$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/d97fe973-812f-3261-88cc-3d44e14e1f31.roa File: d97fe973-812f-3261-88cc-3d44e14e1f31.roa (raw, json) Hash identifier: zdoEVFDsyW0u6P57J8gLkiAzN3mk6LH6iIKK7UUGnes= Subject key identifier: 6F:C2:58:18:3A:FD:9B:2C:A8:D9:A0:36:E1:E5:3D:DB:A3:85:FC:EF Certificate issuer: /CN=289876d1-6f64-46d8-b9fd-5cffbc9848ca Certificate serial: 010D0C9F4328584D07ACE8FB6A106651379BC600 Authority key identifier: CF:7E:59:2E:4B:EE:CC:3B:2B:E7:EA:FE:93:D8:2C:4A:09:55:A3:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/d97fe973-812f-3261-88cc-3d44e14e1f31.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 62581 IP address blocks: 148.59.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/289876d1-6f64-46d8-b9fd-5cffbc9848ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/289876d1-6f64-46d8-b9fd-5cffbc9848ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:e8:fb:6a:10:66:51:37:9b:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289876d1-6f64-46d8-b9fd-5cffbc9848ca Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=0a7d30f6-6958-40fd-b495-010bf75b9763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:58:b5:c7:e4:09:ef:ac:8c:84:5d:4a:ca:b0: 0b:c4:3d:a3:e7:27:95:92:74:f9:71:31:ea:0d:8a: 04:fd:11:b6:a6:8a:08:64:87:10:1d:c1:e7:1f:05: 6f:ef:ab:8c:aa:12:d5:14:81:66:c1:1f:40:34:3d: 13:51:e3:0c:ca:70:5e:bc:3e:f8:f4:7e:c5:9d:41: 9b:41:ab:89:1d:f4:b7:75:90:bc:ce:2d:ae:6e:48: c1:86:54:0d:a3:92:45:fe:c0:38:dd:dd:66:df:c0: c8:a3:72:69:76:c2:8f:f5:9f:25:f0:cd:db:fb:7e: 14:c3:b0:b0:d3:e2:6c:63:8e:9a:6e:05:1e:3f:42: 0b:c1:65:11:3b:20:e8:02:3a:ef:66:1f:81:47:ae: 41:96:84:0b:fb:6d:ed:76:f7:50:86:58:b3:c1:e5: fa:60:16:02:a8:00:b6:9e:1c:1f:f8:f3:4a:2d:1d: 49:89:cb:e5:c9:4b:79:ac:cd:0f:a0:3d:44:44:f2: 78:fb:f4:c7:7f:4d:f4:b6:bf:3d:44:2b:25:b7:7e: cf:a3:ec:e7:35:2c:5d:22:67:62:0d:0d:f8:58:9d: 02:5f:9c:93:2f:90:bd:dd:aa:72:4a:78:c5:8b:e7: 66:e0:82:3c:40:c6:a7:89:ab:d9:14:bd:6c:f8:f2: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C2:58:18:3A:FD:9B:2C:A8:D9:A0:36:E1:E5:3D:DB:A3:85:FC:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/d97fe973-812f-3261-88cc-3d44e14e1f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/289876d1-6f64-46d8-b9fd-5cffbc9848ca.crl X509v3 Authority Key Identifier: keyid:CF:7E:59:2E:4B:EE:CC:3B:2B:E7:EA:FE:93:D8:2C:4A:09:55:A3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca.cer sbgp-ipAddrBlock: critical IPv4: 148.59.