$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa File: 9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa (raw, json) Hash identifier: 7J0P8KQKtrmoE97IxL+5r/TPwzF2EO9Sf30n81B3sXI= Subject key identifier: B8:8F:E3:CA:24:B1:DA:D8:0B:65:52:83:E5:47:37:40:1B:AD:71:84 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584EDC91F0C3B62D0667D2ACC200 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 1280 IP address blocks: 149.20.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:f0:c3:b6:2d:06:67:d2:ac:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=cb522f91-5aa5-4120-bc74-cc94a03c22a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:ad:d5:96:b3:a9:a2:41:06:38:21:76:d8: d3:90:9d:0b:82:3b:79:12:02:93:5e:2c:e0:f8:b6: 55:4b:ca:e0:f0:be:d0:4a:3a:c3:48:fc:a7:14:db: 4a:4c:6b:ef:9f:79:82:1e:68:1b:37:40:ce:86:84: a1:6c:ab:37:d0:ff:45:fe:c2:e5:c9:31:6e:59:d4: e4:44:20:22:56:f0:d0:65:7c:aa:18:f8:8a:80:3c: a5:b0:02:59:98:fc:05:d7:53:81:bb:90:ee:24:a5: 76:a2:fd:49:e5:71:26:a0:b8:f9:26:46:ce:34:0d: 1d:bd:59:35:4a:e4:65:3b:23:a3:ec:d5:26:92:3b: b5:3e:58:4b:6c:25:4a:85:c0:76:8d:b7:c1:97:53: 51:0f:ce:2e:9c:e4:ae:1d:73:44:a5:82:5d:43:64: 83:1f:56:2d:93:43:aa:91:73:a3:d9:82:41:b2:b5: 2e:47:33:10:80:76:99:ba:14:19:7f:a6:4d:60:d7: bf:d0:6e:89:aa:a6:4d:88:ec:eb:f5:ed:73:a3:af: 74:35:12:0f:ef:70:2b:27:81:a1:7d:a6:43:b7:75: 55:37:4b:77:9c:e3:69:23:33:1a:bc:bf:0b:fe:20: 05:77:ec:4f:ec:77:38:2c:1d:e8:af:59:85:78:18: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8F:E3:CA:24:B1:DA:D8:0B:65:52:83:E5:47:37:40:1B:AD:71:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/9db0ad34-9a12-3a84-a91b-2fd6a186da84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:fb:1a:fc:ca:36:f1:d9:ce:9c:d1:2e:f6:28:a5:e3:60:8d: 20:5d:c2:c4:5b:09:4b:8e:10:36:58:f7:4f:1b:4f:16:bf:9b: f7:ea:bd:e5:4d:cf:7a:97:1c:1a:8c:c2:15:ec:a2:ad:e7:ff: b2:2e:2c:61:dc:bd:9c:62:18:4d:af:ef:d2:5f:c4:52:55:b1: da:c9:7e:d4:7d:28:a8:9a:83:91:0f:d1:d3:28:28:46:1e:02: 43:5c:6b:75:c0:b5:d7:34:65:bb:7d:ba:ac:45:9d:0c:28:ac: 3e:0e:aa:82:b9:20:a8:af:38:14:75:f1:65:4c:29:ee:11:91: 42:ee:ae:82:f3:c3:b2:2d:c2:fe:4c:52:36:8d:8c:60:a2:28: b2:fd:4d:e2:44:b5:ac:8e:cb:40:a0:07:52:a5:e3:53:10:b6: fd:10:6d:cc:7b:a6:ed:02:98:99:d3:ec:0e:fb:29:ee:a7:49: 6f:54:f6:60:d5:19:48:cc:26:65:3d:dd:06:76:4b:6c:ba:d7: c5:bf:0c:04:16:75:11:d5:cf:86:8c:48:3d:59:e9:51:62:12: 94:d2:a2:bc:bb:e4:c4:75:3c:c8:33:6a:03:c0:6e:6a:11:4f: 11:43:5f:26:25:94:f9:59:6e:c5:28:4f:41:59:53:f3:90:a9: f8:de:8d:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckfDDti0GZ9KswgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk Y2I1MjJmOTEtNWFhNS00MTIwLWJjNzQtY2M5NGEwM2MyMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRit1ZazqaJBBjghdtjTkJ0Lgjt5EgKTXizg +LZVS8rg8L7QSjrDSPynFNtKTGvvn3mCHmgbN0DOhoShbKs30P9F/sLlyTFuWdTk RCAiVvDQZXyqGPiKgDylsAJZmPwF11OBu5DuJKV2ov1J5XEmoLj5JkbONA0dvVk1 SuRlOyOj7NUmkju1PlhLbCVKhcB2jbfBl1NRD84unOSuHXNEpYJdQ2SDH1Ytk0Oq kXOj2YJBsrUuRzMQgHaZuhQZf6ZNYNe/0G6JqqZNiOzr9e1zo690NRIP73ArJ4Gh faZDt3VVN0t3nONpIzMavL8L/iAFd+xP7Hc4LB3or1mFeBiIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiP48oksdrYC2VSg+VHN0AbrXGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvOWRiMGFkMzQtOWExMi0z YTg0LWE5MWItMmZkNmExODZkYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr7GvzKNvHZzpzRLvYopeNgjSBdwsRbCUuOEDZY908bTxa/m/fqveVN z3qXHBqMwhXsoq3n/7IuLGHcvZxiGE2v79JfxFJVsdrJftR9KKiag5EP0dMoKEYe AkNca3XAtdc0Zbt9uqxFnQworD4OqoK5IKivOBR18WVMKe4RkULuroLzw7Itwv5M UjaNjGCiKLL9TeJEtayOy0CgB1Kl41MQtv0Qbcx7pu0CmJnT7A77Ke6nSW9U9mDV GUjMJmU93QZ2S2y618W/DAQWdRHVz4aMSD1Z6VFiEpTSory75MR1PMgzagPAbmoR TxFDXyYllPlZbsUoT0FZU/OQqfjejVc= -----END CERTIFICATE-----Generated at Tue Oct 6 23:20:08 2026 by rpki-client