$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d74b73cb-f7d0-310e-abd3-eb8242554564.roa File: d74b73cb-f7d0-310e-abd3-eb8242554564.roa (raw, json) Hash identifier: XoUmKLyPReo71mgvpqHM8ghP95Rh3IKF6XZSIkuuMlg= Subject key identifier: D6:8B:B6:B5:C2:C4:2A:C8:B8:44:53:1B:FD:0E:0D:CB:E4:49:2B:BA Certificate issuer: /CN=d2fd9126-b2ee-4caf-bbe5-3387bc901c15 Certificate serial: 010D0C9F4328584CA5F740AD09FF128E1C24B900 Authority key identifier: D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d74b73cb-f7d0-310e-abd3-eb8242554564.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 53733 IP address blocks: 148.66.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:40:ad:09:ff:12:8e:1c:24:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2fd9126-b2ee-4caf-bbe5-3387bc901c15 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=82b6e7a4-2f86-4b4f-a487-686953cfa8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:53:16:eb:78:d5:35:65:58:93:ec:7d:e9: d7:a9:74:92:7f:26:91:a2:b7:f3:da:c0:1d:69:93: 47:bd:f5:9c:63:da:7e:84:27:73:38:fc:ac:5d:9b: 95:18:1c:ea:71:af:26:88:32:59:cd:91:90:72:03: c3:1e:9e:fa:1d:2e:e3:2a:6b:63:01:a3:99:04:2a: 43:f7:1d:d4:69:0b:6f:7c:b0:e3:e1:61:88:ba:74: 50:8a:95:46:73:bb:16:d8:ea:d1:c7:3e:62:46:0a: 03:d5:98:82:f1:e6:a3:5f:28:24:81:c6:89:06:9b: 44:df:d8:2a:90:19:27:3f:95:ae:4e:6f:66:61:8c: 1e:7b:1b:3e:cb:80:4d:c2:cf:c0:ff:62:3d:dd:f9: 5c:7d:3c:c9:b9:68:9f:56:cc:f4:91:20:c8:6c:1e: 92:7d:ab:5d:92:c1:f5:ee:d3:34:73:26:57:28:62: ee:2c:11:08:9a:cc:08:66:c4:e6:fd:01:e3:f7:e7: 9e:1b:ba:03:f9:d4:1c:26:ca:4c:03:d0:46:9b:86: ea:6b:e7:2c:66:71:ac:54:a5:6e:83:1c:03:ca:4c: be:50:5f:e4:cd:3e:5f:59:ec:95:5f:47:44:f1:91: f8:9a:ac:b6:4a:71:69:6d:f9:0b:e2:ae:d8:2e:7a: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8B:B6:B5:C2:C4:2A:C8:B8:44:53:1B:FD:0E:0D:CB:E4:49:2B:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d74b73cb-f7d0-310e-abd3-eb8242554564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.crl X509v3 Authority Key Identifier: keyid:D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer sbgp-ipAddrBlock: critical IPv4: 148.66.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3b:94:84:b2:b3:54:04:8a:1e:26:d6:4a:b3:b1:ab:74:62: 61:80:73:a1:46:76:bb:fe:a6:a7:7d:b4:81:88:41:bf:2d:7e: 12:c3:b8:84:37:c1:eb:91:46:6e:21:2e:03:f6:c5:82:33:e5: d1:a6:68:55:4f:9e:af:27:cb:07:c2:5e:be:39:eb:4f:a2:b3: 70:eb:3e:bb:8d:97:a8:68:d1:37:45:11:05:7e:32:6c:cc:98: 69:53:c5:b2:6b:66:a7:cf:be:28:68:63:b4:ba:c2:f5:95:07: 91:f2:31:d5:58:51:75:d4:09:78:5a:5e:60:d4:d7:7a:6a:2d: f8:f2:a8:97:e7:6e:ff:b9:b4:06:01:c1:89:23:79:3a:7c:ff: 9b:ab:a5:db:3d:ff:b7:f8:4b:aa:51:94:ba:53:c0:3a:66:d0: 76:bd:00:bb:43:e7:34:9c:ae:36:61:71:1d:8f:2d:67:b0:e1: a2:5b:57:5d:af:f9:0e:bf:f1:20:5d:2f:78:bc:0d:62:df:4a: 68:50:2c:51:ed:6f:7e:f6:9c:7f:67:b8:d6:9d:e1:3d:e0:65: b9:9a:26:7f:68:57:22:cc:9e:c7:6c:71:3a:06:96:c1:07:4a: ae:dd:08:70:9e:9b:56:77:96:2a:2c:58:41:14:b8:34:d5:ad: 02:63:98:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90CtCf8SjhwkuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJmZDkxMjYtYjJlZS00Y2FmLWJiZTUtMzM4N2JjOTAx YzE1MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ODJiNmU3YTQtMmY4Ni00YjRmLWE0ODctNjg2OTUzY2ZhOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf1TFut41TVlWJPsfenXqXSSfyaRorfz2sAd aZNHvfWcY9p+hCdzOPysXZuVGBzqca8miDJZzZGQcgPDHp76HS7jKmtjAaOZBCpD 9x3UaQtvfLDj4WGIunRQipVGc7sW2OrRxz5iRgoD1ZiC8eajXygkgcaJBptE39gq kBknP5WuTm9mYYweexs+y4BNws/A/2I93flcfTzJuWifVsz0kSDIbB6SfatdksH1 7tM0cyZXKGLuLBEImswIZsTm/QHj9+eeG7oD+dQcJspMA9BGm4bqa+csZnGsVKVu gxwDyky+UF/kzT5fWeyVX0dE8ZH4mqy2SnFpbfkL4q7YLnqEMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaLtrXCxCrIuERTG/0ODcvkSSu6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMmZk OTEyNi1iMmVlLTRjYWYtYmJlNS0zMzg3YmM5MDFjMTUvZDc0YjczY2ItZjdkMC0z MTBlLWFiZDMtZWI4MjQyNTU0NTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDJmZDkxMjYtYjJlZS00Y2FmLWJi ZTUtMzM4N2JjOTAxYzE1L2QyZmQ5MTI2LWIyZWUtNGNhZi1iYmU1LTMzODdiYzkw MWMxNS5jcmwwHwYDVR0jBBgwFoAU2Mga50vWljReBKzGXiiZLKKPLR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMmZkOTEyNi1iMmVlLTRjYWYtYmJlNS0zMzg3 YmM5MDFjMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlEImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc7lISys1QEih4m1kqzsat0YmGAc6FGdrv+pqd9tIGIQb8tfhLDuIQ3 weuRRm4hLgP2xYIz5dGmaFVPnq8nywfCXr4560+is3DrPruNl6ho0TdFEQV+MmzM mGlTxbJrZqfPvihoY7S6wvWVB5HyMdVYUXXUCXhaXmDU13pqLfjyqJfnbv+5tAYB wYkjeTp8/5urpds9/7f4S6pRlLpTwDpm0Ha9ALtD5zScrjZhcR2PLWew4aJbV12v +Q6/8SBdL3i8DWLfSmhQLFHtb372nH9nuNad4T3gZbmaJn9oVyLMnsdscToGlsEH Sq7dCHCem1Z3liosWEEUuDTVrQJjmOI= -----END CERTIFICATE-----Generated at Mon Mar 2 04:05:59 2026 by rpki-client