$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3810a932-cad0-391b-8c86-b1ed5a858060.roa File: 3810a932-cad0-391b-8c86-b1ed5a858060.roa (raw, json) Hash identifier: 2+7ewt6PAAf5XmhpMD/2qOeg3/2iTq+s6DcvREUTJ4c= Subject key identifier: 9C:5C:84:6A:EB:18:2E:1A:12:D0:D6:25:5F:AB:D9:CC:0C:29:CE:04 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D02178B6B036682B9C1662C60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3810a932-cad0-391b-8c86-b1ed5a858060.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 31898 IP address blocks: 148.116.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:8b:6b:03:66:82:b9:c1:66:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=c0032cca-f960-48b5-815e-3f520241dd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fc:f5:3c:ea:2e:a9:43:97:5b:5e:85:32:8f: 0e:20:ef:5a:47:ee:e9:a3:8e:a0:d7:98:8e:f2:63: 0f:35:89:8a:b5:ba:6e:38:36:20:f6:17:89:ce:2a: e9:2d:c9:ff:fc:c2:2c:b2:ab:99:66:b1:7b:79:8e: 45:52:f9:d7:6f:b4:3a:76:19:65:b9:67:3f:90:32: 82:c3:3d:c8:26:b7:7f:78:2d:ce:99:d3:b6:5b:1e: 47:82:c1:44:bc:c7:9c:59:8d:02:7a:7d:53:4b:83: d7:d5:73:4a:a2:41:c4:a2:b2:24:9e:2e:33:23:3a: 37:82:2a:d6:f1:37:ad:87:e5:94:94:2e:7f:b1:3b: 6f:37:6c:5f:fa:6a:61:08:41:4a:df:fe:fe:31:37: e7:0b:21:fc:3f:5f:7a:bb:b2:96:f7:b1:ce:a0:82: d0:b3:70:3d:06:c6:66:ac:06:06:29:0f:5c:45:22: da:3e:6c:58:ac:4d:ec:47:19:36:c1:5e:5a:c5:2d: 8c:1d:30:41:a8:85:5a:c3:cb:3c:8a:02:93:75:ed: 63:7f:ea:ca:fd:66:05:33:dd:31:2c:84:1d:d5:d9: 70:29:3d:c1:58:d1:7d:f4:5a:a2:42:59:19:b8:20: 52:20:d9:3b:14:f4:83:2b:ac:9d:d3:1d:14:92:5d: af:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5C:84:6A:EB:18:2E:1A:12:D0:D6:25:5F:AB:D9:CC:0C:29:CE:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3810a932-cad0-391b-8c86-b1ed5a858060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 148.116.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5d:3c:9f:b8:73:f0:8a:5e:28:34:d3:de:11:06:be:c4:65: 00:1d:a0:34:7f:d0:88:6e:3b:5f:c3:a2:b8:1c:6a:5c:37:30: 58:a5:e5:91:36:3b:73:57:d9:59:85:7f:9f:41:af:a5:e0:14: be:98:25:c4:0d:fc:58:9a:b2:da:ef:50:40:36:c5:1f:72:aa: 32:93:11:5d:55:29:ea:f3:b8:ee:3a:a1:bd:b1:00:d2:42:3d: 82:cb:3b:30:af:cd:3b:13:a2:e6:78:10:1e:53:f5:79:64:5f: 69:f3:d5:93:e1:57:38:a2:fa:3e:4d:30:7f:98:c4:d5:62:e5: ab:e8:93:db:e2:b1:bb:95:4e:2c:1b:fd:03:ca:6e:73:b8:ba: 6b:85:ea:e9:16:6c:d3:aa:81:b1:70:d4:e0:52:ad:26:4b:18: 3a:85:b3:49:ec:a4:8b:cd:74:eb:20:39:cd:8a:ba:09:b4:13: 41:0e:f9:50:11:05:c8:22:74:32:1a:4f:8e:ad:37:00:c6:b0: c6:76:27:ae:11:4d:1f:9a:97:c6:36:62:0e:ad:43:33:e1:77: 3b:31:4e:88:8f:16:9b:ee:de:24:06:e0:95:63:06:d2:06:f4: d5:c8:29:c7:21:15:07:23:da:d6:f4:75:21:7b:0a:60:39:18: bc:28:76:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF4trA2aCucFmLGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzAwMzJjY2EtZjk2MC00OGI1LTgxNWUtM2Y1MjAyNDFkZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfz1POouqUOXW16FMo8OIO9aR+7po46g15iO 8mMPNYmKtbpuODYg9heJzirpLcn//MIssquZZrF7eY5FUvnXb7Q6dhlluWc/kDKC wz3IJrd/eC3OmdO2Wx5HgsFEvMecWY0Cen1TS4PX1XNKokHEorIkni4zIzo3girW 8Teth+WUlC5/sTtvN2xf+mphCEFK3/7+MTfnCyH8P196u7KW97HOoILQs3A9BsZm rAYGKQ9cRSLaPmxYrE3sRxk2wV5axS2MHTBBqIVaw8s8igKTde1jf+rK/WYFM90x LIQd1dlwKT3BWNF99FqiQlkZuCBSINk7FPSDK6yd0x0Ukl2vTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxchGrrGC4aEtDWJV+r2cwMKc4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzgxMGE5MzItY2FkMC0z OTFiLThjODYtYjFlZDVhODU4MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlHRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1dPJ+4c/CKXig0094RBr7EZQAdoDR/0IhuO1/Dorgcalw3MFil5ZE2 O3NX2VmFf59Br6XgFL6YJcQN/FiastrvUEA2xR9yqjKTEV1VKerzuO46ob2xANJC PYLLOzCvzTsTouZ4EB5T9XlkX2nz1ZPhVzii+j5NMH+YxNVi5avok9visbuVTiwb /QPKbnO4umuF6ukWbNOqgbFw1OBSrSZLGDqFs0nspIvNdOsgOc2Kugm0E0EO+VAR BcgidDIaT46tNwDGsMZ2J64RTR+al8Y2Yg6tQzPhdzsxToiPFpvu3iQG4JVjBtIG 9NXIKcchFQcj2tb0dSF7CmA5GLwodsM= -----END CERTIFICATE-----Generated at Mon Mar 2 15:31:59 2026 by rpki-client