$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa File: 5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa (raw, json) Hash identifier: kKdJc7vfe/D+Y7YUVeGbAksgyAVeSBeM0ZjQgt8LGoQ= Subject key identifier: B0:66:1D:2C:08:4F:F3:9F:A6:98:C8:CC:BA:58:84:63:E3:F9:11:EC Certificate issuer: /CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d Certificate serial: 010D0C9F4328584D2A74EA8A866E11549AC13EC0 Authority key identifier: 38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 21529 IP address blocks: 149.112.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ea:8a:86:6e:11:54:9a:c1:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=1cf3e000-fac3-4a5d-8633-a8ab8189af1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:41:16:24:7a:a5:e9:21:9d:c9:a6:0a:42: 4e:13:21:4c:85:27:ba:a5:ee:4b:f6:80:8b:68:03: fc:e8:ed:cd:2b:35:aa:98:e8:80:27:3f:6c:7e:09: 1a:4b:63:b5:f7:16:31:8d:87:ee:47:04:3c:3c:b0: 67:44:2b:7a:ae:c7:54:f2:bf:01:46:c7:9e:3c:f0: 4e:1d:03:a2:03:34:67:60:e7:fd:bd:8b:22:15:72: 4f:4c:c1:a7:8e:62:15:e6:c1:c8:b6:01:52:5b:3a: 15:70:5a:09:fb:d8:df:32:d5:2c:f5:4f:b8:b0:2d: 15:4f:0d:f0:f9:ea:28:f8:c7:ae:90:11:3a:e8:5a: f8:dc:e0:4a:94:83:4f:19:71:51:9c:38:46:30:32: c7:04:3a:72:48:3e:fc:c1:af:4b:56:95:88:a5:6a: 8e:61:7d:da:5b:a0:cf:47:a6:93:cb:56:3b:ff:6b: 15:7c:2b:71:04:3d:d9:16:45:97:84:30:9e:30:7c: e6:71:c3:d7:49:f2:4d:4f:99:7b:37:59:10:fb:02: e5:4a:d4:0f:6e:d9:17:21:40:d8:8e:ea:2a:4d:b1: 1b:01:97:c9:84:c1:19:05:6d:79:7f:5c:30:42:ea: 0a:eb:91:af:47:0f:f1:bd:48:27:46:f6:d4:31:e6: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:66:1D:2C:08:4F:F3:9F:A6:98:C8:CC:BA:58:84:63:E3:F9:11:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl X509v3 Authority Key Identifier: keyid:38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer sbgp-ipAddrBlock: critical IPv4: 149.112.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:04:bb:b4:7e:84:30:f4:60:4c:30:1e:03:e5:85:7e:aa:c3: a6:5f:94:90:f8:66:fb:5d:b5:66:ac:83:68:53:58:3a:29:da: 67:5a:3c:7c:ee:2f:13:f0:6d:a2:d8:e3:20:7a:99:98:1b:0e: cc:3c:d4:2d:8c:fc:6a:cf:88:7d:40:35:2c:6b:8e:33:2a:d2: 62:a2:a9:d7:0a:ac:9f:0b:6e:62:5f:ad:81:ea:05:87:7d:2f: b0:ba:45:03:12:a9:7d:22:40:d5:8a:0c:6a:30:a6:ce:53:f2: 09:95:39:09:16:ad:94:d2:7b:08:d8:78:70:49:50:4f:09:34: dc:cf:2a:7a:94:66:60:74:6f:72:d3:2b:4e:33:10:31:55:9f: b3:a8:fc:d9:0a:7b:4e:1a:3d:cf:76:32:2e:50:2c:95:3d:90: 10:1f:6e:02:46:64:ea:34:b2:2a:6c:4e:36:4d:35:1f:23:99: 16:75:01:72:11:0e:60:bc:b0:b1:c0:41:cb:cd:a7:3f:1f:c6: 1d:ec:54:56:b9:7e:2c:c9:58:84:92:1b:24:a7:38:d3:4a:f7: 28:17:2b:f5:b3:d7:f3:4e:52:76:be:80:84:74:e0:3c:db:cd: 0a:91:fe:9e:44:ee:16:3d:89:cc:c1:6f:94:2c:7e:bb:ef:10: 7c:7e:db:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOqKhm4RVJrBPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkzNGZhMDUtZDdhMy00YjdkLWJlNWQtZGM4M2Q0YTcx OTlkMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MWNmM2UwMDAtZmFjMy00YTVkLTg2MzMtYThhYjgxODlhZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQFBFiR6pekhncmmCkJOEyFMhSe6pe5L9oCL aAP86O3NKzWqmOiAJz9sfgkaS2O19xYxjYfuRwQ8PLBnRCt6rsdU8r8BRseePPBO HQOiAzRnYOf9vYsiFXJPTMGnjmIV5sHItgFSWzoVcFoJ+9jfMtUs9U+4sC0VTw3w +eoo+MeukBE66Fr43OBKlINPGXFRnDhGMDLHBDpySD78wa9LVpWIpWqOYX3aW6DP R6aTy1Y7/2sVfCtxBD3ZFkWXhDCeMHzmccPXSfJNT5l7N1kQ+wLlStQPbtkXIUDY juoqTbEbAZfJhMEZBW15f1wwQuoK65GvRw/xvUgnRvbUMeY5EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBmHSwIT/OfppjIzLpYhGPj+RHsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xOTM0 ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgzZDRhNzE5OWQvNWFmNjY0NmYtYmY0YS0z ZGVkLWIzYjQtNzUzMmZhODFmZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTkzNGZhMDUtZDdhMy00YjdkLWJl NWQtZGM4M2Q0YTcxOTlkLzE5MzRmYTA1LWQ3YTMtNGI3ZC1iZTVkLWRjODNkNGE3 MTk5ZC5jcmwwHwYDVR0jBBgwFoAUOIuVNSytrzzuaOApRYYPJ0jQ1MEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xOTM0ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgz ZDRhNzE5OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXAMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAEu7R+hDD0YEwwHgPlhX6qw6ZflJD4ZvtdtWasg2hTWDop2mdaPHzu LxPwbaLY4yB6mZgbDsw81C2M/GrPiH1ANSxrjjMq0mKiqdcKrJ8LbmJfrYHqBYd9 L7C6RQMSqX0iQNWKDGowps5T8gmVOQkWrZTSewjYeHBJUE8JNNzPKnqUZmB0b3LT K04zEDFVn7Oo/NkKe04aPc92Mi5QLJU9kBAfbgJGZOo0sipsTjZNNR8jmRZ1AXIR DmC8sLHAQcvNpz8fxh3sVFa5fizJWISSGySnONNK9ygXK/Wz1/NOUna+gIR04Dzb zQqR/p5E7hY9iczBb5QsfrvvEHx+260= -----END CERTIFICATE-----Generated at Sun Mar 15 06:00:01 2026 by rpki-client