$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3c1a10c7-f7e8-3357-8b1a-7ec4956de9be.roa File: 3c1a10c7-f7e8-3357-8b1a-7ec4956de9be.roa (raw, json) Hash identifier: WqVy+IUhjhjSVWJ97KBPWlFx1vCJX7tfk/WNzvO6Tf8= Subject key identifier: 88:0D:AA:40:4D:1F:E6:B1:A6:16:45:C5:25:8B:58:78:F1:48:BC:E5 Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Certificate serial: 010D0C9F4328584E3FC487DB39967BD80CD70600 Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3c1a10c7-f7e8-3357-8b1a-7ec4956de9be.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 12025 IP address blocks: 148.51.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:87:db:39:96:7b:d8:0c:d7:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=4c2e4056-16de-40ac-89c0-043ee37e016f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:5b:15:c7:70:85:0c:d2:be:51:18:b2:2e: fc:4c:49:9d:32:5c:d2:1b:5d:1d:dd:6a:72:1c:05: 44:27:c9:2d:98:68:b2:57:0c:f6:1e:5e:28:af:1e: f6:dd:f3:e7:f7:fa:46:12:d7:3b:a7:73:0a:88:64: 69:ec:e3:02:78:a1:8f:9b:92:3e:af:b8:b3:92:98: 8b:28:e0:59:ab:e1:ed:31:d2:ba:b5:87:27:27:d5: b7:22:e4:1b:97:47:3d:17:14:af:7e:88:55:5b:c2: b4:a9:40:8b:e7:09:20:aa:10:b7:07:39:c1:17:69: 63:7d:a3:03:26:95:6e:bd:a3:c0:e2:a4:26:db:41: 54:8a:0f:74:42:81:c3:02:11:8e:8e:72:65:30:e4: 3f:cf:1e:64:64:71:05:a0:7a:cb:1e:92:fa:2e:d5: 24:cf:b0:5e:f0:57:89:6a:3d:28:1c:32:19:c9:b7: 3d:5a:b2:c5:0f:7d:ec:22:0e:bd:33:60:89:f0:3d: e6:04:7f:4b:58:02:a3:6a:d3:85:70:d1:76:94:e0: 4e:cc:f2:57:ff:eb:70:58:c9:ff:ec:d3:6d:27:4d: 70:5c:d3:15:71:28:87:4b:01:05:ba:4a:74:62:94: 4b:63:fb:e0:cc:17:a4:ee:3f:2f:5d:51:cb:aa:39: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0D:AA:40:4D:1F:E6:B1:A6:16:45:C5:25:8B:58:78:F1:48:BC:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3c1a10c7-f7e8-3357-8b1a-7ec4956de9be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl X509v3 Authority Key Identifier: keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer sbgp-ipAddrBlock: critical IPv4: 148.51.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:9e:d4:9e:04:ec:d3:9c:4d:8f:91:fa:ff:9c:7e:b0:f5:43: 34:3f:8f:8c:e3:d0:c1:a5:92:cd:ef:48:66:b3:1b:64:d0:6f: a3:07:10:8b:cd:c2:99:6c:93:06:16:ae:cf:c4:52:ee:d6:61: 4f:bb:4d:1b:b9:77:10:e7:2f:e4:9e:b0:89:06:27:87:91:66: 2f:eb:67:99:bd:0c:af:52:ae:5a:47:db:d3:92:7a:3c:77:78: 60:7b:f6:f4:80:30:e1:02:7a:00:83:ac:be:01:b6:4d:1c:9b: 30:ae:65:84:41:d2:52:8f:ae:97:2e:28:ef:5f:f3:2c:12:85: 98:60:a8:56:bc:a8:90:fb:6c:c0:7c:f0:27:a0:28:6f:fb:b6: e6:80:6e:fa:89:0d:05:fa:b2:8e:31:89:aa:5d:1b:cd:e2:3e: 3e:1d:83:8e:bc:73:3d:ca:76:0a:61:75:00:82:db:f7:d0:6d: fe:51:c2:4c:85:e1:2b:e0:17:01:d8:3d:95:02:43:8c:ac:16: 98:08:f4:2f:88:0f:0e:96:32:64:e1:c2:32:a4:c1:55:b4:5e: 1b:eb:86:f3:58:37:e9:d2:a9:a6:16:6d:b0:ec:e9:f6:f4:59: e7:06:05:db:bc:e9:1b:35:76:9a:5e:8f:69:92:0a:9e:69:c7: 8e:3b:fd:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xIfbOZZ72AzXBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2 YzYzMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk NGMyZTQwNTYtMTZkZS00MGFjLTg5YzAtMDQzZWUzN2UwMTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNVbFcdwhQzSvlEYsi78TEmdMlzSG10d3Wpy HAVEJ8ktmGiyVwz2Hl4orx723fPn9/pGEtc7p3MKiGRp7OMCeKGPm5I+r7izkpiL KOBZq+HtMdK6tYcnJ9W3IuQbl0c9FxSvfohVW8K0qUCL5wkgqhC3BznBF2ljfaMD JpVuvaPA4qQm20FUig90QoHDAhGOjnJlMOQ/zx5kZHEFoHrLHpL6LtUkz7Be8FeJ aj0oHDIZybc9WrLFD33sIg69M2CJ8D3mBH9LWAKjatOFcNF2lOBOzPJX/+twWMn/ 7NNtJ01wXNMVcSiHSwEFukp0YpRLY/vgzBek7j8vXVHLqjnstwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgNqkBNH+axphZFxSWLWHjxSLzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5 YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvM2MxYTEwYzctZjdlOC0z MzU3LThiMWEtN2VjNDk1NmRlOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3 Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDOVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWe1J4E7NOcTY+R+v+cfrD1QzQ/j4zj0MGlks3vSGazG2TQb6MHEIvN wplskwYWrs/EUu7WYU+7TRu5dxDnL+SesIkGJ4eRZi/rZ5m9DK9SrlpH29OSejx3 eGB79vSAMOECegCDrL4Btk0cmzCuZYRB0lKPrpcuKO9f8ywShZhgqFa8qJD7bMB8 8CegKG/7tuaAbvqJDQX6so4xiapdG83iPj4dg468cz3KdgphdQCC2/fQbf5RwkyF 4SvgFwHYPZUCQ4ysFpgI9C+IDw6WMmThwjKkwVW0XhvrhvNYN+nSqaYWbbDs6fb0 WecGBdu86Rs1dppej2mSCp5px447/cI= -----END CERTIFICATE-----Generated at Fri Jul 24 13:37:12 2026 by rpki-client