$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa File: 303e9955-d68e-32c2-a271-3e5a2b3464ba.roa (raw, json) Hash identifier: yhDNOHHQLCIcJodTm4I70FmALP8dGVgZ27zjajknpfA= Subject key identifier: FF:41:9D:70:C5:55:4F:05:A5:65:6D:9C:F3:84:F2:74:83:8C:D9:B0 Certificate issuer: /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Certificate serial: 010D0C9F4328584D422F7577B0008CD5FB98F460 Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 36734 IP address blocks: 148.64.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:75:77:b0:00:8c:d5:fb:98:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=b66f7f0b-77b4-49b1-9129-ed6d4540bd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:20:b5:81:81:c2:f1:93:56:6e:e7:86:17: 9b:57:bb:77:77:e7:c8:60:8e:60:a9:ca:a6:7c:15: fb:f5:94:8a:68:4b:d9:9d:99:4b:4d:20:df:56:6a: 64:56:ca:be:ac:2f:a8:74:54:c7:4e:d6:b4:bc:ad: d5:73:a8:f7:fb:23:a2:1d:37:e9:9a:a5:5f:14:b5: 1e:db:6a:5a:92:8a:8d:7f:71:70:2b:d5:54:69:a0: d4:f8:19:1c:0a:dd:f3:29:c2:d4:95:69:11:33:5f: 97:6e:f4:06:a6:48:b6:73:f7:46:cc:94:21:61:9c: 91:75:b6:ce:38:7f:70:72:40:19:42:89:76:d2:33: 01:32:fd:2e:eb:0c:03:bc:56:a9:ef:47:46:75:1e: 7e:26:ee:b1:7d:79:d6:5e:dd:39:b3:58:c7:24:db: 0e:b4:02:8a:46:38:be:b1:e6:50:0d:c5:4c:5a:05: 63:70:3e:16:d0:30:19:84:45:81:d5:07:48:8b:c7: 71:f2:e1:59:80:cf:7c:ad:88:a1:1e:9a:91:8d:8b: 84:a5:21:06:25:06:1a:9f:3b:c2:1f:65:52:f9:d0: db:36:90:0a:3d:8c:ba:f0:c1:23:38:1d:43:2b:a8: d2:75:05:9f:f1:a0:c1:45:ec:5b:84:6a:79:2f:1f: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:41:9D:70:C5:55:4F:05:A5:65:6D:9C:F3:84:F2:74:83:8C:D9:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl X509v3 Authority Key Identifier: keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer sbgp-ipAddrBlock: critical IPv4: 148.64.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:c4:8b:f3:a3:9f:86:09:57:45:a5:58:ba:de:93:53:12:39: 79:4a:44:4e:02:89:54:92:60:be:1c:8a:bb:66:18:41:01:2e: 2e:1c:d6:b8:3b:6e:fa:23:e3:3d:c2:8e:d0:8d:c0:d2:14:58: ce:af:7d:f2:b1:36:f5:a7:53:5d:25:99:86:9b:23:80:c5:c7: 07:a5:1d:d8:c5:18:db:63:4c:7b:af:95:d2:20:79:17:c0:f0: 32:cc:35:b4:e9:e6:4d:87:a0:03:4b:0d:ac:27:ff:e3:22:2b: 07:2c:09:06:dc:75:83:8f:ba:df:3a:a5:97:f3:cc:81:49:6f: 08:43:e8:8f:a2:b4:bb:d7:13:02:42:05:29:c1:18:12:6f:51: f6:e1:e6:e4:1d:3f:f0:5c:d8:0b:d0:bb:8a:5c:78:65:4b:b3: f9:a6:2a:cc:02:7b:b6:44:5a:5b:98:5e:59:4e:40:9a:94:7c: 86:41:c4:a0:6f:17:8a:30:88:2d:8e:d3:88:35:88:64:56:16: 66:a7:af:e0:f4:1e:d4:51:58:ad:01:34:d3:e4:21:41:c8:f6: bd:b4:78:72:15:d0:a4:5f:db:09:c4:95:12:31:9c:32:10:3a: d5:57:df:5a:99:f7:17:23:48:d9:c6:bd:ef:76:54:df:c0:3d: 50:86:28:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL3V3sACM1fuY9GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNiZTJjYWYtYWZkMC00ZWRmLWE3NDMtYjM1MGMyM2Uz MDdkMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk YjY2ZjdmMGItNzdiNC00OWIxLTkxMjktZWQ2ZDQ1NDBiZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2EgtYGBwvGTVm7nhhebV7t3d+fIYI5gqcqm fBX79ZSKaEvZnZlLTSDfVmpkVsq+rC+odFTHTta0vK3Vc6j3+yOiHTfpmqVfFLUe 22pakoqNf3FwK9VUaaDU+BkcCt3zKcLUlWkRM1+XbvQGpki2c/dGzJQhYZyRdbbO OH9wckAZQol20jMBMv0u6wwDvFap70dGdR5+Ju6xfXnWXt05s1jHJNsOtAKKRji+ seZQDcVMWgVjcD4W0DAZhEWB1QdIi8dx8uFZgM98rYihHpqRjYuEpSEGJQYanzvC H2VS+dDbNpAKPYy68MEjOB1DK6jSdQWf8aDBRexbhGp5Lx8OuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9BnXDFVU8FpWVtnPOE8nSDjNmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2Jl MmNhZi1hZmQwLTRlZGYtYTc0My1iMzUwYzIzZTMwN2QvMzAzZTk5NTUtZDY4ZS0z MmMyLWEyNzEtM2U1YTJiMzQ2NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWNiZTJjYWYtYWZkMC00ZWRmLWE3 NDMtYjM1MGMyM2UzMDdkL2VjYmUyY2FmLWFmZDAtNGVkZi1hNzQzLWIzNTBjMjNl MzA3ZC5jcmwwHwYDVR0jBBgwFoAUwnZy+KO6PDsEP1vhWw2QXNk6WFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2JlMmNhZi1hZmQwLTRlZGYtYTc0My1iMzUw YzIzZTMwN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElEBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnEi/Ojn4YJV0WlWLrek1MSOXlKRE4CiVSSYL4cirtmGEEBLi4c1rg7 bvoj4z3CjtCNwNIUWM6vffKxNvWnU10lmYabI4DFxwelHdjFGNtjTHuvldIgeRfA 8DLMNbTp5k2HoANLDawn/+MiKwcsCQbcdYOPut86pZfzzIFJbwhD6I+itLvXEwJC BSnBGBJvUfbh5uQdP/Bc2AvQu4pceGVLs/mmKswCe7ZEWluYXllOQJqUfIZBxKBv F4owiC2O04g1iGRWFmanr+D0HtRRWK0BNNPkIUHI9r20eHIV0KRf2wnElRIxnDIQ OtVX31qZ9xcjSNnGve92VN/APVCGKOE= -----END CERTIFICATE-----Generated at Thu Mar 26 06:22:37 2026 by rpki-client