$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/148a0eb7-5226-409a-85d8-0345b25a2be9/128b221e-bc6e-373e-abe4-fb2dd7967233.roa File: 128b221e-bc6e-373e-abe4-fb2dd7967233.roa (raw, json) Hash identifier: aLezxhmQ+qnDb8IHeGu7zhtKkXi0irjy6QnzlI31ciE= Subject key identifier: 28:7D:A2:D2:14:D1:F1:DD:89:25:4B:70:3F:AC:48:21:09:5E:5F:F4 Certificate issuer: /CN=148a0eb7-5226-409a-85d8-0345b25a2be9 Certificate serial: 010D0C9F4328584EE6E01E69AB99FEB953506C80 Authority key identifier: 89:C9:5F:DF:D5:F1:17:6B:6F:09:39:89:4D:21:C1:82:5E:E4:56:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/148a0eb7-5226-409a-85d8-0345b25a2be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/148a0eb7-5226-409a-85d8-0345b25a2be9/128b221e-bc6e-373e-abe4-fb2dd7967233.roa Signing time: Thu 20 Aug 2026 17:36:00 +0000 ROA not before: Thu 20 Aug 2026 17:36:00 +0000 ROA not after: Wed 18 Nov 2026 18:36:00 +0000 asID: 0 IP address blocks: 143.49.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/148a0eb7-5226-409a-85d8-0345b25a2be9/148a0eb7-5226-409a-85d8-0345b25a2be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/148a0eb7-5226-409a-85d8-0345b25a2be9/148a0eb7-5226-409a-85d8-0345b25a2be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/148a0eb7-5226-409a-85d8-0345b25a2be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:e0:1e:69:ab:99:fe:b9:53:50:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=148a0eb7-5226-409a-85d8-0345b25a2be9 Validity Not Before: Aug 20 17:36:00 2026 GMT Not After : Nov 18 18:36:00 2026 GMT Subject: CN=f2c55840-9db8-4587-82d3-bc225b7b1634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:16:b4:6f:d0:6d:e2:7c:94:e7:28:82:d5:a9: 61:27:6c:8e:87:a4:34:1b:e5:43:e7:ae:9e:e9:ed: af:1f:aa:d8:25:56:70:e7:12:e4:ff:60:35:57:00: b3:90:7c:c8:a9:64:61:37:93:35:e4:29:16:5f:f2: db:fd:e7:80:13:02:49:94:92:e6:11:35:52:da:50: e5:d6:fb:f4:b2:71:dc:ce:65:ee:f9:3c:34:1a:24: 4c:fe:52:68:30:0b:91:be:7a:2f:ee:7e:b1:e3:e0: 4e:df:c0:53:83:98:f3:cd:08:a5:6d:a7:b7:64:c0: ce:2c:ac:28:f7:15:a9:20:06:0a:cf:66:84:18:5e: d2:52:a8:39:b4:30:c6:c2:f4:2c:23:10:5b:5d:20: 62:ca:f3:da:58:34:36:e2:96:e3:c8:a4:d0:26:35: 23:b6:02:6a:5a:50:d8:03:11:7d:0b:46:f8:64:b5: de:52:d2:01:1c:ca:4b:f5:d3:83:53:97:ff:ca:a0: 74:4a:28:0d:eb:b1:88:f9:24:fe:52:2e:6d:c0:6e: 99:90:88:17:88:83:12:14:4e:5e:c4:9b:e2:fa:d2: 6d:34:23:b5:4e:cb:01:84:ec:38:3d:e9:37:66:a1: 8d:08:ca:19:65:40:e4:35:d3:6b:ec:29:89:7a:2d: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7D:A2:D2:14:D1:F1:DD:89:25:4B:70:3F:AC:48:21:09:5E:5F:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/148a0eb7-5226-409a-85d8-0345b25a2be9/128b221e-bc6e-373e-abe4-fb2dd7967233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/148a0eb7-5226-409a-85d8-0345b25a2be9/148a0eb7-5226-409a-85d8-0345b25a2be9.crl X509v3 Authority Key Identifier: keyid:89:C9:5F:DF:D5:F1:17:6B:6F:09:39:89:4D:21:C1:82:5E:E4:56:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/148a0eb7-5226-409a-85d8-0345b25a2be9.cer sbgp-ipAddrBlock: critical IPv4: 143.49.