$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa File: 0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa (raw, json) Hash identifier: OuCAglGdetjte0v4NmdlgFuM7SI3N39gN90vKm97j+M= Subject key identifier: 33:77:03:7C:BF:FF:E9:96:E1:25:0A:BC:EE:41:8D:90:AC:40:A4:A1 Certificate issuer: /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7 Certificate serial: 010D0C9F4328584C9536F64BFAA91750AA7F2580 Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 0 IP address blocks: 149.112.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:f6:4b:fa:a9:17:50:aa:7f:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7 Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=2a312c21-2c61-4d39-a47a-7c1bb5391863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:4e:fa:da:f9:62:59:41:8c:63:17:4f:71: 42:8c:a4:6a:79:0c:f3:b9:32:be:5f:f8:68:e8:d6: 37:e9:30:e1:90:e8:41:2b:27:25:fc:c7:76:74:92: 96:38:d0:c4:39:e6:f4:95:7d:7e:35:74:3b:07:f4: 11:65:5f:78:5b:5b:c2:59:21:29:54:ec:a9:60:b3: a7:b8:0f:78:39:07:d4:39:37:b8:f2:40:0e:ef:03: 32:41:f9:c2:b3:2b:f1:e0:38:9e:8f:52:3b:76:38: fd:1d:b4:4a:1a:60:eb:22:b2:cb:de:ea:2a:ef:4f: d4:69:75:5b:1d:c1:7a:71:7c:54:c0:33:ab:93:49: e9:39:e6:96:85:03:40:38:53:44:59:ac:e9:60:cf: da:8a:e4:99:7e:e5:e6:75:3b:25:5e:4a:52:f6:f1: fc:e0:45:8e:8a:c2:5a:b7:af:f7:10:db:d3:dc:39: c5:14:1e:ce:12:3e:29:97:b4:ff:75:4b:94:53:e1: 04:0f:62:64:42:a0:14:6b:01:b2:b1:98:5b:5a:d3: 51:aa:6c:5f:70:48:c2:39:29:83:31:44:c7:81:2c: b9:60:33:20:c2:8f:39:33:96:0f:8c:14:c7:4c:e5: 1b:db:c5:11:aa:d5:4a:a0:6c:b1:5d:44:7e:42:da: 8d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:77:03:7C:BF:FF:E9:96:E1:25:0A:BC:EE:41:8D:90:AC:40:A4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl X509v3 Authority Key Identifier: keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer sbgp-ipAddrBlock: critical IPv4: 149.112.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:89:dc:18:b3:22:af:07:d1:9f:75:87:3b:b8:29:96:82:1a: 1f:f3:20:12:46:ee:f9:13:63:51:58:16:33:b0:4b:c8:12:dc: 53:fa:47:e7:2f:c5:4b:2f:13:9b:cb:54:c3:91:b6:eb:2f:64: 80:d7:f3:09:b0:f6:6e:9a:e6:64:45:84:a6:a2:f2:0c:47:d6: d8:d0:98:fc:25:63:a0:9c:66:54:19:43:a4:12:1f:9e:43:87: ae:2e:d2:5a:fc:62:30:f7:4e:01:2f:d8:51:28:f0:e5:2d:e1: 99:ae:47:df:21:04:7e:a5:d3:6a:be:91:ee:34:ee:e8:66:65: 28:5f:bd:55:85:cc:71:43:6a:5d:21:78:cf:b3:ea:c7:cf:88: 00:db:00:c4:68:ca:c1:09:c9:04:ed:05:c5:72:28:8a:87:c2: 41:c1:15:96:42:d0:e2:1c:b5:71:75:07:53:b1:a8:de:ce:88: 1a:f9:58:7d:33:1f:08:5d:7a:cb:2f:97:fa:77:10:11:ce:99: 0a:da:15:9d:cc:63:ef:94:c0:c0:68:f5:1a:ef:bb:d4:ad:82: 32:11:4e:25:22:e4:84:43:fe:cb:64:e0:9e:60:8f:61:01:b1: b0:ad:e6:6e:b2:40:d8:9e:ea:5f:1a:c7:46:dd:80:00:51:ad: fb:23:1b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyVNvZL+qkXUKp/JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlNTE0MWUtYTA2OS00OTU1LThjNTUtNGRhNWRmZDM2 ZmE3MB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk MmEzMTJjMjEtMmM2MS00ZDM5LWE0N2EtN2MxYmI1MzkxODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2BO+tr5YllBjGMXT3FCjKRqeQzzuTK+X/ho 6NY36TDhkOhBKycl/Md2dJKWONDEOeb0lX1+NXQ7B/QRZV94W1vCWSEpVOypYLOn uA94OQfUOTe48kAO7wMyQfnCsyvx4Diej1I7djj9HbRKGmDrIrLL3uoq70/UaXVb HcF6cXxUwDOrk0npOeaWhQNAOFNEWazpYM/aiuSZfuXmdTslXkpS9vH84EWOisJa t6/3ENvT3DnFFB7OEj4pl7T/dUuUU+EED2JkQqAUawGysZhbWtNRqmxfcEjCOSmD MUTHgSy5YDMgwo85M5YPjBTHTOUb28URqtVKoGyxXUR+QtqNlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDN3A3y//+mW4SUKvO5BjZCsQKShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1 MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1ZGZkMzZmYTcvMGJlMGNiMDMtOTFjNC0z ZTQ4LThhNTctNzQyY2VlZWFjZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVlNTE0MWUtYTA2OS00OTU1LThj NTUtNGRhNWRmZDM2ZmE3LzRlZTUxNDFlLWEwNjktNDk1NS04YzU1LTRkYTVkZmQz NmZhNy5jcmwwHwYDVR0jBBgwFoAUZclCa6B2R1JWJymYeUgFgb61rrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1 ZGZkMzZmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+J3BizIq8H0Z91hzu4KZaCGh/zIBJG7vkTY1FYFjOwS8gS3FP6R+cv xUsvE5vLVMORtusvZIDX8wmw9m6a5mRFhKai8gxH1tjQmPwlY6CcZlQZQ6QSH55D h64u0lr8YjD3TgEv2FEo8OUt4ZmuR98hBH6l02q+ke407uhmZShfvVWFzHFDal0h eM+z6sfPiADbAMRoysEJyQTtBcVyKIqHwkHBFZZC0OIctXF1B1OxqN7OiBr5WH0z Hwhdessvl/p3EBHOmQraFZ3MY++UwMBo9Rrvu9StgjIRTiUi5IRD/stk4J5gj2EB sbCt5m6yQNie6l8ax0bdgABRrfsjG6c= -----END CERTIFICATE-----Generated at Mon Mar 2 04:33:18 2026 by rpki-client