$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa File: 1a24eb8c-763e-3fe5-9854-4c755677df1e.roa (raw, json) Hash identifier: zmjzOZpGhLac15l1b2FPfRKngcx9jVRiuAQ0jLY1PW0= Subject key identifier: 78:7A:7D:CC:77:DD:79:55:7C:66:1B:E9:28:30:D5:D3:23:4A:CB:AF Certificate issuer: /CN=943895ce-649a-4937-9d38-a57b20ee748f Certificate serial: 010D0C9F4328584DAAE036FD75F2EB32BA205500 Authority key identifier: E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 16824 IP address blocks: 149.20.232.0/24 maxlen: 24 149.20.233.0/24 maxlen: 24 149.20.234.0/24 maxlen: 24 149.20.235.0/24 maxlen: 24 149.20.236.0/24 maxlen: 24 149.20.237.0/24 maxlen: 24 149.20.238.0/24 maxlen: 24 149.20.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:36:fd:75:f2:eb:32:ba:20:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943895ce-649a-4937-9d38-a57b20ee748f Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=651be59b-963d-4a99-8c1d-94d53bd3c456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:b0:f8:3a:35:0e:a6:47:da:b4:0f:fb:31: bb:8e:41:0e:de:35:ea:44:2f:df:17:27:d7:82:15: 0e:5a:37:6a:1d:24:06:50:c5:a1:e5:2e:2a:12:d0: d8:07:00:01:ff:bf:84:be:d2:e7:89:c6:e0:3c:15: e6:5a:42:c3:81:55:33:51:d0:8c:14:09:00:8d:01: 47:07:cf:a8:31:b1:89:80:af:26:c8:f5:7f:8b:6e: 34:43:7f:b3:da:17:98:49:ae:75:a3:ca:15:3c:f9: 57:06:08:42:4b:c3:1e:c6:0c:a5:a1:f7:25:4e:23: a4:e2:8b:a9:07:99:37:61:23:a5:99:b8:e1:2a:2b: 2c:c8:70:0f:bc:b5:40:91:39:e2:d1:0a:24:ad:ed: ba:57:60:8a:0e:9e:5c:15:9d:ab:d8:d1:ac:4b:29: 3e:5d:b3:94:4b:6f:43:9f:bf:97:cc:96:4d:d8:5a: 2d:58:2e:8e:06:83:e5:d1:ef:68:05:02:c9:a5:d0: 56:fb:d5:d0:3a:a0:a9:75:db:32:1a:5c:45:e1:9c: 0d:39:1c:1b:6e:c5:47:9f:b8:b6:ce:58:ad:ee:ce: 21:ef:01:eb:a6:1d:26:b4:67:a5:56:c2:35:75:0b: 2f:c5:de:ab:b1:26:74:3c:e9:3b:d9:94:40:90:49: e2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7A:7D:CC:77:DD:79:55:7C:66:1B:E9:28:30:D5:D3:23:4A:CB:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl X509v3 Authority Key Identifier: keyid:E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer sbgp-ipAddrBlock: critical IPv4: 149.20.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a6:c9:de:e8:22:f3:5c:1d:69:d4:e1:90:ed:6c:d6:99:f5: 9a:f5:42:8b:03:46:df:44:df:5f:66:94:26:02:6b:f4:dd:f7: 9d:cc:2e:fb:4d:38:22:58:35:ed:63:79:cf:9a:4a:da:2e:f1: 59:3c:6a:5b:84:d1:8c:a6:7e:42:a0:41:45:5a:2a:f8:42:a2: 52:d9:aa:a2:e7:08:ee:a6:3d:9a:00:41:ae:4c:42:fc:89:1b: 53:45:4f:18:4c:f2:f2:af:9c:12:da:1d:77:a3:24:a5:8d:07: 22:71:37:84:aa:30:db:49:28:49:6e:cf:13:91:f7:db:a5:05: aa:9c:fe:94:0b:e2:e1:9e:25:7c:61:cc:ce:76:90:18:19:96: e3:36:0b:75:1c:a8:99:ba:8c:d4:26:b2:e6:1f:4d:e0:0e:91: 3e:5e:14:8e:b9:66:49:da:05:7b:da:60:05:ee:34:e7:a5:ff: 22:c1:25:7f:62:0d:c4:36:c7:c4:bf:10:1a:83:60:3e:a3:ae: ea:d9:4c:2e:6b:af:aa:c2:4b:75:8c:b4:b9:f0:21:67:b4:60: ec:d6:4a:3e:28:3e:16:0a:3b:1a:67:6a:41:db:7e:db:23:a8: d4:69:90:59:4f:62:8c:12:ec:11:39:67:db:6e:ad:55:c4:0a: f4:a1:4a:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4Db9dfLrMrogVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQzODk1Y2UtNjQ5YS00OTM3LTlkMzgtYTU3YjIwZWU3 NDhmMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NjUxYmU1OWItOTYzZC00YTk5LThjMWQtOTRkNTNiZDNjNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMaw+Do1DqZH2rQP+zG7jkEO3jXqRC/fFyfX ghUOWjdqHSQGUMWh5S4qEtDYBwAB/7+EvtLnicbgPBXmWkLDgVUzUdCMFAkAjQFH B8+oMbGJgK8myPV/i240Q3+z2heYSa51o8oVPPlXBghCS8MexgylofclTiOk4oup B5k3YSOlmbjhKissyHAPvLVAkTni0Qokre26V2CKDp5cFZ2r2NGsSyk+XbOUS29D n7+XzJZN2FotWC6OBoPl0e9oBQLJpdBW+9XQOqCpddsyGlxF4ZwNORwbbsVHn7i2 zlit7s4h7wHrph0mtGelVsI1dQsvxd6rsSZ0POk72ZRAkEniawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHh6fcx33XlVfGYb6Sgw1dMjSsuvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NDM4 OTVjZS02NDlhLTQ5MzctOWQzOC1hNTdiMjBlZTc0OGYvMWEyNGViOGMtNzYzZS0z ZmU1LTk4NTQtNGM3NTU2NzdkZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTQzODk1Y2UtNjQ5YS00OTM3LTlk MzgtYTU3YjIwZWU3NDhmLzk0Mzg5NWNlLTY0OWEtNDkzNy05ZDM4LWE1N2IyMGVl NzQ4Zi5jcmwwHwYDVR0jBBgwFoAU6SQM4RQvHB0Xd/sQjKTKGzJNiQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NDM4OTVjZS02NDlhLTQ5MzctOWQzOC1hNTdi MjBlZTc0OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+myd7oIvNcHWnU4ZDtbNaZ9Zr1QosDRt9E319mlCYCa/Td953MLvtN OCJYNe1jec+aStou8Vk8aluE0YymfkKgQUVaKvhColLZqqLnCO6mPZoAQa5MQvyJ G1NFTxhM8vKvnBLaHXejJKWNByJxN4SqMNtJKEluzxOR99ulBaqc/pQL4uGeJXxh zM52kBgZluM2C3UcqJm6jNQmsuYfTeAOkT5eFI65ZknaBXvaYAXuNOel/yLBJX9i DcQ2x8S/EBqDYD6jrurZTC5rr6rCS3WMtLnwIWe0YOzWSj4oPhYKOxpnakHbftsj qNRpkFlPYowS7BE5Z9turVXECvShSts= -----END CERTIFICATE-----Generated at Wed May 13 17:47:05 2026 by rpki-client