$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa File: c9aa9150-9841-397a-b807-599d98d7b122.roa (raw, json) Hash identifier: OSy5Q0cvQxVf+0xk2WG/mkLGhugpLoT/i/wNzJwzXi8= Subject key identifier: D4:29:0E:0D:9A:D8:BB:06:D8:C4:0F:DC:25:26:E9:45:0D:06:BE:D7 Certificate issuer: /CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Certificate serial: 010D0C9F4328584D021791022761CB477254ADD0 Authority key identifier: DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 25996 IP address blocks: 149.101.100.0/24 maxlen: 32 149.101.101.0/24 maxlen: 32 149.101.102.0/24 maxlen: 32 149.101.103.0/24 maxlen: 32 149.101.118.0/24 maxlen: 32 149.101.164.0/23 maxlen: 32 149.101.216.0/24 maxlen: 32 149.101.229.0/24 maxlen: 32 149.101.242.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:91:02:27:61:cb:47:72:54:ad:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=53de1364-ad1d-4716-b602-2464300a4f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:4d:53:bc:3a:38:14:ec:3c:d9:a1:01:05: be:02:24:2a:cc:2e:2c:20:df:c8:17:74:09:be:d1: a0:c2:7f:aa:ee:14:e1:7c:b9:03:03:69:7d:5b:93: 4b:1c:f7:69:ab:b1:ca:7a:34:5c:95:30:bc:81:51: 51:27:62:dd:71:6c:03:14:3d:d8:2e:7b:97:ef:68: 06:ee:c5:ac:dd:a0:d0:29:54:52:2e:7f:3c:b0:a3: 77:46:50:6a:41:ba:91:9b:08:d3:8b:1a:8e:37:91: a9:40:ea:26:25:5d:75:f8:c2:38:22:a9:2a:2a:60: 77:90:3f:2c:13:45:7f:ef:2d:ee:3c:f4:ba:de:eb: ed:ea:0e:2f:df:4a:7c:83:fa:0f:4f:9b:b7:fa:ef: 6f:e0:1f:99:f4:d1:f8:58:70:17:79:48:c6:6a:32: 36:e4:32:47:08:b4:c5:8a:d1:ba:d6:dd:76:b3:69: 90:3f:86:7f:4d:3e:d4:e7:72:5e:ee:68:ec:1f:74: 57:07:8d:30:6f:d9:93:3f:18:b9:10:c1:05:dd:22: 8b:41:83:55:ea:34:53:c7:c4:fe:4c:51:04:c3:57: ba:cc:e6:ea:22:35:ca:1c:b8:4f:a8:ce:63:df:6b: 1c:d5:33:1c:b8:aa:45:4d:a5:14:a3:cb:dd:14:5c: ae:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:29:0E:0D:9A:D8:BB:06:D8:C4:0F:DC:25:26:E9:45:0D:06:BE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl X509v3 Authority Key Identifier: keyid:DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer sbgp-ipAddrBlock: critical IPv4: 149.101.100.0/22 149.101.118.0/24 149.101.164.0/23 149.101.216.0/24 149.101.229.0/24 149.101.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:85:5d:79:a1:67:6c:11:0c:84:20:c8:b9:1c:92:dc:5d:d1: 39:a9:56:bb:4f:fb:c9:3f:1c:b5:7f:46:55:de:db:99:63:74: 5d:f5:70:33:ad:eb:f2:e5:48:80:0f:3d:a2:4f:07:cd:72:d6: 42:43:58:3d:b6:64:04:3e:f2:7e:f8:ce:88:bd:b4:34:89:3f: e3:4e:ed:54:c5:6a:d7:bf:19:9a:b2:34:23:53:4a:f4:11:b2: 14:13:d9:44:be:52:05:50:b5:d6:aa:e9:af:2e:a6:d0:4d:a2: bf:81:a9:19:39:81:8b:0e:23:dc:dd:d3:ba:41:50:5f:f3:8a: 38:48:27:1f:15:59:45:32:29:32:0b:4f:9c:fd:cb:32:2e:37: 99:83:3e:8d:0e:58:04:63:c1:73:46:c0:75:1b:18:02:e9:1e: f1:56:ca:c4:51:d6:f0:bb:0a:e3:f0:3b:94:05:c8:e1:57:bf: fd:ad:34:23:97:79:a1:f2:17:a5:f0:dd:bb:cf:fc:11:4a:b1: e1:c0:3c:e5:3b:3a:c8:0a:b7:dc:37:fc:98:b7:91:56:fc:2b: 4c:6d:96:af:b2:25:f4:f4:d6:58:51:05:c3:e7:4a:07:2a:b8: f7:f6:3b:91:92:0a:46:a7:6f:eb:e0:63:38:f6:25:a2:d0:41: 5c:b8:6e:0a -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE0CF5ECJ2HLR3JUrdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlYzA0YzItMmI2Yy00ZTlhLTgwNjItZTQyMGFjMWEy NTdhMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTNkZTEzNjQtYWQxZC00NzE2LWI2MDItMjQ2NDMwMGE0ZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL5NU7w6OBTsPNmhAQW+AiQqzC4sIN/IF3QJ vtGgwn+q7hThfLkDA2l9W5NLHPdpq7HKejRclTC8gVFRJ2LdcWwDFD3YLnuX72gG 7sWs3aDQKVRSLn88sKN3RlBqQbqRmwjTixqON5GpQOomJV11+MI4IqkqKmB3kD8s E0V/7y3uPPS63uvt6g4v30p8g/oPT5u3+u9v4B+Z9NH4WHAXeUjGajI25DJHCLTF itG61t12s2mQP4Z/TT7U53Je7mjsH3RXB40wb9mTPxi5EMEF3SKLQYNV6jRTx8T+ TFEEw1e6zObqIjXKHLhPqM5j32sc1TMcuKpFTaUUo8vdFFyuTwIDAQABo4IDczCC A28wHQYDVR0OBBYEFNQpDg2a2LsG2MQP3CUm6UUNBr7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZmVj MDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIwYWMxYTI1N2EvYzlhYTkxNTAtOTg0MS0z OTdhLWI4MDctNTk5ZDk4ZDdiMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWZlYzA0YzItMmI2Yy00ZTlhLTgw NjItZTQyMGFjMWEyNTdhLzFmZWMwNGMyLTJiNmMtNGU5YS04MDYyLWU0MjBhYzFh MjU3YS5jcmwwHwYDVR0jBBgwFoAU2qb7zY3/ImjEHrqszoAkhr3N00QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZmVjMDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIw YWMxYTI1N2EuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQClWVkAwQA lWV2AwQBlWWkAwQAlWXYAwQAlWXlAwQAlWXyMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFKFXXmhZ2wRDIQg yLkcktxd0TmpVrtP+8k/HLV/RlXe25ljdF31cDOt6/LlSIAPPaJPB81y1kJDWD22 ZAQ+8n74zoi9tDSJP+NO7VTFate/GZqyNCNTSvQRshQT2US+UgVQtdaq6a8uptBN or+BqRk5gYsOI9zd07pBUF/zijhIJx8VWUUyKTILT5z9yzIuN5mDPo0OWARjwXNG wHUbGALpHvFWysRR1vC7CuPwO5QFyOFXv/2tNCOXeaHyF6Xw3bvP/BFKseHAPOU7 OsgKt9w3/Ji3kVb8K0xtlq+yJfT01lhRBcPnSgcquPf2O5GSCkanb+vgYzj2JaLQ QVy4bgo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:01:02 2026 by rpki-client