$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa File: d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa (raw, json) Hash identifier: FKSI3c6MpP8Ep7p57opj+QDb0sabLgVvDVn3D2W0+dA= Subject key identifier: 2F:67:62:F1:3C:6C:88:54:3E:1D:55:C9:04:4C:1D:2B:D1:A2:2F:DD Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584E7634CE7D6FAE843F4FAA8C00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 30132 IP address blocks: 149.20.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:ce:7d:6f:ae:84:3f:4f:aa:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=c7ef57e8-f674-4927-bc09-c5d8b06bd4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:19:1f:8d:f3:f5:cd:65:c7:df:17:dc:1c:a5: 41:a4:d4:a3:0f:c2:a6:0a:d4:40:e7:f4:61:ad:82: be:8e:0d:b4:41:d0:18:c9:6c:2f:76:cd:08:39:b5: fb:d1:10:0f:aa:ea:96:c2:b8:83:bb:fd:86:09:aa: cf:d5:dd:11:41:a3:87:5d:04:a1:92:90:63:6c:78: 1a:76:cf:a9:a5:36:c8:da:a1:9c:71:f6:26:60:8c: 14:5b:f5:b8:02:aa:d5:6c:93:4f:24:db:8c:ea:bb: a6:c1:cd:cb:b7:94:a5:9a:84:f3:0c:c2:26:8d:d2: c4:85:1f:62:a6:90:03:43:ce:92:2a:ed:a6:3b:d4: c9:21:d9:1b:f0:30:e7:64:19:5d:fe:83:ae:cb:66: 58:a5:26:37:77:a1:5a:a9:d3:b1:c4:c0:7e:7c:15: c4:47:c5:e6:d3:64:1a:91:3e:61:6a:68:62:9e:41: 2f:b8:07:b1:1f:a8:99:d6:cf:0e:66:61:91:5a:0e: ab:dc:da:9d:f3:e0:d5:93:22:08:93:94:e5:e9:69: bd:c0:c4:2a:cb:5c:1c:32:f0:8f:d4:31:e0:d7:f8: 23:42:14:65:33:a2:03:41:b6:96:f2:b4:ad:5e:4b: cb:d4:ff:01:41:27:32:7c:a4:f8:87:f4:43:1a:e9: d0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:67:62:F1:3C:6C:88:54:3E:1D:55:C9:04:4C:1D:2B:D1:A2:2F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b5:20:b1:31:2e:c6:f3:b0:44:63:07:e7:d3:d1:02:1f:eb: 62:aa:29:72:d2:2f:5c:3d:02:9c:d6:29:ef:91:f8:13:0e:82: 74:dd:14:57:62:f6:4e:28:f2:22:2f:9e:da:1f:dd:34:49:25: 47:8f:c3:bb:04:25:c2:32:95:9f:77:f7:a6:27:2b:c9:96:d1: 4b:5e:55:a8:fe:5e:b3:df:f5:33:ef:08:51:94:ac:be:25:3d: aa:da:3b:ea:b4:87:91:5f:54:ac:6d:de:73:4b:a0:1e:a8:06: 02:b4:4d:9c:fa:39:2d:17:64:87:eb:49:e8:cb:81:7c:6d:bb: fd:0b:58:67:cd:7a:b7:77:5e:e6:2f:b4:55:83:f3:59:24:62: 3d:3f:91:b6:15:05:67:ca:26:74:60:63:f8:17:2f:99:4a:84: 1b:9a:c8:da:f3:7d:9e:33:6f:b5:1b:eb:50:71:99:df:fb:87: 50:e9:b7:ec:51:c8:18:3e:e0:bc:58:4d:ff:aa:c9:92:4e:c1: e0:c3:68:cf:90:b6:e8:ce:cf:e8:4f:f6:f6:16:9b:e3:28:4c: 1d:6a:60:57:dd:e0:49:e0:4c:2e:13:5b:68:df:ef:37:03:82: 16:0b:22:c5:94:87:a4:4f:1c:ea:88:23:ec:bc:57:45:37:72: f0:0a:be:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NM59b66EP0+qjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YzdlZjU3ZTgtZjY3NC00OTI3LWJjMDktYzVkOGIwNmJkNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBkfjfP1zWXH3xfcHKVBpNSjD8KmCtRA5/Rh rYK+jg20QdAYyWwvds0IObX70RAPquqWwriDu/2GCarP1d0RQaOHXQShkpBjbHga ds+ppTbI2qGccfYmYIwUW/W4AqrVbJNPJNuM6rumwc3Lt5SlmoTzDMImjdLEhR9i ppADQ86SKu2mO9TJIdkb8DDnZBld/oOuy2ZYpSY3d6FaqdOxxMB+fBXER8Xm02Qa kT5hamhinkEvuAexH6iZ1s8OZmGRWg6r3Nqd8+DVkyIIk5Tl6Wm9wMQqy1wcMvCP 1DHg1/gjQhRlM6IDQbaW8rStXkvL1P8BQScyfKT4h/RDGunQNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9nYvE8bIhUPh1VyQRMHSvRoi/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvZDlkYWRjYTktZTFjZS0z MDY5LWI3ZWEtZGQwOTBiYTY2MTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe1ILExLsbzsERjB+fT0QIf62KqKXLSL1w9ApzWKe+R+BMOgnTdFFdi 9k4o8iIvntof3TRJJUePw7sEJcIylZ9396YnK8mW0UteVaj+XrPf9TPvCFGUrL4l ParaO+q0h5FfVKxt3nNLoB6oBgK0TZz6OS0XZIfrSejLgXxtu/0LWGfNerd3XuYv tFWD81kkYj0/kbYVBWfKJnRgY/gXL5lKhBuayNrzfZ4zb7Ub61Bxmd/7h1Dpt+xR yBg+4LxYTf+qyZJOweDDaM+QtujOz+hP9vYWm+MoTB1qYFfd4EngTC4TW2jf7zcD ghYLIsWUh6RPHOqII+y8V0U3cvAKvpI= -----END CERTIFICATE-----Generated at Fri Jul 24 12:26:33 2026 by rpki-client