$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/34d833e7-a345-3110-a9d5-368fd7e31160.roa File: 34d833e7-a345-3110-a9d5-368fd7e31160.roa (raw, json) Hash identifier: dNKJu1LAGt0E2KTicheYlYWpdHC/jMNJY3UOrRibbDE= Subject key identifier: A3:9F:26:C0:8F:0A:CF:7D:A6:E1:B3:00:A9:C0:31:AE:57:B1:93:9F Certificate issuer: /CN=058a49b1-635c-42be-b1a3-1465228f2130 Certificate serial: 010D0C9F4328584D12D79C88991FC4DECC214380 Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/34d833e7-a345-3110-a9d5-368fd7e31160.roa Signing time: Fri 06 Mar 2026 02:00:31 +0000 ROA not before: Fri 06 Mar 2026 02:00:31 +0000 ROA not after: Thu 04 Jun 2026 01:00:31 +0000 asID: 32346 IP address blocks: 142.248.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:12:d7:9c:88:99:1f:c4:de:cc:21:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130 Validity Not Before: Mar 6 02:00:31 2026 GMT Not After : Jun 4 01:00:31 2026 GMT Subject: CN=77ccc718-e45d-487e-a4c2-23dce9b89de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3b:b8:7b:fa:20:86:2f:9c:13:03:bb:df:a0: bb:d6:8f:87:61:21:b7:58:76:8e:6a:1e:3d:e9:f6: 8b:91:d2:c1:61:54:2a:7a:a7:aa:d9:ab:88:d7:bf: 9d:fb:6a:ae:2a:54:a0:fe:46:05:33:f7:ff:85:43: d0:0b:b1:62:53:7f:12:70:96:71:b5:0d:8d:23:65: 1c:76:f6:7c:d1:e8:b1:cd:89:9f:66:2a:79:c1:b2: e7:4e:ee:64:01:91:ae:1f:a2:78:c4:64:1a:59:c4: 82:56:c6:f0:68:66:2f:6b:44:ca:1b:39:fa:70:09: 45:52:8f:e3:04:99:c9:74:9e:6e:4d:0d:12:3a:60: 75:b6:55:0c:1c:7d:36:d7:c4:93:57:7d:99:1e:8b: ac:c0:7b:3a:c2:65:97:0e:44:16:b4:b2:85:58:c5: ec:7a:04:e4:0d:69:b2:e9:5b:df:97:e3:9f:25:aa: 89:48:b7:5a:a4:46:da:2d:1f:9d:42:d5:d1:9f:b8: eb:95:c4:70:f2:03:1e:ca:3e:23:cb:b4:5d:5d:e0: 21:9f:41:94:ab:8f:86:68:3f:8f:db:12:2b:47:f6: 26:df:80:4f:a2:8a:ff:23:07:bc:7b:d6:b8:40:9e: b0:a5:86:97:38:f0:21:57:73:7f:c8:cd:1d:45:d0: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9F:26:C0:8F:0A:CF:7D:A6:E1:B3:00:A9:C0:31:AE:57:B1:93:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/34d833e7-a345-3110-a9d5-368fd7e31160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl X509v3 Authority Key Identifier: keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer sbgp-ipAddrBlock: critical IPv4: 142.248.