$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa File: 550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa (raw, json) Hash identifier: 8qp++Ct8v+LPQDwSLxKPesnMZPKS3wWC9w91h146z5c= Subject key identifier: 39:BE:D8:EC:1E:CB:F1:CB:5B:7D:4C:65:2B:DB:68:F3:29:0A:8B:BD Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D5E1A635B7ABC4C922BFDF280 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16696 IP address blocks: 148.59.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:63:5b:7a:bc:4c:92:2b:fd:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=666d9fe7-0647-414a-b2ad-563462b13038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:12:3a:41:07:4f:33:a0:7a:1d:36:74:83: b4:7b:13:06:57:b4:47:05:22:09:15:7b:d2:57:cb: fa:27:64:4c:a1:a3:71:4c:00:45:96:69:ff:c8:87: 85:1e:f0:bd:87:99:bc:df:58:c3:0f:3e:cf:3d:57: 63:1e:92:5b:11:46:f7:38:e8:b3:e2:74:e7:3e:c3: 6f:f5:44:9f:1a:b2:45:05:cc:8f:59:f5:27:29:43: c6:1c:85:aa:86:e7:49:9f:77:ed:3a:49:aa:b0:e6: 36:7f:56:e3:b2:ec:81:ae:f1:7b:27:2f:c7:ce:c8: 2a:cb:b1:e5:9e:35:cc:e7:04:2b:13:97:73:d4:e3: b5:36:d7:cf:a0:aa:8b:d6:94:e9:5e:91:d7:60:f3: 6a:05:0b:60:b0:3a:f3:da:53:e1:ed:d9:13:f1:14: 2b:55:7f:6e:71:3b:51:61:71:97:54:02:0a:aa:b4: f1:44:2a:75:11:45:2b:7c:68:5d:0d:a8:16:4d:3e: fb:27:81:93:80:bd:7a:dd:ba:4a:1a:07:12:19:21: cf:76:c8:81:a9:12:74:36:f1:af:16:d7:ec:c1:07: f1:bf:e4:ba:cc:84:c0:69:af:2e:cc:9f:27:45:96: 02:c7:3b:39:73:b0:74:53:8d:7c:f6:4a:6c:40:00: 6b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BE:D8:EC:1E:CB:F1:CB:5B:7D:4C:65:2B:DB:68:F3:29:0A:8B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:bd:5d:ce:fc:e7:68:ac:be:a5:06:79:bb:5e:c1:07:43:34: 64:b5:37:93:0a:a4:cf:0a:1a:2a:83:e4:0a:7b:bc:ce:84:60: 33:f7:77:18:c1:43:2f:f2:d0:64:44:55:33:06:df:07:7a:f6: a5:7c:64:8d:64:d0:43:47:7f:4a:4a:a0:78:80:02:02:25:2c: f1:4c:d5:fc:13:b1:d7:d2:0b:eb:d3:31:19:22:a0:19:0a:0e: 8b:d0:6c:43:4d:2e:80:9d:ca:d2:04:fd:00:e7:59:e5:5a:0a: b2:5c:9a:16:46:13:21:50:75:da:22:08:2f:d2:37:6c:98:d9: 7b:99:5c:3d:b3:25:3f:32:eb:8d:04:45:43:21:35:5b:7a:b8: 8f:18:9c:3c:cd:33:e5:68:7a:90:63:90:97:b8:b5:95:48:d4: 40:71:1b:dd:15:43:57:85:e3:5c:15:4b:36:ad:79:a8:7e:d2: c9:c6:ba:d1:2b:f3:a0:b6:3c:16:30:7e:46:84:52:d4:e4:eb: cc:b0:0f:4c:d6:4d:e8:f1:64:41:be:a5:99:54:18:2e:7a:f6: 20:c3:ae:40:33:50:fd:78:83:07:d1:bc:25:53:54:57:0c:90: 68:03:f9:27:0e:08:2e:13:23:42:be:90:9e:4f:8f:62:2d:85: 72:66:5f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmNberxMkiv98oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NjY2ZDlmZTctMDY0Ny00MTRhLWIyYWQtNTYzNDYyYjEzMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kUSOkEHTzOgeh02dIO0exMGV7RHBSIJFXvS V8v6J2RMoaNxTABFlmn/yIeFHvC9h5m831jDDz7PPVdjHpJbEUb3OOiz4nTnPsNv 9USfGrJFBcyPWfUnKUPGHIWqhudJn3ftOkmqsOY2f1bjsuyBrvF7Jy/Hzsgqy7Hl njXM5wQrE5dz1OO1NtfPoKqL1pTpXpHXYPNqBQtgsDrz2lPh7dkT8RQrVX9ucTtR YXGXVAIKqrTxRCp1EUUrfGhdDagWTT77J4GTgL163bpKGgcSGSHPdsiBqRJ0NvGv FtfswQfxv+S6zITAaa8uzJ8nRZYCxzs5c7B0U4189kpsQABrtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm+2Owey/HLW31MZSvbaPMpCou9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNTUwYTBkZDktNGExMC0z NDExLThhMDUtYzgzYjUxYjg3ZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG9Xc7852isvqUGebtewQdDNGS1N5MKpM8KGiqD5Ap7vM6EYDP3dxjB Qy/y0GREVTMG3wd69qV8ZI1k0ENHf0pKoHiAAgIlLPFM1fwTsdfSC+vTMRkioBkK DovQbENNLoCdytIE/QDnWeVaCrJcmhZGEyFQddoiCC/SN2yY2XuZXD2zJT8y640E RUMhNVt6uI8YnDzNM+VoepBjkJe4tZVI1EBxG90VQ1eF41wVSzateah+0snGutEr 86C2PBYwfkaEUtTk68ywD0zWTejxZEG+pZlUGC569iDDrkAzUP14gwfRvCVTVFcM kGgD+ScOCC4TI0K+kJ5Pj2IthXJmX/E= -----END CERTIFICATE-----Generated at Thu Apr 2 22:36:28 2026 by rpki-client