$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7/65c29842-5188-3428-9b55-0947484240fe.roa File: 65c29842-5188-3428-9b55-0947484240fe.roa (raw, json) Hash identifier: 12Y6gzXZnwcckHmJ7vj/Md0YJ+/v7pv2LjA5rOnCN08= Subject key identifier: A3:7F:F6:C3:41:83:A0:69:63:D5:6C:16:D6:B8:AC:A3:C3:A6:E2:93 Certificate issuer: /CN=f2cbf686-6d0c-48f0-8f94-dee10e9a88c7 Certificate serial: 010D0C9F4328584D6DDCEF8E0C6EF1F1B6153BC0 Authority key identifier: 83:FD:B6:BF:B7:A3:E3:72:D6:DE:3D:80:9A:C0:07:44:62:27:59:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7/65c29842-5188-3428-9b55-0947484240fe.roa Signing time: Tue 07 Apr 2026 16:29:51 +0000 ROA not before: Tue 07 Apr 2026 16:29:51 +0000 ROA not after: Wed 01 Jul 2026 14:58:24 +0000 asID: 399970 IP address blocks: 149.112.152.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dc:ef:8e:0c:6e:f1:f1:b6:15:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2cbf686-6d0c-48f0-8f94-dee10e9a88c7 Validity Not Before: Apr 7 16:29:51 2026 GMT Not After : Jul 1 14:58:24 2026 GMT Subject: CN=d0993aed-1852-4847-b725-6685ff53934c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:98:e3:2d:16:3c:a4:86:1f:31:41:77:79: 26:b1:7a:9d:54:dd:4f:89:d3:b8:f6:dc:db:b1:f0: f7:e4:b6:2d:10:59:52:0e:2a:58:84:34:d5:84:43: 41:4a:0d:d2:e2:4e:7c:4c:14:4a:02:1e:bd:9a:26: 14:11:7f:1d:89:5c:50:ba:37:96:d2:00:44:cf:83: 02:1c:73:4d:35:f4:5f:08:b0:b3:b8:42:82:94:be: 62:44:60:a9:83:22:e6:79:e6:0b:5a:79:37:5d:e9: 77:b9:c0:89:28:12:50:80:d3:bd:6e:41:5e:bd:f0: 5c:32:f4:ee:e6:f6:7b:7d:90:a7:d4:26:3a:0c:ad: c8:ea:e4:ca:09:94:56:5c:3f:6a:ef:b5:2c:b7:ed: 72:12:f9:c5:dc:03:de:c6:ad:57:41:fd:b9:cf:28: 80:2c:7d:49:a7:ed:bd:fa:63:d4:35:50:63:4f:ae: d3:c0:cd:27:71:26:ac:ea:12:42:ad:ac:dd:e8:27: 5c:1c:c1:9f:df:0c:91:b8:57:bb:bd:c0:60:88:4e: 3a:a0:51:cf:57:f0:81:6f:14:ab:91:8c:e5:4f:da: c7:fc:47:6f:e7:0e:14:be:42:84:25:fa:fd:ac:b4: ca:38:10:95:44:80:a0:68:dd:e1:bc:f3:43:4d:a7: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7F:F6:C3:41:83:A0:69:63:D5:6C:16:D6:B8:AC:A3:C3:A6:E2:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7/65c29842-5188-3428-9b55-0947484240fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7.crl X509v3 Authority Key Identifier: keyid:83:FD:B6:BF:B7:A3:E3:72:D6:DE:3D:80:9A:C0:07:44:62:27:59:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7.cer sbgp-ipAddrBlock: critical IPv4: 149.112.