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ef:7a:28:2e:6c:a9:4e:72:7f:5e:8f:91:16:21:ed:7d:e8: 76:5f:27:46:c6:05:28:34:f8:f1:85:58:fd:6f:a8:82:a7:81: de:a4:bd:45:35:0b:8e:60:5f:e9:4d:a2:1c:f9:3f:91:e9:d0: ea:2c:af:90:93:a3:54:f3:20:3a:c3:63:23:f3:68:5e:1a:ee: 2a:75:5f:63:d6:b4:85:04:b1:b7:4a:cc:be:8a:a8:4d:5b:37: 97:ac:57:df:9a:44:68:67:a5:7b:81:07:8b:9b:33:52:91:c8: 49:86:1d:e5:ef:34:50:c8:58:97:12:2b:97:9a:56:6c:51:01: 7c:48:db:72:18:ce:58:70:34:4a:96:c3:2b:d2:3c:d5:f7:1a: 85:ce:fd:d0:21:33:48:fb:a6:67:24:cd:0e:8d:55:24:3d:fa: 6a:f4:cb:99:bd:8e:59:79:f3:2c:cb:48:90:03:7a:60:fc:ad: 23:6c:aa:5f:a7:f2:c3:6f:a8:72:9d:aa:d2:43:45:ce:b1:a2: af:3d:a4:57:f4:70:58:5b:3c:41:68:49:b2:2f:a9:85:76:f9: 03:f5:69:a0:2b:2a:3e:4e:c7:ca:72:49:d4:8a:3a:c2:82:4c: 02:2a:2b:6c:4b:b8:d6:8f:20:7d:2e:29:f7:02:ba:58:80:cc: 49:f9:34:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrOj7ahBmUTebxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5ODc2ZDEtNmY2NC00NmQ4LWI5ZmQtNWNmZmJjOTg0 OGNhMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MGE3ZDMwZjYtNjk1OC00MGZkLWI0OTUtMDEwYmY3NWI5NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjli1x+QJ76yMhF1KyrALxD2j5yeVknT5cTHq DYoE/RG2pooIZIcQHcHnHwVv76uMqhLVFIFmwR9AND0TUeMMynBevD749H7FnUGb QauJHfS3dZC8zi2ubkjBhlQNo5JF/sA43d1m38DIo3JpdsKP9Z8l8M3b+34Uw7Cw 0+JsY46abgUeP0ILwWUROyDoAjrvZh+BR65BloQL+23tdvdQhlizweX6YBYCqAC2 nhwf+PNKLR1JicvlyUt5rM0PoD1ERPJ4+/THf030tr89RCslt37Po+znNSxdImdi DQ34WJ0CX5yTL5C93apySnjFi+dm4II8QManiavZFL1s+PJrCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/CWBg6/ZssqNmgNuHlPdujhfzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yODk4 NzZkMS02ZjY0LTQ2ZDgtYjlmZC01Y2ZmYmM5ODQ4Y2EvZDk3ZmU5NzMtODEyZi0z MjYxLTg4Y2MtM2Q0NGUxNGUxZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjg5ODc2ZDEtNmY2NC00NmQ4LWI5 ZmQtNWNmZmJjOTg0OGNhLzI4OTg3NmQxLTZmNjQtNDZkOC1iOWZkLTVjZmZiYzk4 NDhjYS5jcmwwHwYDVR0jBBgwFoAUz35ZLkvuzDsr5+r+k9gsSglVo6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yODk4NzZkMS02ZjY0LTQ2ZDgtYjlmZC01Y2Zm YmM5ODQ4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDt+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnveigubKlOcn9ej5EWIe196HZfJ0bGBSg0+PGFWP1vqIKngd6kvUU1 C45gX+lNohz5P5Hp0Oosr5CTo1TzIDrDYyPzaF4a7ip1X2PWtIUEsbdKzL6KqE1b N5esV9+aRGhnpXuBB4ubM1KRyEmGHeXvNFDIWJcSK5eaVmxRAXxI23IYzlhwNEqW wyvSPNX3GoXO/dAhM0j7pmckzQ6NVSQ9+mr0y5m9jll58yzLSJADemD8rSNsql+n 8sNvqHKdqtJDRc6xoq89pFf0cFhbPEFoSbIvqYV2+QP1aaArKj5Ox8pySdSKOsKC TAIqK2xLuNaPIH0uKfcCuliAzEn5NH0= -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:41 2026 by rpki-client