$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/65a44a31-945a-3144-bd1a-64ec60da9055.roa File: 65a44a31-945a-3144-bd1a-64ec60da9055.roa (raw, json) Hash identifier: Qc1L+zUX8jBm7teQ/tMlhgWAo03BK/HBDGuD/XB+WFQ= Subject key identifier: D1:71:DD:38:E3:DD:E7:36:C5:8D:AF:5F:F0:76:2D:E7:12:6F:D0:75 Certificate issuer: /CN=133f2e91-cc80-4b10-bfd8-32bfcceeb10d Certificate serial: 010D0C9F4328584D143D1755B353E35F399EC600 Authority key identifier: D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/65a44a31-945a-3144-bd1a-64ec60da9055.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8075 IP address blocks: 147.160.48.0/24 maxlen: 24 148.59.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:17:55:b3:53:e3:5f:39:9e:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=133f2e91-cc80-4b10-bfd8-32bfcceeb10d Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=c8acac54-0fbf-4338-8ec5-e02f32516394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:4b:66:84:d6:40:d8:a1:a2:4f:23:25:e8: ff:5d:8b:82:7a:b2:45:e3:60:7b:18:82:8c:c1:7d: 13:8a:85:7b:36:14:0d:73:5a:0f:86:04:2c:ee:bf: 03:71:55:30:6f:70:10:0e:e3:85:df:b9:62:77:bc: 69:2a:3d:f1:8f:a9:13:14:6f:c9:4f:ea:cc:98:72: 5a:e8:dc:4b:b5:b0:5f:2d:26:1b:53:21:18:58:4d: 40:0f:aa:e0:73:bd:d4:eb:1c:08:b6:3d:43:53:b4: d6:5e:bf:90:d3:11:97:f5:7b:b8:89:14:98:89:6b: d4:61:b0:46:69:b6:10:24:63:4d:01:13:76:99:d8: 59:5a:02:03:42:a4:82:ec:97:f4:33:e1:b8:00:d3: 6a:66:48:b6:bb:af:99:5d:3c:08:2a:b5:20:f6:51: d1:02:5f:36:4b:3e:b1:c0:62:3b:e3:76:b8:dc:1d: 08:82:85:b3:a8:01:b6:e3:cc:d9:86:f1:a8:ce:a0: 57:ce:2d:bb:c8:ab:20:ef:57:69:39:0b:2f:06:a5: 86:c7:17:35:4d:37:29:6c:8e:db:5d:8a:30:fd:68: 5b:49:b2:59:bd:2b:27:81:4e:21:da:e5:4a:51:39: e1:d4:9b:4a:f9:f6:99:10:0f:04:3a:95:03:ab:d7: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:71:DD:38:E3:DD:E7:36:C5:8D:AF:5F:F0:76:2D:E7:12:6F:D0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/65a44a31-945a-3144-bd1a-64ec60da9055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.crl X509v3 Authority Key Identifier: keyid:D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer sbgp-ipAddrBlock: critical IPv4: 147.160.48.0/24 148.59.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a1:3a:ae:c7:33:36:25:56:fa:c8:ca:f5:5a:99:d7:92:95: 51:31:eb:1d:e9:6b:67:bc:7b:5a:59:fc:71:b1:1d:68:cc:96: 7c:36:a6:07:4a:cb:5c:37:4f:b6:0b:70:ca:ce:d2:00:d2:b6: 07:93:51:ac:16:a4:f3:3f:70:1f:51:97:bd:c5:72:e7:e5:b7: 75:6a:ff:c1:49:48:a5:7c:77:16:21:65:c7:94:94:48:f8:c1: 96:37:39:32:12:52:13:7e:71:5e:fb:98:58:27:3f:5f:5a:0e: 1a:6c:27:35:57:20:18:13:8e:1a:3d:28:41:c9:88:31:93:5d: ee:45:af:80:b9:4c:4b:17:b6:d9:fc:e9:d8:8f:02:aa:5b:85: 88:8f:09:d9:4b:a8:78:dd:31:04:d0:e3:5a:58:3a:2d:b8:8a: c8:10:97:33:8c:3f:b1:aa:db:28:da:4e:51:e9:36:18:5b:d0: ec:87:3d:74:18:f8:a3:c5:95:27:cc:60:86:95:9c:b8:58:9e: 03:5c:e5:1a:06:e8:88:6a:6b:d1:ee:98:92:5b:96:db:43:87: 1f:67:52:90:4c:27:a1:27:a3:2c:35:cf:82:cd:b2:29:c4:dd: 2f:96:a8:59:d9:d3:96:4a:73:a5:0b:99:4b:2b:ca:76:8d:cd: 50:15:ef:c8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0UPRdVs1PjXzmexgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTMzZjJlOTEtY2M4MC00YjEwLWJmZDgtMzJiZmNjZWVi MTBkMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YzhhY2FjNTQtMGZiZi00MzM4LThlYzUtZTAyZjMyNTE2Mzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+FLZoTWQNihok8jJej/XYuCerJF42B7GIKM wX0TioV7NhQNc1oPhgQs7r8DcVUwb3AQDuOF37lid7xpKj3xj6kTFG/JT+rMmHJa 6NxLtbBfLSYbUyEYWE1AD6rgc73U6xwItj1DU7TWXr+Q0xGX9Xu4iRSYiWvUYbBG abYQJGNNARN2mdhZWgIDQqSC7Jf0M+G4ANNqZki2u6+ZXTwIKrUg9lHRAl82Sz6x wGI743a43B0IgoWzqAG248zZhvGozqBXzi27yKsg71dpOQsvBqWGxxc1TTcpbI7b XYow/WhbSbJZvSsngU4h2uVKUTnh1JtK+faZEA8EOpUDq9eX0wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNFx3Tjj3ec2xY2vX/B2LecSb9B1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMzNm MmU5MS1jYzgwLTRiMTAtYmZkOC0zMmJmY2NlZWIxMGQvNjVhNDRhMzEtOTQ1YS0z MTQ0LWJkMWEtNjRlYzYwZGE5MDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTMzZjJlOTEtY2M4MC00YjEwLWJm ZDgtMzJiZmNjZWViMTBkLzEzM2YyZTkxLWNjODAtNGIxMC1iZmQ4LTMyYmZjY2Vl YjEwZC5jcmwwHwYDVR0jBBgwFoAU0K0JjGiXlYW3dLkU/lnSWdXWPKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMzNmMmU5MS1jYzgwLTRiMTAtYmZkOC0zMmJm Y2NlZWIxMGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk6AwAwQA lDt/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFihOq7HMzYlVvrIyvVamdeSlVEx6x3pa2e8e1pZ/HGxHWjM lnw2pgdKy1w3T7YLcMrO0gDStgeTUawWpPM/cB9Rl73Fcuflt3Vq/8FJSKV8dxYh ZceUlEj4wZY3OTISUhN+cV77mFgnP19aDhpsJzVXIBgTjho9KEHJiDGTXe5Fr4C5 TEsXttn86diPAqpbhYiPCdlLqHjdMQTQ41pYOi24isgQlzOMP7Gq2yjaTlHpNhhb 0OyHPXQY+KPFlSfMYIaVnLhYngNc5RoG6Ihqa9HumJJblttDhx9nUpBMJ6Enoyw1 z4LNsinE3S+WqFnZ05ZKc6ULmUsrynaNzVAV78g= -----END CERTIFICATE-----Generated at Thu Mar 26 03:53:23 2026 by rpki-client