$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa File: a25873ed-8451-344c-af7e-66515db40f53.roa (raw, json) Hash identifier: vlWVTeoM0sy+ryCq1VmPplNCj/7FNCcg1plsF7OtvI8= Subject key identifier: D8:64:7E:08:9C:D2:EE:11:58:C6:BD:38:94:55:41:D9:D9:AC:C6:07 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584DCDC5AEF3B0E7227A2330D500 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 30132 IP address blocks: 149.20.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:ae:f3:b0:e7:22:7a:23:30:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=530a0588-00cf-40e8-8770-40a37739349e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a2:4f:f4:d7:39:5c:b8:1d:97:ff:69:c8:7f: 37:04:ae:c1:f2:76:65:61:71:37:56:a8:70:01:de: 9d:3d:18:db:ea:ae:30:4e:54:a4:8c:7e:6b:bb:bf: 94:22:eb:74:18:8d:39:b8:81:46:c7:ad:9f:b8:36: bf:ae:94:4f:ef:69:37:5b:57:2e:90:24:6c:60:d8: 06:68:39:29:dc:a9:8a:9d:9f:3b:99:21:ec:2c:c8: d2:ff:fc:49:ed:03:4e:bf:b5:d2:d4:c3:8b:ff:a2: d2:d1:53:d9:db:53:ab:90:5d:c3:f1:c9:50:19:d0: 66:6d:d4:07:42:13:1c:86:16:e8:1a:31:7a:01:22: 74:90:d7:0c:92:e1:82:ad:69:1c:39:92:bc:4c:5b: 07:94:24:d4:5f:f1:52:e5:d2:c5:76:51:61:bf:1c: 6a:06:f8:45:6c:d2:c7:0b:f4:3d:e8:80:87:ca:a3: 9c:02:41:0d:5d:6a:59:0f:31:25:f9:83:46:a6:20: be:5f:fd:be:bf:f7:90:09:59:74:ab:b9:ad:d0:bd: bd:57:88:4b:f4:0a:83:e1:22:3c:56:08:1e:1b:7f: 7f:ae:8e:96:22:40:3b:19:03:a1:e9:ce:c3:41:c3: 22:ea:2e:79:83:d8:fd:9c:3d:17:bc:47:b5:e1:f1: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:64:7E:08:9C:D2:EE:11:58:C6:BD:38:94:55:41:D9:D9:AC:C6:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:0c:55:dc:22:93:0f:3a:30:e4:f0:97:c7:6c:a3:4f:0b:37: cb:80:c1:44:e5:67:1a:aa:eb:27:91:44:eb:5a:b7:c6:51:80: 72:99:45:3c:21:63:6d:3c:29:1d:9b:2b:1c:e7:fd:0e:6c:a6: 91:08:3f:e2:c0:07:11:b7:1e:5e:1c:28:4a:3a:8f:24:1b:cf: b3:10:3b:ca:41:9f:e4:47:61:d4:c4:97:b4:52:cc:91:cf:bf: 71:5f:c8:f5:27:e4:c4:d1:6f:df:9e:bc:33:18:f3:62:cc:5c: 08:99:34:48:17:b8:a1:75:63:20:aa:a1:fa:df:c3:d4:75:a0: e7:42:dc:11:b4:44:44:10:40:84:56:4f:c7:3b:61:2a:8e:f9: 42:a4:45:d7:8d:4c:b4:07:ca:2e:1c:16:0b:44:71:86:22:e6: ec:41:ef:04:7b:b9:0d:7a:db:4d:b7:25:af:f8:62:66:13:c2: 36:9d:70:48:10:6e:f8:af:a7:55:6c:fc:12:11:90:2f:7d:fb: cd:b5:f0:95:66:69:15:08:e2:77:93:cc:fe:57:03:55:6f:c3: bc:db:2a:e0:21:5a:ed:c6:a7:cc:57:16:ed:8d:f5:de:67:23: 42:ad:72:3c:ff:a9:98:3a:a2:39:34:d0:c4:d1:64:4a:1c:18: ba:b3:3d:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Nxa7zsOcieiMw1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk NTMwYTA1ODgtMDBjZi00MGU4LTg3NzAtNDBhMzc3MzkzNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KJP9Nc5XLgdl/9pyH83BK7B8nZlYXE3Vqhw Ad6dPRjb6q4wTlSkjH5ru7+UIut0GI05uIFGx62fuDa/rpRP72k3W1cukCRsYNgG aDkp3KmKnZ87mSHsLMjS//xJ7QNOv7XS1MOL/6LS0VPZ21OrkF3D8clQGdBmbdQH QhMchhboGjF6ASJ0kNcMkuGCrWkcOZK8TFsHlCTUX/FS5dLFdlFhvxxqBvhFbNLH C/Q96ICHyqOcAkENXWpZDzEl+YNGpiC+X/2+v/eQCVl0q7mt0L29V4hL9AqD4SI8 VggeG39/ro6WIkA7GQOh6c7DQcMi6i55g9j9nD0XvEe14fEoUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhkfgic0u4RWMa9OJRVQdnZrMYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTI1ODczZWQtODQ1MS0z NDRjLWFmN2UtNjY1MTVkYjQwZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkMVdwikw86MOTwl8dso08LN8uAwUTlZxqq6yeRROtat8ZRgHKZRTwh Y208KR2bKxzn/Q5sppEIP+LABxG3Hl4cKEo6jyQbz7MQO8pBn+RHYdTEl7RSzJHP v3FfyPUn5MTRb9+evDMY82LMXAiZNEgXuKF1YyCqofrfw9R1oOdC3BG0REQQQIRW T8c7YSqO+UKkRdeNTLQHyi4cFgtEcYYi5uxB7wR7uQ162023Ja/4YmYTwjadcEgQ bvivp1Vs/BIRkC99+8218JVmaRUI4neTzP5XA1Vvw7zbKuAhWu3Gp8xXFu2N9d5n I0Ktcjz/qZg6ojk00MTRZEocGLqzPSo= -----END CERTIFICATE-----Generated at Wed May 13 16:22:24 2026 by rpki-client