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:7b:20:a8:db:38:92:16:1b:d3:90:92:96:98:5f:e7:f1:8f: e9:e9:f5:e6:3a:1b:92:c0:0f:67:9f:7c:5f:f5:f2:df:7a:46: dd:c5:d2:7d:73:17:80:f1:9a:26:da:62:c0:6c:5e:5f:57:81: 54:c9:38:32:5c:3e:47:c0:e0:52:30:bc:d1:68:17:88:3b:6b: 3b:99:00:f6:2f:e8:89:d0:1d:ce:20:98:74:68:14:8a:29:1b: 78:00:14:63:9a:97:17:36:6d:59:aa:11:17:83:6e:d3:29:0e: 32:06:fb:e8:b0:b0:fe:45:80:63:c7:62:69:70:23:08:4b:e0: 4d:1a:21:b6:ad:d1:a9:e4:fc:8e:cd:99:3d:fb:3b:e7:38:b1: 00:a0:7d:67:8f:8d:e4:a1:d1:dd:c8:c9:bb:7c:4e:a2:2b:c0: 40:a1:67:ec:01:13:6a:7b:ba:54:3b:9d:9f:68:79:2b:11:47: 93:dc:1a:01:c0:5b:8b:d5:6d:46:66:5a:81:a9:41:0f:76:1b: d4:1a:c5:27:57:12:f5:c1:68:28:da:f4:29:59:da:fb:5e:fe: b8:47:81:b7:b7:14:42:c4:f0:13:70:39:93:8f:b5:2e:27:aa: c2:9f:04:eb:eb:55:dc:9f:91:1a:45:d2:6b:aa:09:8d:6f:cd: b0:ad:d7:ed -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7m4B5pq5n+uVNQbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ4YTBlYjctNTIyNi00MDlhLTg1ZDgtMDM0NWIyNWEy YmU5MB4XDTI2MDgyMDE3MzYwMFoXDTI2MTExODE4MzYwMFowLzEtMCsGA1UEAxMk ZjJjNTU4NDAtOWRiOC00NTg3LTgyZDMtYmMyMjViN2IxNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRa0b9Bt4nyU5yiC1alhJ2yOh6Q0G+VD566e 6e2vH6rYJVZw5xLk/2A1VwCzkHzIqWRhN5M15CkWX/Lb/eeAEwJJlJLmETVS2lDl 1vv0snHczmXu+Tw0GiRM/lJoMAuRvnov7n6x4+BO38BTg5jzzQilbae3ZMDOLKwo 9xWpIAYKz2aEGF7SUqg5tDDGwvQsIxBbXSBiyvPaWDQ24pbjyKTQJjUjtgJqWlDY AxF9C0b4ZLXeUtIBHMpL9dODU5f/yqB0SigN67GI+ST+Ui5twG6ZkIgXiIMSFE5e xJvi+tJtNCO1TssBhOw4Pek3ZqGNCMoZZUDkNdNr7CmJei07hwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCh9otIU0fHdiSVLcD+sSCEJXl/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8xNDhh MGViNy01MjI2LTQwOWEtODVkOC0wMzQ1YjI1YTJiZTkvMTI4YjIyMWUtYmM2ZS0z NzNlLWFiZTQtZmIyZGQ3OTY3MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMTQ4YTBlYjctNTIyNi00MDlhLTg1 ZDgtMDM0NWIyNWEyYmU5LzE0OGEwZWI3LTUyMjYtNDA5YS04NWQ4LTAzNDViMjVh MmJlOS5jcmwwHwYDVR0jBBgwFoAUiclf39XxF2tvCTmJTSHBgl7kVlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8xNDhhMGViNy01MjI2LTQwOWEtODVkOC0wMzQ1 YjI1YTJiZTkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjzEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAansgqNs4khYb05CSlphf5/GP6en15jobksAPZ598X/Xy33pG3cXSfXMX gPGaJtpiwGxeX1eBVMk4Mlw+R8DgUjC80WgXiDtrO5kA9i/oidAdziCYdGgUiikb eAAUY5qXFzZtWaoRF4Nu0ykOMgb76LCw/kWAY8diaXAjCEvgTRohtq3RqeT8js2Z Pfs75zixAKB9Z4+N5KHR3cjJu3xOoivAQKFn7AETanu6VDudn2h5KxFHk9waAcBb i9VtRmZagalBD3Yb1BrFJ1cS9cFoKNr0KVna+17+uEeBt7cUQsTwE3A5k4+1Lieq wp8E6+tV3J+RGkXSa6oJjW/NsK3X7Q== -----END CERTIFICATE-----Generated at Fri Aug 21 21:43:40 2026 by rpki-client