$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/4561914f-3e64-3190-a5d1-93d630ca6bee.roa File: 4561914f-3e64-3190-a5d1-93d630ca6bee.roa (raw, json) Hash identifier: b22CONg1TBhtAuBGGzauTNiu8lIRDqaW5sYqyUwd9mI= Subject key identifier: 00:CF:E3:8E:67:CA:B0:BB:98:36:66:CB:FF:D2:43:19:16:96:B1:BA Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F4328584DD4C06A5D99A3CD4FA1E35A00 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/4561914f-3e64-3190-a5d1-93d630ca6bee.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 11758 IP address blocks: 149.248.160.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:6a:5d:99:a3:cd:4f:a1:e3:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=b1e25420-c3e6-47f9-821e-090deda6afa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c3:83:a0:ee:83:f3:e8:13:80:bb:ff:e7:09: 02:4d:d1:e2:09:94:72:6c:a8:01:d3:ec:cb:e8:25: 74:d6:53:8a:b2:53:4a:8d:ef:ff:70:98:94:95:22: 99:8e:2d:f9:68:8c:82:4a:ca:32:3a:f7:2e:7a:ee: d9:b5:8a:4f:3b:a1:38:72:f8:d4:05:0f:bd:58:d9: 83:2f:b1:18:7e:b1:1e:9d:64:47:11:61:68:e3:90: a1:ce:62:1b:c1:32:3b:96:40:d9:0d:71:ab:5e:e4: 5d:0e:82:4a:ce:be:76:2c:c6:de:ac:f9:7e:f9:2f: 8c:ba:19:2f:bd:76:ee:b4:d6:53:43:9a:f3:23:e0: f1:4f:79:fa:16:44:a1:eb:be:6b:14:5e:07:be:45: f6:4f:c7:63:a0:2b:7e:a4:6a:fb:f7:0a:0b:c8:50: c5:ab:93:d0:68:6e:77:f8:1d:86:a7:4d:de:d9:b9: a6:e5:0a:09:88:22:c1:c5:be:98:88:24:74:a4:40: e9:51:8c:a1:24:5f:6f:d0:45:1f:5b:8d:fd:fb:e8: 86:a7:b0:70:b7:dc:3c:5e:1a:ca:b8:bb:98:30:8f: 06:f5:f8:c6:48:de:dd:7a:d5:4e:8f:5b:fc:1b:5c: ee:17:10:42:2d:46:05:44:25:34:11:45:70:a6:26: 29:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CF:E3:8E:67:CA:B0:BB:98:36:66:CB:FF:D2:43:19:16:96:B1:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/4561914f-3e64-3190-a5d1-93d630ca6bee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv4: 149.248.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:dd:98:81:fa:eb:cf:0f:c6:06:06:da:3a:cd:78:2f:d7:87: b5:e8:b9:f6:c6:62:25:17:04:73:d2:e6:2d:67:7f:bf:0f:2d: 53:44:29:9a:c4:d3:3f:86:53:4e:18:99:d2:48:84:b9:63:83: 2f:9b:ff:0e:32:95:5d:69:65:39:4a:ee:a2:9e:53:cc:be:ed: 5c:ee:c7:be:46:b3:18:f6:90:e2:74:fa:11:92:92:1c:f8:18: 85:af:03:c1:af:03:65:ac:3e:6c:4b:94:b3:b3:e1:07:9d:74: ea:96:bc:c0:ca:12:62:43:3f:f9:79:c2:e9:82:2c:1f:a5:ec: cc:ed:7c:b8:70:ee:2c:97:96:c7:08:9f:c9:62:1d:44:39:dd: e4:78:30:1a:fa:5d:f3:9f:3b:c9:69:b8:2d:59:e7:9e:a3:09: 39:94:ad:f2:07:6a:8b:cc:d4:a4:2e:cc:a2:23:b5:d8:3a:6e: 28:03:84:d0:c3:22:9a:5d:ca:73:45:86:8c:15:89:27:bf:13: c4:52:a6:3a:1d:9b:28:bd:a6:e4:1b:da:3a:ca:73:61:65:f8: 39:32:d0:19:10:2c:54:51:a8:87:2b:9f:2d:de:76:ab:53:02: 77:bc:e4:5c:db:72:f8:4a:41:11:68:0b:02:ac:4d:1a:1b:d8: c7:d4:1f:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwGpdmaPNT6HjWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk YjFlMjU0MjAtYzNlNi00N2Y5LTgyMWUtMDkwZGVkYTZhZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMODoO6D8+gTgLv/5wkCTdHiCZRybKgB0+zL 6CV01lOKslNKje//cJiUlSKZji35aIyCSsoyOvcueu7ZtYpPO6E4cvjUBQ+9WNmD L7EYfrEenWRHEWFo45ChzmIbwTI7lkDZDXGrXuRdDoJKzr52LMberPl++S+Muhkv vXbutNZTQ5rzI+DxT3n6FkSh675rFF4HvkX2T8djoCt+pGr79woLyFDFq5PQaG53 +B2Gp03e2bmm5QoJiCLBxb6YiCR0pEDpUYyhJF9v0EUfW439++iGp7Bwt9w8XhrK uLuYMI8G9fjGSN7detVOj1v8G1zuFxBCLUYFRCU0EUVwpiYppQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADP445nyrC7mDZmy//SQxkWlrG6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvNDU2MTkxNGYtM2U2NC0z MTkwLWE1ZDEtOTNkNjMwY2E2YmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlfigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPdmIH6688PxgYG2jrNeC/Xh7XoufbGYiUXBHPS5i1nf78PLVNEKZrE 0z+GU04YmdJIhLljgy+b/w4ylV1pZTlK7qKeU8y+7Vzux75Gsxj2kOJ0+hGSkhz4 GIWvA8GvA2WsPmxLlLOz4QeddOqWvMDKEmJDP/l5wumCLB+l7MztfLhw7iyXlscI n8liHUQ53eR4MBr6XfOfO8lpuC1Z556jCTmUrfIHaovM1KQuzKIjtdg6bigDhNDD IppdynNFhowViSe/E8RSpjodmyi9puQb2jrKc2Fl+Dky0BkQLFRRqIcrny3edqtT Ane85FzbcvhKQRFoCwKsTRob2MfUH0Y= -----END CERTIFICATE-----Generated at Thu May 21 19:37:10 2026 by rpki-client