$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c32622f4-8fb9-3fb4-a8cd-8e2afcf2aed8.roa File: c32622f4-8fb9-3fb4-a8cd-8e2afcf2aed8.roa (raw, json) Hash identifier: ksKc56t7T1WTkFpobzjCWvamSfH0Le0fz3QpmFlN3tI= Subject key identifier: 40:9D:E9:28:83:99:6B:2F:9E:A9:E5:78:18:87:AB:CD:CE:02:14:AA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D02178B8FE3941534F5D37740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c32622f4-8fb9-3fb4-a8cd-8e2afcf2aed8.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 31898 IP address blocks: 148.116.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:8b:8f:e3:94:15:34:f5:d3:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=c945c718-da1e-457c-a49f-4925e4090723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ed:5c:4d:fc:f6:e7:cf:31:9f:31:c6:60:cb: 60:86:ff:d2:5b:91:af:4c:30:56:62:bf:ff:48:e5: 92:ea:43:c8:98:91:a1:5a:80:53:b9:bb:93:81:ff: 05:61:2d:8a:da:69:68:ea:8a:9f:74:c0:05:a5:8f: 53:80:55:50:c5:59:79:41:eb:ab:76:0b:6c:81:9f: 56:c2:6a:88:83:ba:1b:48:ca:2b:92:57:b9:b0:53: 23:1a:f3:e7:da:85:6c:7d:fd:12:17:fa:18:d9:a6: b8:eb:ed:f2:10:e5:de:25:82:ff:af:1e:50:e2:5d: ad:bb:64:5b:ba:81:ad:2f:36:d8:e7:2c:09:28:55: 98:41:01:94:c5:01:7d:77:7d:6b:0c:c9:0f:7b:6c: 4f:be:1c:f7:9c:2e:c2:b3:de:86:3f:1e:8e:e7:a9: a1:2e:51:da:ce:8d:e2:71:a8:5f:09:46:ce:82:36: 9d:67:fd:bb:16:40:52:97:26:27:cf:69:69:50:f5: 98:c8:66:5a:60:ff:36:3d:47:ae:5a:9e:04:76:d5: 01:51:e2:49:37:d6:1e:4a:4d:b8:e7:ff:4b:de:26: cb:c6:3b:6d:ba:3c:81:66:c0:62:8e:d2:14:8e:42: 44:49:38:e3:2a:98:4d:45:ae:ce:d6:d2:3b:d9:70: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9D:E9:28:83:99:6B:2F:9E:A9:E5:78:18:87:AB:CD:CE:02:14:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c32622f4-8fb9-3fb4-a8cd-8e2afcf2aed8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 148.116.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e8:db:80:77:10:bf:ba:1d:f7:a2:ba:2f:41:e7:95:8e:e3: e4:7c:06:7f:2d:45:c1:00:b2:31:de:49:e6:4c:a4:5c:75:ec: 7b:b2:d8:7e:65:ce:dd:fc:90:a0:69:13:ab:e3:33:ab:2a:8c: 11:02:35:5b:a7:7c:14:42:4f:e0:4d:61:f0:b7:17:8b:23:f4: c0:d7:81:9d:56:ed:d2:b5:ec:c9:ee:ae:49:ef:81:b4:dc:2b: 34:cb:85:bf:49:26:ae:6b:79:d2:0e:57:09:9c:69:14:c4:3f: 4c:f3:13:50:63:f7:85:ae:6a:22:fd:2e:f7:bd:eb:e8:8e:a0: f2:a2:82:e3:12:6c:4a:75:d9:f9:04:e4:33:bc:25:d8:74:ee: a4:0e:17:59:76:46:73:46:ca:5e:93:b6:4e:ef:4e:42:3a:e6: b2:f4:67:b8:fe:aa:93:c5:58:11:f0:88:38:21:4b:26:cf:15: 45:8a:f4:1d:69:74:21:79:3c:43:cd:86:99:bc:05:3d:57:a6: da:99:e3:f1:56:06:88:fd:ea:19:ef:96:2e:85:2f:24:03:d0: d8:38:ba:c0:af:4a:63:e0:4f:14:93:7d:5e:f5:b6:c8:a4:13: 58:9b:d8:c1:05:1c:39:bc:23:9f:c9:46:78:21:e5:c4:c9:07: f5:78:62:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF4uP45QVNPXTd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk Yzk0NWM3MTgtZGExZS00NTdjLWE0OWYtNDkyNWU0MDkwNzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+1cTfz2588xnzHGYMtghv/SW5GvTDBWYr// SOWS6kPImJGhWoBTubuTgf8FYS2K2mlo6oqfdMAFpY9TgFVQxVl5QeurdgtsgZ9W wmqIg7obSMorkle5sFMjGvPn2oVsff0SF/oY2aa46+3yEOXeJYL/rx5Q4l2tu2Rb uoGtLzbY5ywJKFWYQQGUxQF9d31rDMkPe2xPvhz3nC7Cs96GPx6O56mhLlHazo3i cahfCUbOgjadZ/27FkBSlyYnz2lpUPWYyGZaYP82PUeuWp4EdtUBUeJJN9YeSk24 5/9L3ibLxjttujyBZsBijtIUjkJESTjjKphNRa7O1tI72XAwyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECd6SiDmWsvnqnleBiHq83OAhSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzMyNjIyZjQtOGZiOS0z ZmI0LWE4Y2QtOGUyYWZjZjJhZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlHRjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABro24B3EL+6Hfeiui9B55WO4+R8Bn8tRcEAsjHeSeZMpFx17Huy2H5l zt38kKBpE6vjM6sqjBECNVunfBRCT+BNYfC3F4sj9MDXgZ1W7dK17MnurknvgbTc KzTLhb9JJq5redIOVwmcaRTEP0zzE1Bj94WuaiL9Lve96+iOoPKiguMSbEp12fkE 5DO8Jdh07qQOF1l2RnNGyl6Ttk7vTkI65rL0Z7j+qpPFWBHwiDghSybPFUWK9B1p dCF5PEPNhpm8BT1XptqZ4/FWBoj96hnvli6FLyQD0Ng4usCvSmPgTxSTfV71tsik E1ib2MEFHDm8I5/JRngh5cTJB/V4YjY= -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:08 2026 by rpki-client