$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ec02407c-76ea-3f4b-859f-1f5319a67f3c.roa File: ec02407c-76ea-3f4b-859f-1f5319a67f3c.roa (raw, json) Hash identifier: aomGatlGOkfjzCR2cX/ZGlWFnqRij4pOOtA1TMh4RAE= Subject key identifier: 2D:0F:2F:8C:EE:BD:77:7D:F3:62:23:E8:EE:47:AA:6F:74:68:23:E6 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D5E1A6372D288A1CCFF267080 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ec02407c-76ea-3f4b-859f-1f5319a67f3c.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16696 IP address blocks: 148.59.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:63:72:d2:88:a1:cc:ff:26:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=a031e02b-c676-4156-8404-b8a067c0e499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:98:0a:c0:37:ff:63:cf:53:eb:0e:ec:6c: b5:8a:d5:61:f0:fd:5f:86:db:86:4c:49:6c:9f:33: be:2f:e8:28:cd:89:65:d3:95:ee:a9:89:10:41:87: 63:ef:be:0e:12:6b:be:2e:a9:fb:4d:74:16:e7:db: bb:e3:52:91:68:3c:2d:3e:bb:77:aa:ac:cd:af:f1: 27:c0:ee:a9:69:91:db:f9:bd:c4:11:c2:7e:a3:0c: b9:6d:ec:48:5b:dd:92:bb:60:56:b6:73:6a:90:bd: ed:fb:1b:a6:01:83:54:20:71:79:c6:cc:6e:f3:01: 86:33:75:a5:ff:9d:ef:11:8a:97:62:7a:01:58:90: 48:06:bf:03:7e:b0:53:19:bd:06:bc:84:3a:ce:1f: 40:b8:4a:3b:25:cd:27:80:5b:25:2d:54:ff:7a:d6: 6d:b2:ed:ba:94:ee:62:7f:9d:cd:18:69:9d:bd:0b: 16:50:c9:f1:bb:31:cf:ba:43:de:b1:9b:28:d8:88: 2a:18:7c:56:bf:52:6a:fc:39:dd:18:bb:d8:7d:8c: 00:83:f4:78:97:3a:36:fd:91:de:79:5d:d1:a0:f6: d2:d1:67:a0:a2:71:70:1f:74:85:5d:d4:53:62:05: 73:a8:f0:35:46:1c:d5:dc:e4:88:52:99:5b:1e:20: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0F:2F:8C:EE:BD:77:7D:F3:62:23:E8:EE:47:AA:6F:74:68:23:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ec02407c-76ea-3f4b-859f-1f5319a67f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:3e:27:0a:09:b7:ac:27:2e:4c:22:86:9e:68:95:98:58:89: 42:88:eb:99:6c:9e:65:26:c6:3c:64:3c:f3:87:95:b4:9e:e0: 06:ca:76:3a:4b:9b:1f:f7:76:45:04:3c:d1:7a:e0:30:59:f0: 72:31:de:1f:97:62:73:8c:05:f6:1a:5d:97:ce:74:28:d6:54: 9c:7c:5d:fb:9a:59:6a:fc:4d:9b:32:32:fd:3c:dc:49:16:d3: 18:e7:e5:2d:5a:75:06:59:cd:cd:21:e1:e2:db:96:f6:cc:39: 3d:4b:e6:16:7b:85:a4:58:d6:ba:16:59:0e:03:a8:e3:7c:9b: 3b:fe:65:29:3d:ed:84:00:89:4f:52:7e:0c:be:f1:d7:d6:03: 09:63:65:07:47:8e:62:ea:d4:df:1c:df:0d:8a:d3:10:ac:66: 0a:32:cc:43:8e:17:ad:23:7d:82:36:4e:88:44:9d:dc:5d:93: e2:5a:68:0b:16:c1:85:7d:f4:64:54:17:04:7f:1c:09:13:75: 2e:49:70:d9:2d:6e:50:c2:b3:a6:22:59:45:1d:c0:ce:b8:2f: dd:e9:10:a6:1a:f3:0a:c4:f6:fe:c4:74:f9:bc:bd:f9:5d:b7: 01:55:c0:66:27:d2:8e:51:db:ab:35:01:3d:53:4e:b5:cc:b3: 68:b6:0d:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmNy0oihzP8mcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YTAzMWUwMmItYzY3Ni00MTU2LTg0MDQtYjhhMDY3YzBlNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMGYCsA3/2PPU+sO7Gy1itVh8P1fhtuGTEls nzO+L+gozYll05XuqYkQQYdj774OEmu+Lqn7TXQW59u741KRaDwtPrt3qqzNr/En wO6paZHb+b3EEcJ+owy5bexIW92Su2BWtnNqkL3t+xumAYNUIHF5xsxu8wGGM3Wl /53vEYqXYnoBWJBIBr8DfrBTGb0GvIQ6zh9AuEo7Jc0ngFslLVT/etZtsu26lO5i f53NGGmdvQsWUMnxuzHPukPesZso2IgqGHxWv1Jq/DndGLvYfYwAg/R4lzo2/ZHe eV3RoPbS0WegonFwH3SFXdRTYgVzqPA1RhzV3OSIUplbHiDwfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0PL4zuvXd982Ij6O5Hqm90aCPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZWMwMjQwN2MtNzZlYS0z ZjRiLTg1OWYtMWY1MzE5YTY3ZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0+JwoJt6wnLkwihp5olZhYiUKI65lsnmUmxjxkPPOHlbSe4AbKdjpL mx/3dkUEPNF64DBZ8HIx3h+XYnOMBfYaXZfOdCjWVJx8XfuaWWr8TZsyMv083EkW 0xjn5S1adQZZzc0h4eLblvbMOT1L5hZ7haRY1roWWQ4DqON8mzv+ZSk97YQAiU9S fgy+8dfWAwljZQdHjmLq1N8c3w2K0xCsZgoyzEOOF60jfYI2TohEndxdk+JaaAsW wYV99GRUFwR/HAkTdS5JcNktblDCs6YiWUUdwM64L93pEKYa8wrE9v7EdPm8vfld twFVwGYn0o5R26s1AT1TTrXMs2i2DQg= -----END CERTIFICATE-----Generated at Thu Apr 2 22:39:42 2026 by rpki-client