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d0:09:0b:07:d0:45:bf:bb:d6:95:a3:aa:22:e0:fb:9d:c8: c7:58:68:91:2c:de:46:79:2e:92:98:f5:1f:97:a9:a2:68:54: 54:b3:25:e3:6e:14:c0:38:7b:e8:04:c2:51:e6:ed:02:96:61: 97:c0:40:69:75:e3:18:cc:f0:22:68:7f:26:72:72:cd:35:fa: 59:b0:05:86:16:58:bf:09:f8:1e:2f:42:de:65:36:0e:a5:b7: 5a:01:0e:69:f2:49:11:f1:bd:d7:c2:e4:e7:dc:09:39:fe:a0: 4e:7b:ab:c4:3e:17:5e:7b:cb:6b:62:94:b3:cc:c7:8e:c6:d1: 65:62:fc:86:bb:3b:58:3d:17:e2:6b:94:2f:4d:f2:39:ce:f9: 55:c5:4b:5b:8d:d9:13:e1:eb:43:97:2c:1d:cd:3a:63:00:7b: 1f:e9:33:28:63:76:fb:f6:c6:0f:d9:70:ac:75:72:d0:7a:a1: ba:e5:63:06:5e:f8:2a:16:be:a8:5f:1d:33:da:4d:a3:a5:a1: ab:f4:02:fb:8c:57:19:f7:47:16:82:d9:e6:2d:7c:9b:30:79: 6c:66:07:7a:b2:b5:ab:0a:d0:b3:b8:3d:99:1b:8d:bb:24:c7: 47:9b:29:49:81:99:51:4e:ec:e4:58:a4:99:58:ce:9a:90:5c: ef:f0:6b:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3O+ODG7x8bYVO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJjYmY2ODYtNmQwYy00OGYwLThmOTQtZGVlMTBlOWE4 OGM3MB4XDTI2MDQwNzE2Mjk1MVoXDTI2MDcwMTE0NTgyNFowLzEtMCsGA1UEAxMk ZDA5OTNhZWQtMTg1Mi00ODQ3LWI3MjUtNjY4NWZmNTM5MzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq+Y4y0WPKSGHzFBd3kmsXqdVN1PidO49tzb sfD35LYtEFlSDipYhDTVhENBSg3S4k58TBRKAh69miYUEX8diVxQujeW0gBEz4MC HHNNNfRfCLCzuEKClL5iRGCpgyLmeeYLWnk3Xel3ucCJKBJQgNO9bkFevfBcMvTu 5vZ7fZCn1CY6DK3I6uTKCZRWXD9q77Ust+1yEvnF3APexq1XQf25zyiALH1Jp+29 +mPUNVBjT67TwM0ncSas6hJCrazd6CdcHMGf3wyRuFe7vcBgiE46oFHPV/CBbxSr kYzlT9rH/Edv5w4UvkKEJfr9rLTKOBCVRICgaN3hvPNDTafUEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN/9sNBg6BpY9VsFta4rKPDpuKTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mMmNi ZjY4Ni02ZDBjLTQ4ZjAtOGY5NC1kZWUxMGU5YTg4YzcvNjVjMjk4NDItNTE4OC0z NDI4LTliNTUtMDk0NzQ4NDI0MGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjJjYmY2ODYtNmQwYy00OGYwLThm OTQtZGVlMTBlOWE4OGM3L2YyY2JmNjg2LTZkMGMtNDhmMC04Zjk0LWRlZTEwZTlh ODhjNy5jcmwwHwYDVR0jBBgwFoAUg/22v7ej43LW3j2AmsAHRGInWYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mMmNiZjY4Ni02ZDBjLTQ4ZjAtOGY5NC1kZWUx MGU5YTg4YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClXCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLQCQsH0EW/u9aVo6oi4PudyMdYaJEs3kZ5LpKY9R+XqaJoVFSzJeNu FMA4e+gEwlHm7QKWYZfAQGl14xjM8CJofyZycs01+lmwBYYWWL8J+B4vQt5lNg6l t1oBDmnySRHxvdfC5OfcCTn+oE57q8Q+F157y2tilLPMx47G0WVi/Ia7O1g9F+Jr lC9N8jnO+VXFS1uN2RPh60OXLB3NOmMAex/pMyhjdvv2xg/ZcKx1ctB6obrlYwZe +CoWvqhfHTPaTaOloav0AvuMVxn3RxaC2eYtfJsweWxmB3qytasK0LO4PZkbjbsk x0ebKUmBmVFO7ORYpJlYzpqQXO/waxo= -----END CERTIFICATE-----Generated at Thu Apr 9 20:23:07 2026 by rpki-client