$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/a038c094-5c97-3abd-9c49-a4f0cb3bd50b.roa File: a038c094-5c97-3abd-9c49-a4f0cb3bd50b.roa (raw, json) Hash identifier: Fe/23IbxqE5GBI5a8D7neB1jac3YlczkVX0q0+iXTno= Subject key identifier: 94:FE:72:42:BF:09:95:F7:E5:05:06:24:60:FE:61:BF:A1:85:32:9F Certificate issuer: /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55 Certificate serial: 010D0C9F4328584DFBD5E089D2F3DC77A7587800 Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/a038c094-5c97-3abd-9c49-a4f0cb3bd50b.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 14618 IP address blocks: 148.59.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:e0:89:d2:f3:dc:77:a7:58:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=471bf57c-e131-451c-bbc2-966802a327f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:89:12:9b:36:5f:2a:98:6c:df:b8:c0:35: 07:27:ed:63:30:e9:5d:3f:9f:d1:8d:23:4f:e1:4f: 37:12:6a:63:10:60:b1:9e:34:74:17:e4:93:04:34: 24:4e:06:8e:c7:04:e7:d4:d1:71:e3:8c:60:54:58: 46:86:17:c7:9e:43:78:80:b5:6e:8e:25:65:75:8a: b4:c2:a6:dd:e0:b0:59:cc:6d:b0:e3:72:54:ba:fc: 70:c5:13:7c:70:ec:42:e1:88:e7:9f:2b:db:af:ba: 5b:b1:20:86:82:80:1f:6e:03:14:f9:7d:08:d6:d0: c2:9f:1c:cb:c2:21:7a:f5:d0:dc:15:06:12:20:f4: d1:c0:65:f8:97:b4:5a:5e:5a:16:fb:11:6f:07:e9: ab:75:60:6e:20:0c:43:32:be:2d:c8:07:66:06:36: 81:dc:8d:5a:3f:d9:18:44:b4:db:6b:8e:73:e6:5e: 97:5f:e1:bd:b9:98:9f:75:3c:f7:44:1a:80:b2:91: 50:71:a9:c4:12:97:8c:a9:bb:02:f7:0e:37:52:21: 75:07:db:6c:26:b0:bd:e1:04:fb:19:77:a4:eb:9f: 9f:e5:a5:b6:2d:4e:a3:ab:69:54:3c:3b:8b:87:a8: 3c:5c:b1:11:c6:bb:32:b2:73:97:23:06:2e:eb:0b: e2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FE:72:42:BF:09:95:F7:E5:05:06:24:60:FE:61:BF:A1:85:32:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/a038c094-5c97-3abd-9c49-a4f0cb3bd50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl X509v3 Authority Key Identifier: keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer sbgp-ipAddrBlock: critical IPv4: 148.59.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:91:33:58:ad:31:6e:6c:83:27:f8:58:4b:50:6f:00:b3:d6: 55:a3:51:d8:69:c9:77:de:26:4d:16:b5:75:56:00:61:a2:2d: 47:df:ca:95:5f:f2:4b:c2:e8:f1:92:d6:71:60:03:e6:38:9d: 4b:f4:05:77:29:11:78:fa:34:1d:cd:78:34:54:98:69:7a:37: 8d:f7:74:78:4f:07:02:38:b2:12:b9:40:60:ed:4c:dd:22:8b: bc:4b:71:bc:5c:3f:15:46:fc:7d:bf:b6:e4:d8:09:ac:ce:09: 66:69:69:0e:1a:82:d9:e7:70:a5:6e:4a:f9:72:79:9c:e2:17: 1e:c2:90:05:1e:19:68:0a:a1:67:5f:28:28:14:6a:b2:2d:f3: fd:08:e4:15:8e:52:f2:8e:4b:d6:6e:5e:35:9c:be:62:ae:d2: 8d:32:53:70:16:05:da:9e:f6:54:ce:22:84:b8:2b:d0:38:d4: 39:f5:c6:36:8e:ef:d1:ed:2b:86:5c:9c:73:a0:ab:6d:54:03: dd:62:e8:53:13:65:3b:bb:5b:26:48:ed:8b:de:74:1e:67:f7: e5:15:e5:76:e6:4e:9d:ac:cb:a1:5d:e9:87:56:ef:75:4f:c9: 7b:d3:7a:7d:b4:ae:90:e6:ed:ad:b8:f8:bf:92:25:a2:bb:4d: 7d:64:bc:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371eCJ0vPcd6dYeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcwNWZkZjAtZTQ4My00OWQ5LTg3MTMtMWNjNmFhODVk YjU1MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk NDcxYmY1N2MtZTEzMS00NTFjLWJiYzItOTY2ODAyYTMyN2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdGJEps2XyqYbN+4wDUHJ+1jMOldP5/RjSNP 4U83EmpjEGCxnjR0F+STBDQkTgaOxwTn1NFx44xgVFhGhhfHnkN4gLVujiVldYq0 wqbd4LBZzG2w43JUuvxwxRN8cOxC4Yjnnyvbr7pbsSCGgoAfbgMU+X0I1tDCnxzL wiF69dDcFQYSIPTRwGX4l7RaXloW+xFvB+mrdWBuIAxDMr4tyAdmBjaB3I1aP9kY RLTba45z5l6XX+G9uZifdTz3RBqAspFQcanEEpeMqbsC9w43UiF1B9tsJrC94QT7 GXek65+f5aW2LU6jq2lUPDuLh6g8XLERxrsysnOXIwYu6wvimQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT+ckK/CZX35QUGJGD+Yb+hhTKfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1 ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2YWE4NWRiNTUvYTAzOGMwOTQtNWM5Ny0z YWJkLTljNDktYTRmMGNiM2JkNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzcwNWZkZjAtZTQ4My00OWQ5LTg3 MTMtMWNjNmFhODVkYjU1L2M3MDVmZGYwLWU0ODMtNDlkOS04NzEzLTFjYzZhYTg1 ZGI1NS5jcmwwHwYDVR0jBBgwFoAUa70NuVfAKfR62iQNowf8+cKsB7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2 YWE4NWRiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqRM1itMW5sgyf4WEtQbwCz1lWjUdhpyXfeJk0WtXVWAGGiLUffypVf 8kvC6PGS1nFgA+Y4nUv0BXcpEXj6NB3NeDRUmGl6N433dHhPBwI4shK5QGDtTN0i i7xLcbxcPxVG/H2/tuTYCazOCWZpaQ4agtnncKVuSvlyeZziFx7CkAUeGWgKoWdf KCgUarIt8/0I5BWOUvKOS9ZuXjWcvmKu0o0yU3AWBdqe9lTOIoS4K9A41Dn1xjaO 79HtK4ZcnHOgq21UA91i6FMTZTu7WyZI7YvedB5n9+UV5XbmTp2sy6Fd6YdW73VP yXvTen20rpDm7a24+L+SJaK7TX1kvMk= -----END CERTIFICATE-----Generated at Sat Jun 13 13:59:37 2026 by rpki-client