$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa File: 873d4b38-1604-341a-a8a0-f8b12792ef66.roa (raw, json) Hash identifier: tR8YhB3g2eg/NgPJY6nvuC8GtBOyWOwI/TRyO0JUzsg= Subject key identifier: BF:F9:F9:A2:88:09:24:80:DA:A2:65:8E:07:EB:AC:56:3E:02:F0:B9 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D5E1A6DB4327443CEEEE89440 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16696 IP address blocks: 148.59.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6d:b4:32:74:43:ce:ee:e8:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=f354bc97-c67d-4a4e-9056-1a291fe65335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:05:78:c8:ad:88:00:1c:9e:ac:04:2c:82:38: 0c:8a:14:f6:af:56:0d:8e:ad:36:32:4d:5c:cc:4a: c3:15:1a:a0:d0:70:78:d1:5a:e3:2b:a2:6d:8b:50: 7f:aa:52:77:1d:a6:46:30:d2:ab:e3:39:64:85:d0: b3:99:64:4c:26:ac:d9:13:ba:86:19:88:79:76:ff: 74:ca:1c:b8:fe:5f:4e:18:0b:3c:bb:5b:c0:d1:4a: 79:ee:11:56:20:a9:1e:a3:9a:0d:a0:5f:1d:38:b0: e0:95:33:58:9c:e7:39:0d:c4:42:aa:92:91:a2:12: 46:4f:4c:28:42:72:ac:fa:0e:cd:38:48:4d:8f:5f: 57:79:fa:1f:e3:01:86:27:7c:d6:84:e5:33:1e:c5: 91:f7:4f:70:9c:85:45:46:4d:74:38:e0:09:a6:30: 6b:58:c9:68:2e:ed:0b:69:5e:7f:26:ba:6a:4d:9f: b3:79:33:fb:31:d6:77:af:f3:29:51:28:a2:22:09: 57:29:45:43:ed:d6:4c:fb:1f:c1:1b:b0:54:9b:e9: e4:43:68:dc:a9:2f:21:aa:03:31:0f:ed:ba:f0:34: a6:b9:dc:62:85:99:d1:4e:22:0a:49:8b:df:11:96: 0e:5e:5b:e1:16:53:41:86:f4:38:b1:5e:ea:e1:1f: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F9:F9:A2:88:09:24:80:DA:A2:65:8E:07:EB:AC:56:3E:02:F0:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ca:8c:49:eb:5b:91:b0:c3:09:5a:56:e6:ba:80:43:84:6b: 75:89:10:09:23:5b:6a:b7:b6:3a:7d:a6:a1:05:35:b4:12:ef: bb:93:00:96:9c:15:cc:66:ab:15:31:a9:2b:40:b6:8f:cc:fd: bb:43:bc:6f:18:6a:ab:83:59:e2:7d:a0:a4:25:9c:44:7b:88: ee:87:82:29:91:93:8e:c2:95:3f:d7:13:99:83:66:7d:2a:33: 08:19:a8:fa:36:90:1d:83:15:7f:1a:18:1d:cc:af:ae:1a:1c: 32:30:05:68:6b:62:7c:3e:3c:b9:36:bd:7f:bd:93:89:88:0b: 4b:65:cd:9f:95:32:37:ca:94:f0:5c:df:04:16:82:f9:26:ce: 7c:9c:80:c6:06:30:58:da:f4:d4:b7:23:8d:69:e7:04:e4:ca: 1f:3d:47:2c:d8:cb:55:d3:89:67:f2:62:7d:e8:40:dc:f7:31: 62:28:af:6b:e9:64:84:0d:8e:f2:96:01:16:28:5f:05:fc:0c: 23:1f:cd:2b:15:0e:d7:2a:41:07:0e:52:53:aa:67:4b:ce:97: cb:2a:a3:d6:4c:23:7c:ab:65:1d:01:ec:75:0c:e5:d9:7f:08: 58:2e:04:95:a6:ff:84:bb:06:db:57:41:e8:00:d8:08:66:89: 2f:11:dd:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGm20MnRDzu7olEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZjM1NGJjOTctYzY3ZC00YTRlLTkwNTYtMWEyOTFmZTY1MzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQV4yK2IAByerAQsgjgMihT2r1YNjq02Mk1c zErDFRqg0HB40VrjK6Jti1B/qlJ3HaZGMNKr4zlkhdCzmWRMJqzZE7qGGYh5dv90 yhy4/l9OGAs8u1vA0Up57hFWIKkeo5oNoF8dOLDglTNYnOc5DcRCqpKRohJGT0wo QnKs+g7NOEhNj19Xefof4wGGJ3zWhOUzHsWR909wnIVFRk10OOAJpjBrWMloLu0L aV5/JrpqTZ+zeTP7MdZ3r/MpUSiiIglXKUVD7dZM+x/BG7BUm+nkQ2jcqS8hqgMx D+268DSmudxihZnRTiIKSYvfEZYOXlvhFlNBhvQ4sV7q4R++NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/5+aKICSSA2qJljgfrrFY+AvC5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvODczZDRiMzgtMTYwNC0z NDFhLWE4YTAtZjhiMTI3OTJlZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTKjEnrW5GwwwlaVua6gEOEa3WJEAkjW2q3tjp9pqEFNbQS77uTAJac FcxmqxUxqStAto/M/btDvG8YaquDWeJ9oKQlnER7iO6HgimRk47ClT/XE5mDZn0q MwgZqPo2kB2DFX8aGB3Mr64aHDIwBWhrYnw+PLk2vX+9k4mIC0tlzZ+VMjfKlPBc 3wQWgvkmznycgMYGMFja9NS3I41p5wTkyh89RyzYy1XTiWfyYn3oQNz3MWIor2vp ZIQNjvKWARYoXwX8DCMfzSsVDtcqQQcOUlOqZ0vOl8sqo9ZMI3yrZR0B7HUM5dl/ CFguBJWm/4S7BttXQegA2AhmiS8R3dI= -----END CERTIFICATE-----Generated at Thu Apr 2 22:36:43 2026 by rpki-client