$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/2239a84b-7e10-3429-b4a8-09f38898bb31.roa File: 2239a84b-7e10-3429-b4a8-09f38898bb31.roa (raw, json) Hash identifier: BI89f0+C9xtrS7uPnAGZzyTqoeiksqjaiFMw9T6GGxQ= Subject key identifier: B4:ED:CA:02:7D:BA:67:3B:32:DE:5A:2C:AB:BE:26:EF:EA:D6:25:FC Certificate issuer: /CN=45718731-be33-4e2d-a8ff-5c444109d0ad Certificate serial: 010D0C9F4328584D0A779A294817599FEFC2FC40 Authority key identifier: DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/2239a84b-7e10-3429-b4a8-09f38898bb31.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 149.28.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:9a:29:48:17:59:9f:ef:c2:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45718731-be33-4e2d-a8ff-5c444109d0ad Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=b1625168-546a-4353-b3ae-62867b93a690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:69:cc:9b:5a:33:ea:99:96:04:b1:5d:7b: a5:63:6c:8c:16:6f:2b:0c:a3:c8:c2:75:83:64:6d: a3:78:8e:f2:38:82:20:98:cb:cd:21:8f:7a:d1:29: 70:cb:17:d0:2d:09:22:62:77:07:72:2e:2a:86:5e: 64:ca:7f:c1:83:47:33:7f:70:9a:01:f7:f6:d6:38: d5:e2:42:bf:99:a2:13:f6:a8:4d:1d:ee:53:19:45: 7f:fe:74:aa:28:61:ca:e7:0a:6c:cd:63:e8:cf:32: 71:08:be:27:50:3b:46:1a:5d:10:ec:f3:f4:74:8b: c0:c3:88:5a:0a:59:a1:a4:58:df:97:1f:2c:96:5f: 0b:1c:be:88:12:87:41:34:7c:cd:f3:1e:c2:7b:cd: 4b:d5:7c:61:98:98:7c:23:a1:fd:8f:51:ee:ca:90: 4d:90:2d:02:d4:27:b9:96:1d:82:2d:af:21:19:f3: 3c:46:b9:16:36:21:ef:33:9c:14:52:0f:8f:74:c5: 9a:8b:5f:72:88:3f:54:95:87:b5:50:5b:f0:e4:77: 95:eb:af:90:2e:04:f0:64:4b:c4:32:77:91:ab:8b: 22:78:04:db:57:c7:10:ae:94:55:60:bc:53:7f:d5: 82:7d:80:39:43:90:35:a9:7b:13:de:95:d8:ae:13: ee:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:ED:CA:02:7D:BA:67:3B:32:DE:5A:2C:AB:BE:26:EF:EA:D6:25:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/2239a84b-7e10-3429-b4a8-09f38898bb31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.crl X509v3 Authority Key Identifier: keyid:DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer sbgp-ipAddrBlock: critical IPv4: 149.28.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:af:be:d1:04:f8:86:5f:c9:7d:63:5b:ad:7a:cd:83:35:b6: c1:81:71:cc:4c:9b:9f:10:a1:a7:02:25:5d:1f:5d:61:a8:73: f1:e2:a9:7c:a2:54:94:15:b5:a3:3b:d4:e8:6a:1d:c5:04:75: 77:4d:4f:0d:e3:5f:4a:5b:6e:a2:d4:99:6b:60:bf:78:51:0c: 47:a7:06:0d:8d:33:e9:24:56:f4:54:e9:bd:75:59:26:4d:40: c7:e0:00:6e:73:71:24:5a:a7:6b:a2:bb:4c:82:11:cc:29:76: 0f:c7:f2:22:e2:c3:40:ca:e5:e1:63:00:47:bd:27:7e:74:d5: 48:15:0c:ef:49:8e:1b:ae:1d:a4:90:3b:5a:9e:d0:52:f5:d9: 46:e1:05:00:49:95:b3:bf:a4:83:76:c7:47:84:0a:47:de:03: c9:fa:15:35:e1:aa:22:ab:1c:35:c0:76:fe:1a:3c:01:f7:c6: 2c:a0:4d:c7:21:86:57:24:d7:f3:1a:8c:43:01:c3:ab:ef:17: ea:44:39:bc:54:f1:7d:67:c6:4c:c7:e4:52:68:35:7e:fc:8c: 53:b6:57:2d:bf:16:2d:b7:2a:62:c1:44:cc:ef:e2:2e:32:66: 77:f1:0d:e9:eb:b3:1d:a6:74:3a:d9:20:26:40:b5:ae:45:83: 9b:0d:2d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd5opSBdZn+/C/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU3MTg3MzEtYmUzMy00ZTJkLWE4ZmYtNWM0NDQxMDlk MGFkMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk YjE2MjUxNjgtNTQ2YS00MzUzLWIzYWUtNjI4NjdiOTNhNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeBpzJtaM+qZlgSxXXulY2yMFm8rDKPIwnWD ZG2jeI7yOIIgmMvNIY960SlwyxfQLQkiYncHci4qhl5kyn/Bg0czf3CaAff21jjV 4kK/maIT9qhNHe5TGUV//nSqKGHK5wpszWPozzJxCL4nUDtGGl0Q7PP0dIvAw4ha ClmhpFjflx8sll8LHL6IEodBNHzN8x7Ce81L1XxhmJh8I6H9j1HuypBNkC0C1Ce5 lh2CLa8hGfM8RrkWNiHvM5wUUg+PdMWai19yiD9UlYe1UFvw5HeV66+QLgTwZEvE MneRq4sieATbV8cQrpRVYLxTf9WCfYA5Q5A1qXsT3pXYrhPuEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTtygJ9umc7Mt5aLKu+Ju/q1iX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTcx ODczMS1iZTMzLTRlMmQtYThmZi01YzQ0NDEwOWQwYWQvMjIzOWE4NGItN2UxMC0z NDI5LWI0YTgtMDlmMzg4OThiYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU3MTg3MzEtYmUzMy00ZTJkLWE4 ZmYtNWM0NDQxMDlkMGFkLzQ1NzE4NzMxLWJlMzMtNGUyZC1hOGZmLTVjNDQ0MTA5 ZDBhZC5jcmwwHwYDVR0jBBgwFoAU3vyj43DeIThjPi4QH7jxu69ar2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80NTcxODczMS1iZTMzLTRlMmQtYThmZi01YzQ0 NDEwOWQwYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2vvtEE+IZfyX1jW616zYM1tsGBccxMm58QoacCJV0fXWGoc/HiqXyi VJQVtaM71OhqHcUEdXdNTw3jX0pbbqLUmWtgv3hRDEenBg2NM+kkVvRU6b11WSZN QMfgAG5zcSRap2uiu0yCEcwpdg/H8iLiw0DK5eFjAEe9J3501UgVDO9JjhuuHaSQ O1qe0FL12UbhBQBJlbO/pIN2x0eECkfeA8n6FTXhqiKrHDXAdv4aPAH3xiygTcch hlck1/MajEMBw6vvF+pEObxU8X1nxkzH5FJoNX78jFO2Vy2/Fi23KmLBRMzv4i4y ZnfxDenrsx2mdDrZICZAta5Fg5sNLeQ= -----END CERTIFICATE-----Generated at Thu Mar 19 12:33:14 2026 by rpki-client