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:12:f2:d7:53:00:51:48:3e:5e:c7:91:ad:91:8d:69:85:a7: aa:9a:4d:f2:a1:63:7a:7a:49:a5:7d:66:42:f6:e2:02:76:2e: bc:6e:66:64:16:37:25:a7:cf:5d:9d:c0:9a:e3:11:ea:17:29: 6e:3e:86:78:9d:17:6e:64:f8:57:32:61:bb:8c:5d:c3:f7:c8: 2d:86:87:61:c4:1c:de:09:dd:ff:e5:19:7d:dd:e6:c7:0f:cd: ea:a9:20:fd:4e:ae:9f:f9:69:4b:b9:fb:dd:b1:c2:1b:ef:f2: da:d6:1c:4f:3a:74:96:55:b7:fb:08:95:89:e6:50:5b:fb:b4: 93:72:94:03:b0:2f:02:25:88:f3:03:86:1b:be:4d:bb:ec:2e: 3c:65:b1:6e:bb:21:e0:34:23:7f:de:a1:bc:b3:45:48:4a:0c: 9c:51:ac:2b:d3:bd:86:a1:7c:2a:eb:6e:d4:06:95:3a:f4:c2: 6d:55:21:d7:03:ec:76:c1:af:5c:d6:8b:77:cc:12:10:38:19: 55:0e:9a:39:42:9e:af:0f:0a:07:e4:81:24:3f:f9:16:d7:6d: f2:98:42:3b:75:8f:45:02:b0:56:fe:a8:d1:7f:ba:38:c4:e6: 50:86:91:b2:96:fd:1d:5a:4d:6e:07:13:50:4a:b0:d5:78:71: 78:65:19:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0S15yImR/E3swhQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU4YTQ5YjEtNjM1Yy00MmJlLWIxYTMtMTQ2NTIyOGYy MTMwMB4XDTI2MDMwNjAyMDAzMVoXDTI2MDYwNDAxMDAzMVowLzEtMCsGA1UEAxMk NzdjY2M3MTgtZTQ1ZC00ODdlLWE0YzItMjNkY2U5Yjg5ZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDu4e/oghi+cEwO736C71o+HYSG3WHaOah49 6faLkdLBYVQqeqeq2auI17+d+2quKlSg/kYFM/f/hUPQC7FiU38ScJZxtQ2NI2Uc dvZ80eixzYmfZip5wbLnTu5kAZGuH6J4xGQaWcSCVsbwaGYva0TKGzn6cAlFUo/j BJnJdJ5uTQ0SOmB1tlUMHH0218STV32ZHouswHs6wmWXDkQWtLKFWMXsegTkDWmy 6Vvfl+OfJaqJSLdapEbaLR+dQtXRn7jrlcRw8gMeyj4jy7RdXeAhn0GUq4+GaD+P 2xIrR/Ym34BPoor/Iwe8e9a4QJ6wpYaXOPAhV3N/yM0dRdBA9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOfJsCPCs99puGzAKnAMa5XsZOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNThh NDliMS02MzVjLTQyYmUtYjFhMy0xNDY1MjI4ZjIxMzAvMzRkODMzZTctYTM0NS0z MTEwLWE5ZDUtMzY4ZmQ3ZTMxMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDU4YTQ5YjEtNjM1Yy00MmJlLWIx YTMtMTQ2NTIyOGYyMTMwLzA1OGE0OWIxLTYzNWMtNDJiZS1iMWEzLTE0NjUyMjhm MjEzMC5jcmwwHwYDVR0jBBgwFoAUaCUP3rONAi5TxKSqLJfyB3EgXzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNThhNDliMS02MzVjLTQyYmUtYjFhMy0xNDY1 MjI4ZjIxMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAS8tdTAFFIPl7Hka2RjWmFp6qaTfKhY3p6SaV9ZkL24gJ2LrxuZmQW NyWnz12dwJrjEeoXKW4+hnidF25k+FcyYbuMXcP3yC2Gh2HEHN4J3f/lGX3d5scP zeqpIP1Orp/5aUu5+92xwhvv8trWHE86dJZVt/sIlYnmUFv7tJNylAOwLwIliPMD hhu+TbvsLjxlsW67IeA0I3/eobyzRUhKDJxRrCvTvYahfCrrbtQGlTr0wm1VIdcD 7HbBr1zWi3fMEhA4GVUOmjlCnq8PCgfkgSQ/+RbXbfKYQjt1j0UCsFb+qNF/ujjE 5lCGkbKW/R1aTW4HE1BKsNV4cXhlGXY= -----END CERTIFICATE-----Generated at Tue Mar 10 20:32:32 2026 by rpki-client