4b: dd:f5:6f:15:dc:54:d7:81:f7:08:c2:4f:d6:ed:06:ac:e3:70: 27:52:3d:dc:95:85:8f:49:23:ac:e3:47:d8:8f:75:32:de:b4: ac:f3:e5:71:5f:8e:33:6b:21:41:52:9b:01:3b:5e:fb:07:9b: cb:99:63:af:e3:1e:51:b2:a2:93:ba:8c:66:cb:84:c7:76:23: 0b:95:ee:8f:30:94:23:47:9f:05:1b:59:cc:85:d3:cd:48:f5: 57:6e:ba:ca:44:ca:88:2e:dd:c6:af:91:61:6b:25:97:f7:5e: 8e:c2:9a:8e:01:72:e0:4a:b7:4f:a0:c5:e3:cb:ec:25:93:09: f1:9e:28:f9:ba:b8:8b:04:98:c6:7b:3a:1c:c8:ae:e8:bd:cb: 88:68:23:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcl6hyOY76M7uLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk OWE4MDIyYWEtMjc1Ni00MGFhLWI0YjUtYTRlNjA5MWExZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniKd2A3BbNxfWYW5p4BaFgRF2yqFL9adFKMr tqDIOZGwiwgtpSUXhzDrnu1/mYJPTiluLFyabp60a2uZhb9wY2M+P7aMdcno9bJ1 iYQCA7qrfWWoiQ6AOJ/XpEuvK02p0mDCjdr5Zz++1mnmyK+J9jMAd47ZaaBhcBz9 ePn4sv/246UdQH3VTVjPVaaYPwAEAhgScQzdKBlGd/RPpatzqthNe7Rx9vcE7RE0 U2cmMoH98slrxFdqNg+gX8Vk4khAlx1L1DlURxQNGU0EX82DyWi7zi2rExbwwuWU n+xt2hgBLtc6IK00SZJf89WYjR+QFakE+N73bj168oVLGHeAKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU9J5tgZ1JMgeMhYm2tUbNKKgGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODAwYzVmMmQtMWVmMi0z NTE5LThhODItMzMwM2QxZTBjMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrqzqZBo+C6jdn6Y2mNjf2Wpk/ZjkpYfGPLpkDTCFEal9RbxnJLkml2 O3JBNsgJcFotsxVAJnHSXZQJHQzY3nsZxciw//yfMfkGkr/Ae7m6qd2K6BEyopLN tPZpfcQx1bniB3ZD56CaxjiHS931bxXcVNeB9wjCT9btBqzjcCdSPdyVhY9JI6zj R9iPdTLetKzz5XFfjjNrIUFSmwE7XvsHm8uZY6/jHlGyopO6jGbLhMd2IwuV7o8w lCNHnwUbWcyF081I9VduuspEyogu3cavkWFrJZf3Xo7Cmo4BcuBKt0+gxePL7CWT CfGeKPm6uIsEmMZ7OhzIrui9y4hoI3A= -----END CERTIFICATE-----Generated at Thu Mar 26 23:03:15 2026 by rpki-client