$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/49e86b5a-d5af-396a-9644-8ebefdb5a8fe.roa File: 49e86b5a-d5af-396a-9644-8ebefdb5a8fe.roa (raw, json) Hash identifier: n/WX/FXPxUT55tLBMMrQRn1mdjzRFrlQyhVNhAUSBqM= Subject key identifier: 06:D1:D2:1E:CB:47:EC:D7:1B:BA:86:FF:EC:75:21:25:CE:0B:84:F0 Certificate issuer: /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55 Certificate serial: 010D0C9F4328584D1B19EC5C03101A8DBA21FA80 Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/49e86b5a-d5af-396a-9644-8ebefdb5a8fe.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 148.59.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:ec:5c:03:10:1a:8d:ba:21:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=223a04cb-cff5-4431-b1ef-ede99b16a190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:32:ce:c2:ac:fc:1b:9e:b4:d8:81:f0:eb:87: 41:c0:f5:0a:e0:51:ce:46:3b:11:a3:98:5f:0c:27: c9:eb:2a:8b:c3:d2:29:c0:1e:e8:c4:0a:15:39:33: c5:47:aa:be:c5:ca:33:ed:f1:bb:ef:3a:58:ce:f8: 19:f6:35:f2:ed:ee:ec:ab:55:2d:a4:18:a1:b4:2d: 1c:89:0f:82:21:31:d7:ab:bb:32:a0:1d:72:0b:cd: 0e:2e:eb:4c:54:b1:6f:b0:99:f3:1b:c2:46:18:95: f9:b7:0d:3e:36:fd:57:5a:39:87:cb:e2:df:5d:41: de:2b:d1:65:9e:8a:72:0c:6f:84:3e:98:c0:01:2a: 68:a0:63:26:e8:83:69:b5:0d:e1:7d:77:91:94:46: 8b:e6:a4:e6:31:c9:a6:1d:2d:2d:ca:b1:b7:f1:0b: e0:a6:b0:97:fc:09:22:69:84:bc:a9:e2:de:e2:7b: d9:fd:5c:e6:2d:b0:5d:d2:e6:8e:53:36:ee:76:d2: a3:5b:a1:e3:96:fa:6b:f5:fd:c4:4e:71:6a:c6:83: 32:29:fe:9d:63:d2:b7:80:76:0b:52:53:92:c1:28: 9b:d1:2c:f3:20:d5:7d:fd:7b:3c:56:5c:6a:68:bb: e1:d9:d8:05:10:59:6d:16:d7:d2:82:69:e7:c4:47: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D1:D2:1E:CB:47:EC:D7:1B:BA:86:FF:EC:75:21:25:CE:0B:84:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/49e86b5a-d5af-396a-9644-8ebefdb5a8fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl X509v3 Authority Key Identifier: keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer sbgp-ipAddrBlock: critical IPv4: 148.59.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c4:b8:6c:3e:71:d8:b1:29:9f:d3:b0:e1:fd:be:4c:8c:66: 54:cb:56:6d:f0:d2:91:41:ea:bd:1e:a6:ea:c4:ba:a6:3a:21: e1:d8:f8:6c:95:78:04:95:6d:55:ad:10:54:0a:cc:00:56:04: 9b:07:bb:94:2f:2f:7e:2c:ad:34:6a:a4:2e:f8:4f:f4:d7:88: 2f:ac:99:a1:92:e4:1d:c6:a6:3f:12:89:92:b5:bc:dd:19:34: 3f:c8:2c:17:50:de:af:68:dd:d0:21:9b:f4:5b:6f:0c:30:4f: d0:c0:c1:37:ea:33:8a:df:5d:36:15:95:6c:69:09:4b:1a:8e: bc:fd:52:63:87:12:07:11:9d:08:81:94:01:ae:e9:4c:fd:72: 5a:a8:d4:88:6c:ff:f9:c6:b3:df:e4:2f:2d:ce:46:42:94:62: 45:41:73:c8:72:7d:c9:5d:a9:79:7d:82:ce:ac:db:a7:49:b3: 46:f2:c1:08:8c:13:f6:1d:18:e8:91:26:a2:42:0a:d8:86:3e: 77:9f:50:5f:5f:6d:10:42:4a:f6:31:f0:f8:6f:44:ef:55:b1: 58:43:be:c0:d2:2c:9a:b3:d7:9a:03:f4:06:fd:6a:b3:fb:ac: 2b:40:f6:d2:61:2e:34:fd:57:64:59:f8:38:a5:71:6b:75:fe: ca:14:3f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGexcAxAajboh+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcwNWZkZjAtZTQ4My00OWQ5LTg3MTMtMWNjNmFhODVk YjU1MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MjIzYTA0Y2ItY2ZmNS00NDMxLWIxZWYtZWRlOTliMTZhMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTLOwqz8G5602IHw64dBwPUK4FHORjsRo5hf DCfJ6yqLw9IpwB7oxAoVOTPFR6q+xcoz7fG77zpYzvgZ9jXy7e7sq1UtpBihtC0c iQ+CITHXq7syoB1yC80OLutMVLFvsJnzG8JGGJX5tw0+Nv1XWjmHy+LfXUHeK9Fl nopyDG+EPpjAASpooGMm6INptQ3hfXeRlEaL5qTmMcmmHS0tyrG38QvgprCX/Aki aYS8qeLe4nvZ/VzmLbBd0uaOUzbudtKjW6Hjlvpr9f3ETnFqxoMyKf6dY9K3gHYL UlOSwSib0SzzINV9/Xs8VlxqaLvh2dgFEFltFtfSgmnnxEe9vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbR0h7LR+zXG7qG/+x1ISXOC4TwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1 ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2YWE4NWRiNTUvNDllODZiNWEtZDVhZi0z OTZhLTk2NDQtOGViZWZkYjVhOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzcwNWZkZjAtZTQ4My00OWQ5LTg3 MTMtMWNjNmFhODVkYjU1L2M3MDVmZGYwLWU0ODMtNDlkOS04NzEzLTFjYzZhYTg1 ZGI1NS5jcmwwHwYDVR0jBBgwFoAUa70NuVfAKfR62iQNowf8+cKsB7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2 YWE4NWRiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTEuGw+cdixKZ/TsOH9vkyMZlTLVm3w0pFB6r0epurEuqY6IeHY+GyV eASVbVWtEFQKzABWBJsHu5QvL34srTRqpC74T/TXiC+smaGS5B3Gpj8SiZK1vN0Z ND/ILBdQ3q9o3dAhm/RbbwwwT9DAwTfqM4rfXTYVlWxpCUsajrz9UmOHEgcRnQiB lAGu6Uz9clqo1Ihs//nGs9/kLy3ORkKUYkVBc8hyfcldqXl9gs6s26dJs0bywQiM E/YdGOiRJqJCCtiGPnefUF9fbRBCSvYx8PhvRO9VsVhDvsDSLJqz15oD9Ab9arP7 rCtA9tJhLjT9V2RZ+DilcWt1/soUP5A= -----END CERTIFICATE-----Generated at Thu Mar 19 15:38:06 2026 by rpki-client