$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa File: 299096e0-2f30-39c1-8e77-4fa18c746b04.roa (raw, json) Hash identifier: bRdN8DShnWgCfXiEtlezoKx8rCiDjhz4WmU1hIPou/E= Subject key identifier: BF:E1:A5:B1:0B:B5:94:2B:CA:8D:82:5A:06:2A:70:73:C3:34:3A:94 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F3CE29EDFE26F858C31A9AF00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 30103 IP address blocks: 149.137.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:9e:df:e2:6f:85:8c:31:a9:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=27cc9a4a-ce79-43e2-9942-8d8b4ce9b619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:01:29:94:55:a0:0b:59:49:49:4b:4b:c9: 52:03:7d:bc:92:c0:e5:e0:c7:09:69:ca:67:17:b8: a4:59:be:c7:be:ac:3d:9e:6e:79:fa:f6:06:29:fe: 95:9d:2f:b6:e9:3c:ba:5a:fb:e4:28:84:ec:97:d3: 55:9a:80:30:32:5e:7e:3e:54:37:d1:39:ca:8a:36: 22:42:02:86:16:48:9b:6f:ef:db:e8:cd:40:f3:83: 52:ff:f0:25:c4:cb:13:a0:12:13:9d:f5:4f:c8:6f: ce:07:fe:80:ff:64:94:3f:a7:2a:7f:bd:df:b9:8e: eb:2f:f8:1d:b9:73:58:57:7e:97:99:0f:a9:1e:04: 47:de:75:6d:77:6a:63:86:9d:49:7b:31:08:83:57: 4a:3f:0b:31:0a:27:a8:03:cd:70:49:34:e7:ab:6f: f3:24:e5:4c:9c:fb:ca:1e:cc:15:84:36:9e:4b:e2: 1d:b4:db:d3:95:3e:7f:72:63:63:4a:85:75:01:e0: a6:d3:6c:24:63:95:85:70:19:11:69:97:03:14:44: d2:e6:e9:8e:e5:d1:50:5b:cb:2c:0c:b7:d1:83:24: 4f:3f:fb:72:0f:ce:7b:6b:bd:4c:ef:57:cd:33:06: 4c:a6:67:db:72:f2:ac:c7:47:05:2c:ea:53:22:47: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E1:A5:B1:0B:B5:94:2B:CA:8D:82:5A:06:2A:70:73:C3:34:3A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:be:a9:58:17:7a:f8:4a:aa:08:18:74:81:11:e1:41:07:4b: 6e:ff:10:21:d7:a6:51:71:82:ef:e4:3d:3d:00:33:c2:c6:17: f3:9f:e5:b6:15:6b:4f:f2:75:24:76:e1:85:09:e2:a5:5c:71: 8e:e2:bd:fc:c8:50:47:d5:91:80:20:e4:0c:cd:23:f1:d6:7a: 6a:26:e6:d9:c5:11:a9:b5:cc:b1:ff:94:11:4d:a9:ad:ef:f9: d3:d8:6c:e3:35:e9:76:37:f7:e1:61:45:8e:df:80:24:23:b9: ad:05:2c:02:7d:ec:60:b5:c3:de:74:db:15:7c:24:14:e9:6f: 1a:32:40:84:40:94:69:b5:59:58:2d:b7:c3:d4:8b:55:12:3c: 91:06:6a:8e:7c:52:0b:bc:68:f8:3d:98:5e:23:6a:13:10:0a: 4a:55:61:17:1e:6f:eb:4b:7a:c1:25:30:63:4c:36:87:bd:51: 80:20:c0:fb:ab:17:2a:96:70:83:76:88:d8:3e:1a:1d:9f:3e: 98:8c:12:43:4b:e2:0b:d8:7f:89:0e:b9:f7:97:40:23:49:17: eb:2f:3c:56:a2:1f:c1:c9:e8:c5:ce:3d:0f:3b:c9:24:6a:ad: 17:13:de:7b:64:fe:32:bd:8b:99:e9:cc:e7:ca:50:54:22:45: 15:29:81:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884p7f4m+FjDGprwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MjdjYzlhNGEtY2U3OS00M2UyLTk5NDItOGQ4YjRjZTliNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7YBKZRVoAtZSUlLS8lSA328ksDl4McJacpn F7ikWb7Hvqw9nm55+vYGKf6VnS+26Ty6WvvkKITsl9NVmoAwMl5+PlQ30TnKijYi QgKGFkibb+/b6M1A84NS//AlxMsToBITnfVPyG/OB/6A/2SUP6cqf73fuY7rL/gd uXNYV36XmQ+pHgRH3nVtd2pjhp1JezEIg1dKPwsxCieoA81wSTTnq2/zJOVMnPvK HswVhDaeS+IdtNvTlT5/cmNjSoV1AeCm02wkY5WFcBkRaZcDFETS5umO5dFQW8ss DLfRgyRPP/tyD857a71M71fNMwZMpmfbcvKsx0cFLOpTIkfO0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/hpbELtZQryo2CWgYqcHPDNDqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMjk5MDk2ZTAtMmYzMC0z OWMxLThlNzctNGZhMThjNzQ2YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW+qVgXevhKqggYdIER4UEHS27/ECHXplFxgu/kPT0AM8LGF/Of5bYV a0/ydSR24YUJ4qVccY7ivfzIUEfVkYAg5AzNI/HWemom5tnFEam1zLH/lBFNqa3v +dPYbOM16XY39+FhRY7fgCQjua0FLAJ97GC1w9502xV8JBTpbxoyQIRAlGm1WVgt t8PUi1USPJEGao58Ugu8aPg9mF4jahMQCkpVYRceb+tLesElMGNMNoe9UYAgwPur FyqWcIN2iNg+Gh2fPpiMEkNL4gvYf4kOufeXQCNJF+svPFaiH8HJ6MXOPQ87ySRq rRcT3ntk/jK9i5npzOfKUFQiRRUpgX0= -----END CERTIFICATE-----Generated at Mon Sep 28 19:59:13 2026 by rpki-client