$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/936de171-93a5-33f1-a56b-cfea2e67b068.roa File: 936de171-93a5-33f1-a56b-cfea2e67b068.roa (raw, json) Hash identifier: Dc+hUwUN+Fs6R/DkfSsEZ9Ae0XHybAh8lnl0JGN7jYE= Subject key identifier: F0:65:73:7E:50:82:C6:22:79:BD:65:E7:84:4A:F5:6A:F7:DE:F3:45 Certificate issuer: /CN=058a49b1-635c-42be-b1a3-1465228f2130 Certificate serial: 010D0C9F4328584D3F65013EC79FB97E8999FB00 Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/936de171-93a5-33f1-a56b-cfea2e67b068.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 49304 IP address blocks: 142.248.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:65:01:3e:c7:9f:b9:7e:89:99:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=f0bd5025-4406-4e5e-ace2-bb7fca544860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:90:e9:fd:de:7b:e1:d0:83:e5:6e:4f:39:85: 31:b0:0b:3c:e9:42:a6:61:0a:ad:fb:6d:ac:93:e2: bb:58:9f:96:11:26:82:d7:20:0c:8b:8a:c6:be:a4: fd:f5:6d:17:f5:12:02:a1:69:31:b9:94:28:42:22: 18:0d:7f:ea:76:aa:e9:de:e3:82:ca:32:30:ae:67: 85:86:3d:c0:64:c1:e9:94:cb:24:93:60:10:40:99: ef:a9:e9:59:c9:57:e1:de:1e:5b:d9:d6:ee:8d:4c: bb:12:bd:dc:c5:ee:17:38:ac:66:9b:42:7b:14:47: 2b:a0:df:05:76:0b:ef:a4:7e:34:c8:03:30:27:5f: 58:9e:ec:21:ad:d3:a6:2d:ef:39:13:91:87:7a:07: 54:4b:ba:8c:4e:f0:08:72:66:ea:71:7e:8d:c3:40: 96:b6:f3:4c:44:23:22:5b:37:7f:0b:36:58:91:7e: 49:6b:7f:5f:50:1d:df:5b:c3:9e:2e:70:77:91:d1: 29:ac:18:9d:f7:d4:14:36:0a:f7:64:0a:ee:d8:ed: 27:ff:56:40:0e:51:d2:a4:17:4c:e9:59:dd:11:d4: 88:ca:14:52:fd:9d:bc:5e:c4:44:87:27:f1:c9:a6: ca:25:e6:a4:b0:76:e4:9f:81:22:7f:0b:eb:1b:f0: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:65:73:7E:50:82:C6:22:79:BD:65:E7:84:4A:F5:6A:F7:DE:F3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/936de171-93a5-33f1-a56b-cfea2e67b068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl X509v3 Authority Key Identifier: keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer sbgp-ipAddrBlock: critical IPv4: 142.248.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e8:f1:df:6f:07:91:c0:11:d4:dc:a6:75:ad:8e:d0:b6:98: c8:35:26:7e:5b:42:87:ad:d5:f2:fb:45:94:69:e6:3a:25:b6: 3a:32:31:9b:29:db:28:06:41:72:db:e7:ff:d5:ae:0f:41:cb: 0f:a7:b3:0c:28:10:b9:5e:f3:49:ad:82:91:de:87:bd:d3:0e: c8:ac:73:30:1f:ec:5b:8d:ed:9c:e8:08:43:da:5f:e7:0c:71: 81:47:09:e3:b2:c2:8d:bc:e3:d8:e4:e2:91:7b:09:e7:ae:e3: 3b:07:1e:f8:dc:1f:03:49:d1:3a:8f:e3:a5:a8:89:9a:96:7c: b3:13:6b:e5:55:c1:21:a3:3c:e6:5a:d6:5e:0f:44:cf:68:51: 23:18:52:2c:7b:69:6c:67:92:50:32:b6:53:3b:90:8e:74:33: ef:02:54:09:6b:7c:64:f2:bf:c3:73:0d:87:b4:88:11:d9:8d: 10:f3:17:f4:65:cc:f7:9a:18:82:ad:6e:43:6c:fa:c2:25:c3: b5:1a:30:87:a9:a0:d2:1b:ee:1b:c0:4b:5c:a7:fb:be:86:62: de:6c:f6:e7:40:da:47:a2:af:89:cf:6e:db:56:04:51:7c:cb: 61:1a:d1:fb:28:18:34:20:39:12:04:07:93:5a:d0:95:23:d2: 68:81:ff:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZQE+x5+5fomZ+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU4YTQ5YjEtNjM1Yy00MmJlLWIxYTMtMTQ2NTIyOGYy MTMwMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjBiZDUwMjUtNDQwNi00ZTVlLWFjZTItYmI3ZmNhNTQ0ODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpDp/d574dCD5W5POYUxsAs86UKmYQqt+22s k+K7WJ+WESaC1yAMi4rGvqT99W0X9RICoWkxuZQoQiIYDX/qdqrp3uOCyjIwrmeF hj3AZMHplMskk2AQQJnvqelZyVfh3h5b2dbujUy7Er3cxe4XOKxmm0J7FEcroN8F dgvvpH40yAMwJ19YnuwhrdOmLe85E5GHegdUS7qMTvAIcmbqcX6Nw0CWtvNMRCMi Wzd/CzZYkX5Ja39fUB3fW8OeLnB3kdEprBid99QUNgr3ZAru2O0n/1ZADlHSpBdM 6VndEdSIyhRS/Z28XsREhyfxyabKJeaksHbkn4EifwvrG/Al+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBlc35QgsYieb1l54RK9Wr33vNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNThh NDliMS02MzVjLTQyYmUtYjFhMy0xNDY1MjI4ZjIxMzAvOTM2ZGUxNzEtOTNhNS0z M2YxLWE1NmItY2ZlYTJlNjdiMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDU4YTQ5YjEtNjM1Yy00MmJlLWIx YTMtMTQ2NTIyOGYyMTMwLzA1OGE0OWIxLTYzNWMtNDJiZS1iMWEzLTE0NjUyMjhm MjEzMC5jcmwwHwYDVR0jBBgwFoAUaCUP3rONAi5TxKSqLJfyB3EgXzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNThhNDliMS02MzVjLTQyYmUtYjFhMy0xNDY1 MjI4ZjIxMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/o8d9vB5HAEdTcpnWtjtC2mMg1Jn5bQoet1fL7RZRp5joltjoyMZsp 2ygGQXLb5//Vrg9Byw+nswwoELle80mtgpHeh73TDsisczAf7FuN7ZzoCEPaX+cM cYFHCeOywo2849jk4pF7Ceeu4zsHHvjcHwNJ0TqP46WoiZqWfLMTa+VVwSGjPOZa 1l4PRM9oUSMYUix7aWxnklAytlM7kI50M+8CVAlrfGTyv8NzDYe0iBHZjRDzF/Rl zPeaGIKtbkNs+sIlw7UaMIepoNIb7hvAS1yn+76GYt5s9udA2keir4nPbttWBFF8 y2Ea0fsoGDQgORIEB5Na0JUj0miB/4I= -----END CERTIFICATE-----Generated at Thu Mar 26 16:25:33 2026 by rpki-client