$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/4f25b838-41f4-3544-8890-788de6ce870e.roa File: 4f25b838-41f4-3544-8890-788de6ce870e.roa (raw, json) Hash identifier: bDUs49/x+4CwXzLYSOb/KQxVBPKYLNdQUKoiqQZYo4Y= Subject key identifier: A2:4E:24:82:3F:9E:CE:B9:BB:1C:2D:64:88:2F:D1:08:6F:C3:F5:77 Certificate issuer: /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55 Certificate serial: 010D0C9F4328584D1B19ECAF892D99F90631CB80 Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/4f25b838-41f4-3544-8890-788de6ce870e.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 148.59.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:ec:af:89:2d:99:f9:06:31:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=ef559f05-98cb-4271-8b2a-f64a4960ba70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:25:2b:49:52:28:7b:5b:d5:e1:6b:af:2a:26: 57:fe:6e:ee:b7:d5:24:f4:4e:f2:5f:61:d2:93:2f: 8d:0a:30:51:c6:32:90:bc:b6:99:2e:28:ff:22:3a: 20:cf:94:ee:c6:0f:01:82:c8:3d:42:f9:8b:53:be: b3:8c:0d:df:f0:88:77:f0:15:eb:98:72:6a:e3:28: d4:b2:dc:f6:79:83:78:cd:5b:78:20:22:1d:8f:fe: f9:fc:ed:07:b4:d7:52:d1:1b:e4:ec:f8:65:c3:1e: 70:0d:1f:b5:e0:80:63:2a:e4:1d:22:36:90:1c:d9: 31:69:f1:e4:39:75:f9:a3:d1:b4:ea:04:47:77:23: 94:b8:20:16:9f:6f:e1:be:c4:2b:cd:d9:36:12:36: 05:21:0c:06:b3:6f:b1:3b:63:45:c5:72:76:50:3d: df:0c:f2:f0:68:0c:b5:18:9d:6c:cf:cb:50:b4:23: 87:06:83:f0:ad:67:f1:f5:03:13:91:c4:cd:ee:52: 09:ba:e4:8c:c2:7a:14:94:cc:10:40:32:78:29:59: 34:25:6d:03:a8:37:38:ba:ad:aa:23:b2:31:40:2f: 72:2b:08:29:b1:b1:22:29:5d:2a:ef:df:0d:34:ac: 42:3b:16:eb:41:69:29:cd:b8:67:d5:b0:d1:c3:7b: 26:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4E:24:82:3F:9E:CE:B9:BB:1C:2D:64:88:2F:D1:08:6F:C3:F5:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/4f25b838-41f4-3544-8890-788de6ce870e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl X509v3 Authority Key Identifier: keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer sbgp-ipAddrBlock: critical IPv4: 148.59.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d8:22:33:c9:81:2f:bd:73:cf:35:0a:9f:aa:35:cd:c2:42: 5c:f9:de:f4:e6:7f:35:6d:9d:1c:23:de:a6:63:c0:17:e8:2e: 35:68:c6:b0:4d:1d:15:a7:c2:a9:ef:09:9a:cb:d7:58:3e:8d: 9b:f4:e2:8b:b7:44:3e:a1:79:6c:28:5a:7b:49:79:67:59:d8: 72:9c:e2:47:69:db:17:f0:59:2d:8c:2c:c8:a8:ec:78:2b:0b: c3:86:31:d7:f2:27:46:62:98:95:32:9d:7e:1d:91:1b:cc:30: 8c:a4:19:6f:db:4a:cb:ee:a5:56:31:8f:d5:ec:a5:1c:b1:46: c2:4d:ac:71:ca:bd:4c:c4:20:ac:b4:8c:93:57:40:4c:a0:c2: 05:ce:a1:43:85:bb:36:bc:4c:80:bc:2f:d9:e7:87:66:b5:d4: 34:dd:cf:02:05:31:a0:a8:61:26:ce:d3:a8:d1:5e:87:5f:10: bc:23:d2:a6:70:a3:f9:04:eb:28:6d:c0:a1:ac:bc:cd:60:3a: 1c:72:6d:a5:d0:0d:ed:3c:e0:94:20:35:12:b4:0f:71:79:ba: 49:d3:08:87:b9:d8:f6:a6:a0:f7:db:f0:13:75:c7:7d:23:d3: f8:12:5d:77:a5:8a:27:0a:0f:da:7b:19:07:71:39:c6:9b:5a: 6b:5a:ec:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGeyviS2Z+QYxy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcwNWZkZjAtZTQ4My00OWQ5LTg3MTMtMWNjNmFhODVk YjU1MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZWY1NTlmMDUtOThjYi00MjcxLThiMmEtZjY0YTQ5NjBiYTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiUrSVIoe1vV4WuvKiZX/m7ut9Uk9E7yX2HS ky+NCjBRxjKQvLaZLij/Ijogz5Tuxg8Bgsg9QvmLU76zjA3f8Ih38BXrmHJq4yjU stz2eYN4zVt4ICIdj/75/O0HtNdS0Rvk7Phlwx5wDR+14IBjKuQdIjaQHNkxafHk OXX5o9G06gRHdyOUuCAWn2/hvsQrzdk2EjYFIQwGs2+xO2NFxXJ2UD3fDPLwaAy1 GJ1sz8tQtCOHBoPwrWfx9QMTkcTN7lIJuuSMwnoUlMwQQDJ4KVk0JW0DqDc4uq2q I7IxQC9yKwgpsbEiKV0q798NNKxCOxbrQWkpzbhn1bDRw3smbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJOJII/ns65uxwtZIgv0Qhvw/V3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1 ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2YWE4NWRiNTUvNGYyNWI4MzgtNDFmNC0z NTQ0LTg4OTAtNzg4ZGU2Y2U4NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzcwNWZkZjAtZTQ4My00OWQ5LTg3 MTMtMWNjNmFhODVkYjU1L2M3MDVmZGYwLWU0ODMtNDlkOS04NzEzLTFjYzZhYTg1 ZGI1NS5jcmwwHwYDVR0jBBgwFoAUa70NuVfAKfR62iQNowf8+cKsB7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2 YWE4NWRiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDYIjPJgS+9c881Cp+qNc3CQlz53vTmfzVtnRwj3qZjwBfoLjVoxrBN HRWnwqnvCZrL11g+jZv04ou3RD6heWwoWntJeWdZ2HKc4kdp2xfwWS2MLMio7Hgr C8OGMdfyJ0ZimJUynX4dkRvMMIykGW/bSsvupVYxj9XspRyxRsJNrHHKvUzEIKy0 jJNXQEygwgXOoUOFuza8TIC8L9nnh2a11DTdzwIFMaCoYSbO06jRXodfELwj0qZw o/kE6yhtwKGsvM1gOhxybaXQDe084JQgNRK0D3F5uknTCIe52PamoPfb8BN1x30j 0/gSXXeliicKD9p7GQdxOcabWmta7NA= -----END CERTIFICATE-----Generated at Thu Mar 19 12:33:18 2026 by rpki-client