$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa File: 48c11378-660d-3999-a7c5-2245378b1910.roa (raw, json) Hash identifier: xAC+lCdhzZjC4TxC9zdzfo8vzcfgpiInxaSHsd+8h1E= Subject key identifier: BE:CA:48:51:95:20:90:7B:F0:4E:BB:DA:3C:71:40:A5:00:F1:CD:70 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D3F64D474CA4BEA327A986400 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 9009 IP address blocks: 149.143.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d4:74:ca:4b:ea:32:7a:98:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=8ffc288d-dfb7-4df7-95e2-baded5fd88e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:34:6d:2c:9b:f7:93:8f:2e:bd:a6:04:9d: 1b:fc:50:cb:ad:1f:c1:ce:58:38:dc:2c:5d:71:bc: 3c:e3:3f:ce:40:a2:d3:10:f5:5c:63:9b:b8:28:cc: 81:b7:be:15:ba:9c:b0:fc:a3:ee:4a:6e:ae:13:bd: fb:65:84:a0:d9:d4:5b:07:f2:8e:dd:03:d9:ac:e2: 95:8f:57:c6:16:f4:aa:b6:ec:ba:02:87:fd:26:43: 16:62:56:f3:28:fc:d2:59:92:4d:98:04:d7:e9:27: 2f:72:1b:ee:5b:e9:c4:3b:ff:1f:bd:d6:f6:23:eb: f8:84:de:42:cf:26:d7:d3:21:86:d4:2a:34:97:fa: 97:50:ba:22:44:6f:9f:64:6e:f9:57:54:da:00:9f: ba:8b:ce:56:a5:51:ce:7b:6b:da:cd:ae:07:61:25: 7d:6e:ad:08:68:f8:a1:ce:3e:1b:30:39:1e:b1:12: 1b:83:ec:4f:40:01:56:1c:6d:26:23:c4:eb:cc:b5: d3:25:9c:01:2d:2a:a4:b3:7f:15:7b:34:75:23:35: 40:13:2f:82:31:09:ed:03:f0:0d:de:c9:12:b6:cf: c6:b0:79:ec:85:37:20:77:c0:4b:a9:2a:67:77:1e: 0c:d6:81:47:29:27:97:5d:a1:1c:bb:de:ec:38:57: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CA:48:51:95:20:90:7B:F0:4E:BB:DA:3C:71:40:A5:00:F1:CD:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3d:52:34:04:3d:64:16:b8:7e:c6:05:03:35:7e:5e:c8:84: 44:d6:78:c5:de:17:d4:24:cd:fc:40:e0:cd:29:80:51:70:8d: 47:6d:34:33:5e:82:b1:7b:41:1b:74:13:4b:f6:3c:5c:5e:cf: 2a:74:90:44:d8:57:63:e5:dc:cd:48:d9:1e:a7:b3:50:1c:61: 25:2f:69:f9:a9:42:d4:5f:40:b4:40:3c:e1:aa:09:e6:5a:bb: ef:6b:2c:d0:15:40:e9:8a:a9:5b:6f:4d:55:dd:82:41:75:8a: 3a:d1:21:ad:59:e1:2c:b0:61:5a:f9:80:ad:fb:21:f9:af:e2: e6:8d:7e:8a:f6:1d:d1:f6:f3:97:bc:35:cf:3b:79:f5:1b:47: ca:c5:1b:5e:56:e3:ec:90:3d:c7:8d:9d:90:65:68:14:91:61: d3:31:ee:f0:63:96:75:09:3d:f6:53:c9:16:b7:92:05:c8:72: 72:ab:18:04:53:6f:8c:7f:22:7f:79:88:a8:26:19:84:a3:f8: 84:6d:5a:2b:a1:1c:b7:1c:58:c2:2c:8e:c9:c4:fc:a7:78:d7: ea:64:98:2e:61:cc:7c:02:69:c4:97:94:8f:2e:32:8b:4b:a0: 9f:c8:3f:32:6e:d2:e9:50:9d:69:e3:68:09:19:23:e7:d0:47: 25:a6:cd:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNR0ykvqMnqYZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OGZmYzI4OGQtZGZiNy00ZGY3LTk1ZTItYmFkZWQ1ZmQ4OGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c00bSyb95OPLr2mBJ0b/FDLrR/Bzlg43Cxd cbw84z/OQKLTEPVcY5u4KMyBt74Vupyw/KPuSm6uE737ZYSg2dRbB/KO3QPZrOKV j1fGFvSqtuy6Aof9JkMWYlbzKPzSWZJNmATX6ScvchvuW+nEO/8fvdb2I+v4hN5C zybX0yGG1Co0l/qXULoiRG+fZG75V1TaAJ+6i85WpVHOe2vaza4HYSV9bq0IaPih zj4bMDkesRIbg+xPQAFWHG0mI8TrzLXTJZwBLSqks38VezR1IzVAEy+CMQntA/AN 3skSts/GsHnshTcgd8BLqSpndx4M1oFHKSeXXaEcu97sOFcVUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7KSFGVIJB78E672jxxQKUA8c1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDhjMTEzNzgtNjYwZC0z OTk5LWE3YzUtMjI0NTM3OGIxOTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU9UjQEPWQWuH7GBQM1fl7IhETWeMXeF9QkzfxA4M0pgFFwjUdtNDNe grF7QRt0E0v2PFxezyp0kETYV2Pl3M1I2R6ns1AcYSUvafmpQtRfQLRAPOGqCeZa u+9rLNAVQOmKqVtvTVXdgkF1ijrRIa1Z4SywYVr5gK37Ifmv4uaNfor2HdH285e8 Nc87efUbR8rFG15W4+yQPceNnZBlaBSRYdMx7vBjlnUJPfZTyRa3kgXIcnKrGART b4x/In95iKgmGYSj+IRtWiuhHLccWMIsjsnE/Kd41+pkmC5hzHwCacSXlI8uMotL oJ/IPzJu0ulQnWnjaAkZI+fQRyWmzQU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:57:03 2026 by rpki-client