$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa File: 303e9955-d68e-32c2-a271-3e5a2b3464ba.roa (raw, json) Hash identifier: qAvjVIJ6a+gSSJRzsLN04zxLDD4UFOlu58hMg4S4sHQ= Subject key identifier: 75:48:96:C8:40:2C:1B:6C:68:26:37:7A:17:C8:63:20:67:14:B4:32 Certificate issuer: /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Certificate serial: 010D0C9F4328584F66C2B737001676F38D77E280 Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 36734 IP address blocks: 148.64.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:b7:37:00:16:76:f3:8d:77:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=5bdceb85-ca59-4785-a074-5e2ec5d1eb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d2:b1:8d:7d:e8:66:04:4b:41:a7:9b:a6:fa: 97:5f:3f:09:a9:d8:89:72:e5:f1:15:01:d2:3a:85: db:cf:f9:ba:34:07:c1:ea:43:75:b1:e3:c8:b6:ba: ac:64:25:5e:2e:5e:2d:31:19:f0:ae:65:db:e2:9d: 08:ca:f8:47:f5:0f:6b:6b:3c:8e:fb:a5:e0:b1:d9: 17:b3:4c:38:61:cd:b6:08:0d:6e:08:2c:63:8e:8a: be:44:1d:e4:31:a5:c1:8b:9e:c2:58:d4:4c:9c:51: 62:7a:fc:02:5d:e5:81:08:6e:4a:e2:83:2b:74:d6: a8:d2:dd:69:54:b5:8a:4d:46:b1:cc:65:00:92:f8: d5:1c:7c:e3:4a:58:f7:a5:62:6f:b8:29:38:a7:85: 58:89:c2:56:ee:ac:38:6e:10:fb:eb:86:4f:d5:0e: 65:1c:87:93:76:7a:f6:dd:da:f2:9d:5c:39:70:3a: 39:70:1e:66:bf:2c:20:22:2c:c6:46:8b:f9:bc:73: e8:e1:92:21:b1:a3:5f:29:48:84:32:95:76:91:85: 02:57:bc:a5:ff:92:16:ba:9f:49:ec:5b:81:9a:85: 55:3c:86:cb:59:23:20:dc:0c:08:84:18:03:f1:a9: fe:12:f8:12:97:a4:04:e6:cb:c6:e8:1e:2e:d3:7d: 0d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:48:96:C8:40:2C:1B:6C:68:26:37:7A:17:C8:63:20:67:14:B4:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl X509v3 Authority Key Identifier: keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer sbgp-ipAddrBlock: critical IPv4: 148.64.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5c:da:26:c8:44:89:08:6a:66:e9:8e:8e:8a:39:e1:42:a3: 2d:37:d3:80:94:02:02:df:65:ac:0c:58:a3:ed:a7:fc:80:9b: 97:2b:65:a7:e7:bc:5c:6d:eb:fc:04:e6:83:f6:32:04:2d:c1: 07:3d:de:02:da:ed:54:6c:aa:3a:52:a4:ff:3e:8a:05:bc:5a: 35:41:e3:71:cf:c6:06:17:7c:84:a6:bf:bf:ed:38:ba:b6:7b: 72:ec:75:71:20:be:02:94:03:96:cb:cb:0d:61:9c:91:a1:c7: 5c:a4:35:66:b9:2d:43:ec:43:97:50:98:cf:ba:61:b6:39:f3: 59:61:00:73:09:a8:25:6b:6a:37:e6:69:81:0f:12:4a:2c:6d: 6a:4a:30:73:80:72:f4:24:2f:33:66:fa:d7:65:1f:6c:d0:bb: 86:94:ce:ca:94:32:03:9c:2c:da:f7:40:a6:ef:de:d0:0f:57: 47:41:df:2a:95:39:e0:02:b6:d4:56:0e:05:5b:d7:c6:51:c0: 98:bd:86:96:ae:f5:d8:11:eb:20:58:cd:dc:f6:7d:12:a5:e8: fd:d8:44:7c:39:74:f8:57:19:73:d5:86:a0:6f:73:15:31:d7: 90:94:cb:b7:e7:b6:aa:9b:ae:82:1a:29:d3:81:b1:76:d5:cb: 77:08:74:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwrc3ABZ284134oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNiZTJjYWYtYWZkMC00ZWRmLWE3NDMtYjM1MGMyM2Uz MDdkMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk NWJkY2ViODUtY2E1OS00Nzg1LWEwNzQtNWUyZWM1ZDFlYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtKxjX3oZgRLQaebpvqXXz8JqdiJcuXxFQHS OoXbz/m6NAfB6kN1sePItrqsZCVeLl4tMRnwrmXb4p0IyvhH9Q9razyO+6XgsdkX s0w4Yc22CA1uCCxjjoq+RB3kMaXBi57CWNRMnFFievwCXeWBCG5K4oMrdNao0t1p VLWKTUaxzGUAkvjVHHzjSlj3pWJvuCk4p4VYicJW7qw4bhD764ZP1Q5lHIeTdnr2 3drynVw5cDo5cB5mvywgIizGRov5vHPo4ZIhsaNfKUiEMpV2kYUCV7yl/5IWup9J 7FuBmoVVPIbLWSMg3AwIhBgD8an+EvgSl6QE5svG6B4u030NsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVIlshALBtsaCY3ehfIYyBnFLQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2Jl MmNhZi1hZmQwLTRlZGYtYTc0My1iMzUwYzIzZTMwN2QvMzAzZTk5NTUtZDY4ZS0z MmMyLWEyNzEtM2U1YTJiMzQ2NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWNiZTJjYWYtYWZkMC00ZWRmLWE3 NDMtYjM1MGMyM2UzMDdkL2VjYmUyY2FmLWFmZDAtNGVkZi1hNzQzLWIzNTBjMjNl MzA3ZC5jcmwwHwYDVR0jBBgwFoAUwnZy+KO6PDsEP1vhWw2QXNk6WFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2JlMmNhZi1hZmQwLTRlZGYtYTc0My1iMzUw YzIzZTMwN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElEBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJc2ibIRIkIambpjo6KOeFCoy0304CUAgLfZawMWKPtp/yAm5crZafn vFxt6/wE5oP2MgQtwQc93gLa7VRsqjpSpP8+igW8WjVB43HPxgYXfISmv7/tOLq2 e3LsdXEgvgKUA5bLyw1hnJGhx1ykNWa5LUPsQ5dQmM+6YbY581lhAHMJqCVrajfm aYEPEkosbWpKMHOAcvQkLzNm+tdlH2zQu4aUzsqUMgOcLNr3QKbv3tAPV0dB3yqV OeACttRWDgVb18ZRwJi9hpau9dgR6yBYzdz2fRKl6P3YRHw5dPhXGXPVhqBvcxUx 15CUy7fntqqbroIaKdOBsXbVy3cIdA4= -----END CERTIFICATE-----Generated at Sun Nov 1 18:39:19 2026 by rpki-client