$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/c85b3eda-5f77-368f-8183-14bcda949a05.roa File: c85b3eda-5f77-368f-8183-14bcda949a05.roa (raw, json) Hash identifier: chhrHQUex8Oj1CS4Z9VAUIRN5ctmTiO0IsCjdF3bwIk= Subject key identifier: 21:C8:05:F4:16:2B:39:65:99:91:DF:C3:29:D5:A2:70:F7:A9:AE:4A Certificate issuer: /CN=91ace6e0-bca2-4daa-81c3-2e936814cc5d Certificate serial: 010D0C9F4328584D3DFF9707E8F58ADFFE789690 Authority key identifier: E2:F5:7C:2D:02:96:52:D5:D3:46:73:3B:13:AC:43:60:E7:5F:E9:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/c85b3eda-5f77-368f-8183-14bcda949a05.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 11817 IP address blocks: 148.59.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/91ace6e0-bca2-4daa-81c3-2e936814cc5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/91ace6e0-bca2-4daa-81c3-2e936814cc5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:97:07:e8:f5:8a:df:fe:78:96:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ace6e0-bca2-4daa-81c3-2e936814cc5d Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a11298e8-d32a-4b81-a989-77e55dc9c86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:85:d0:d6:94:f3:ca:6f:48:00:33:93:6c:01: d4:54:38:13:3c:68:7e:3d:3b:69:76:15:a0:6f:ea: 50:a2:fb:06:41:32:16:da:22:9b:b3:ae:3f:47:3a: d6:3f:4e:3c:a5:69:e6:4e:31:1b:fd:c6:72:31:8c: 0c:63:e2:18:0e:10:e1:44:9b:0a:82:35:6b:39:54: 41:d8:47:e1:e1:94:2a:5c:cc:eb:81:c0:76:e0:5d: ed:36:a3:c6:40:ec:69:1d:ed:2a:9b:a6:1a:08:a8: 49:de:02:5d:ea:2b:47:b7:4b:7a:25:4b:f6:a5:3b: fb:f6:9f:7d:30:69:a5:45:a3:db:a8:ce:a9:4f:c3: c2:fc:11:84:14:55:2f:49:54:73:70:81:c7:43:b7: ce:c4:80:aa:f0:3c:6a:7b:d9:e7:6b:b8:14:ee:e1: 7e:af:1d:fe:8b:46:5c:27:d6:96:b8:4b:c3:19:dd: d8:bf:00:a6:90:1e:66:9d:51:70:77:36:5b:81:ad: 40:f7:d1:d9:af:c5:22:fb:47:1a:90:4b:1e:ff:e9: c7:32:04:11:5e:6c:07:a2:41:19:df:01:86:4e:93: 5d:f3:6a:93:ff:e4:a3:55:c3:93:59:dd:35:02:e4: 80:13:8a:42:fa:9d:a3:65:88:7d:b3:51:f8:51:e6: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C8:05:F4:16:2B:39:65:99:91:DF:C3:29:D5:A2:70:F7:A9:AE:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/c85b3eda-5f77-368f-8183-14bcda949a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/91ace6e0-bca2-4daa-81c3-2e936814cc5d.crl X509v3 Authority Key Identifier: keyid:E2:F5:7C:2D:02:96:52:D5:D3:46:73:3B:13:AC:43:60:E7:5F:E9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer sbgp-ipAddrBlock: critical IPv4: 148.59.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:73:b4:47:3c:15:8c:1c:5d:04:95:15:1e:6b:1c:06:44:2e: 12:92:52:12:bc:5f:a9:76:37:08:a6:d2:4b:cc:ea:b7:ea:68: cd:39:5d:45:6c:36:1c:60:5b:7b:40:ba:92:24:32:9e:1b:20: 38:5f:c2:8c:56:a0:54:df:b7:17:56:f2:69:00:7d:d9:e2:5e: 0a:e7:79:11:fb:50:ae:ef:ef:9d:ed:33:bd:71:05:56:8f:cc: 72:1c:db:1b:2b:3c:71:9c:5b:ec:92:c5:4a:11:63:72:d0:00: b4:77:0b:b3:be:28:19:20:3d:18:26:af:db:74:aa:e3:2c:0b: 7c:d6:3d:9a:39:62:84:e9:40:5c:0e:7c:08:33:4f:27:b9:80: c4:80:00:8c:c8:c3:4a:51:ad:15:92:21:45:96:02:66:ae:38: 2d:68:5a:8a:f5:22:fb:48:a4:8f:23:dd:79:2e:ae:f3:31:01: 76:d0:4c:37:71:de:7d:bd:43:00:ed:3e:b2:d0:1e:43:0b:d1: d7:95:78:55:6c:7e:f1:8d:5f:50:93:32:61:89:b9:54:02:ee: 44:37:44:d2:de:7c:13:c8:10:dc:fb:fd:d2:b5:bf:ac:0b:30: bc:59:a8:51:ca:7b:ed:cc:dc:7e:30:2f:ff:44:29:bb:4e:6f: 7a:c8:5b:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5cH6PWK3/54lpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhY2U2ZTAtYmNhMi00ZGFhLTgxYzMtMmU5MzY4MTRj YzVkMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YTExMjk4ZTgtZDMyYS00YjgxLWE5ODktNzdlNTVkYzljODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YXQ1pTzym9IADOTbAHUVDgTPGh+PTtpdhWg b+pQovsGQTIW2iKbs64/RzrWP048pWnmTjEb/cZyMYwMY+IYDhDhRJsKgjVrOVRB 2Efh4ZQqXMzrgcB24F3tNqPGQOxpHe0qm6YaCKhJ3gJd6itHt0t6JUv2pTv79p99 MGmlRaPbqM6pT8PC/BGEFFUvSVRzcIHHQ7fOxICq8Dxqe9nna7gU7uF+rx3+i0Zc J9aWuEvDGd3YvwCmkB5mnVFwdzZbga1A99HZr8Ui+0cakEse/+nHMgQRXmwHokEZ 3wGGTpNd82qT/+SjVcOTWd01AuSAE4pC+p2jZYh9s1H4UeYrzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHIBfQWKzllmZHfwynVonD3qa5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWFj ZTZlMC1iY2EyLTRkYWEtODFjMy0yZTkzNjgxNGNjNWQvYzg1YjNlZGEtNWY3Ny0z NjhmLTgxODMtMTRiY2RhOTQ5YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhY2U2ZTAtYmNhMi00ZGFhLTgx YzMtMmU5MzY4MTRjYzVkLzkxYWNlNmUwLWJjYTItNGRhYS04MWMzLTJlOTM2ODE0 Y2M1ZC5jcmwwHwYDVR0jBBgwFoAU4vV8LQKWUtXTRnM7E6xDYOdf6cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWFjZTZlMC1iY2EyLTRkYWEtODFjMy0yZTkz NjgxNGNjNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlDu6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5ztEc8FYwcXQSVFR5rHAZELhKSUhK8X6l2Nwim0kvM6rfqaM05XUVs NhxgW3tAupIkMp4bIDhfwoxWoFTftxdW8mkAfdniXgrneRH7UK7v753tM71xBVaP zHIc2xsrPHGcW+ySxUoRY3LQALR3C7O+KBkgPRgmr9t0quMsC3zWPZo5YoTpQFwO fAgzTye5gMSAAIzIw0pRrRWSIUWWAmauOC1oWor1IvtIpI8j3XkurvMxAXbQTDdx 3n29QwDtPrLQHkML0deVeFVsfvGNX1CTMmGJuVQC7kQ3RNLefBPIENz7/dK1v6wL MLxZqFHKe+3M3H4wL/9EKbtOb3rIWwk= -----END CERTIFICATE-----Generated at Sun Mar 22 09:34:16 2026 by rpki-client