$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/a66a2146-8331-38c1-a442-0354dd09e58c.roa File: a66a2146-8331-38c1-a442-0354dd09e58c.roa (raw, json) Hash identifier: aNgJJrfoAOi7YDSm6mMAJgRS4JkRopCRiuZan5+e+mU= Subject key identifier: 71:0B:EC:46:4B:89:FF:61:5F:6F:FE:22:41:E9:6A:B7:F7:A2:9B:E1 Certificate issuer: /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Certificate serial: 010D0C9F4328584D1DFB904933D8D33D548821C0 Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/a66a2146-8331-38c1-a442-0354dd09e58c.roa Signing time: Tue 10 Mar 2026 01:46:53 +0000 ROA not before: Tue 10 Mar 2026 01:46:53 +0000 ROA not after: Mon 08 Jun 2026 01:46:53 +0000 asID: 40271 IP address blocks: 149.112.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:fb:90:49:33:d8:d3:3d:54:88:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Validity Not Before: Mar 10 01:46:53 2026 GMT Not After : Jun 8 01:46:53 2026 GMT Subject: CN=daadc2e4-c81a-44a8-9bbb-d022f61860a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5f:ac:d4:ec:85:e8:43:2e:68:bb:30:48:4c: d3:da:d9:a5:40:46:e3:2d:8d:bf:5b:5d:71:32:c0: 6e:1d:ae:ff:a4:4d:15:df:ec:7d:a1:2b:16:2c:97: e8:50:a2:86:9e:5a:b4:7e:e9:8f:3a:85:28:62:62: 86:31:c5:24:80:66:f4:bc:86:40:63:53:e3:cd:1e: 6a:99:34:87:36:78:39:2c:8c:ef:67:a7:a8:a4:c7: 2e:d4:a1:3d:cc:75:c1:d4:47:40:b7:ea:00:8a:ae: 5c:f3:bf:76:14:e6:af:d0:1d:5d:99:12:ea:5f:3e: 82:41:f6:d7:21:65:23:2a:30:5f:25:ff:d0:16:8c: c6:36:88:d8:10:93:5d:f7:fc:eb:fa:21:2a:ad:9e: ef:8c:5a:ff:fe:95:32:aa:80:20:d1:a2:d2:ad:f4: 6f:e0:49:42:3d:a6:4e:95:eb:82:f5:e0:13:c8:a5: 77:06:ab:75:ee:5b:27:81:19:c9:ab:3e:6f:d1:fe: 54:4a:04:e1:d8:33:47:2f:64:6d:20:6d:9d:87:36: c4:82:ce:0f:53:14:9f:ba:eb:bb:a2:7d:65:a8:67: e0:34:ac:73:d3:8d:f9:f7:18:54:71:83:18:a3:b6: ac:32:34:1f:a7:90:ec:f3:43:6a:14:67:22:c5:72: 18:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0B:EC:46:4B:89:FF:61:5F:6F:FE:22:41:E9:6A:B7:F7:A2:9B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/a66a2146-8331-38c1-a442-0354dd09e58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl X509v3 Authority Key Identifier: keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer sbgp-ipAddrBlock: critical IPv4: 149.112.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9d:c5:ba:de:a9:36:d1:e8:85:07:cd:0c:bc:ba:ec:c8:d2: 09:84:60:35:e1:fc:64:b7:8f:bd:3a:a0:d4:f5:72:3e:53:20: fd:60:3d:a9:0b:8d:11:ff:54:50:1d:2f:03:4a:67:1e:c5:1e: 05:d7:3c:07:31:51:ac:59:e1:68:d7:e1:7c:e7:ee:2f:18:a3: 00:ef:50:72:06:82:80:ab:dd:ee:ce:17:de:d7:1d:56:df:ba: 9e:25:f7:5a:9c:9e:36:0c:c4:47:20:77:f4:a4:90:8a:e8:05: 2b:29:cc:c4:a2:d5:ad:55:4f:5b:13:87:b0:1b:27:d5:80:d1: bc:9d:6c:43:31:09:f9:3d:01:e8:eb:f6:92:9b:f0:9f:37:77: fc:9e:f2:90:df:95:6e:8e:6f:ff:3a:ce:66:8d:17:fb:9e:b9: ff:59:b0:b8:cd:36:77:bf:69:ac:d9:00:47:bd:63:fa:94:ad: ba:1b:50:6d:3b:73:0e:88:ad:a0:27:1c:1d:51:0d:7c:ef:b0: 41:76:cb:f0:55:a8:90:93:2e:57:dc:a6:02:df:19:c1:7c:26: 90:fe:9d:fe:86:c2:dd:78:b1:e7:37:e2:5f:17:15:fd:30:31: ec:f0:e2:dc:e3:08:ee:b2:7c:4b:c8:6b:08:46:1e:c1:3d:58: 93:0b:6b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d+5BJM9jTPVSIIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRjOWUwY2UtMGYxMi00YmM4LTk4OWMtNWQzMzJhN2Nm NTIyMB4XDTI2MDMxMDAxNDY1M1oXDTI2MDYwODAxNDY1M1owLzEtMCsGA1UEAxMk ZGFhZGMyZTQtYzgxYS00NGE4LTliYmItZDAyMmY2MTg2MGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41+s1OyF6EMuaLswSEzT2tmlQEbjLY2/W11x MsBuHa7/pE0V3+x9oSsWLJfoUKKGnlq0fumPOoUoYmKGMcUkgGb0vIZAY1PjzR5q mTSHNng5LIzvZ6eopMcu1KE9zHXB1EdAt+oAiq5c8792FOav0B1dmRLqXz6CQfbX IWUjKjBfJf/QFozGNojYEJNd9/zr+iEqrZ7vjFr//pUyqoAg0aLSrfRv4ElCPaZO leuC9eATyKV3Bqt17lsngRnJqz5v0f5USgTh2DNHL2RtIG2dhzbEgs4PUxSfuuu7 on1lqGfgNKxz04359xhUcYMYo7asMjQfp5Ds80NqFGcixXIYwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEL7EZLif9hX2/+IkHparf3opvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5 ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3Y2Y1MjIvYTY2YTIxNDYtODMzMS0z OGMxLWE0NDItMDM1NGRkMDllNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTRjOWUwY2UtMGYxMi00YmM4LTk4 OWMtNWQzMzJhN2NmNTIyLzE0YzllMGNlLTBmMTItNGJjOC05ODljLTVkMzMyYTdj ZjUyMi5jcmwwHwYDVR0jBBgwFoAU/fpf04LJWseB5rKwVLTJ0fActTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMz MmE3Y2Y1MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCdxbreqTbR6IUHzQy8uuzI0gmEYDXh/GS3j706oNT1cj5TIP1gPakL jRH/VFAdLwNKZx7FHgXXPAcxUaxZ4WjX4Xzn7i8YowDvUHIGgoCr3e7OF97XHVbf up4l91qcnjYMxEcgd/SkkIroBSspzMSi1a1VT1sTh7AbJ9WA0bydbEMxCfk9Aejr 9pKb8J83d/ye8pDflW6Ob/86zmaNF/ueuf9ZsLjNNne/aazZAEe9Y/qUrbobUG07 cw6IraAnHB1RDXzvsEF2y/BVqJCTLlfcpgLfGcF8JpD+nf6Gwt14sec34l8XFf0w Mezw4tzjCO6yfEvIawhGHsE9WJMLa6M= -----END CERTIFICATE-----Generated at Thu Mar 26 00:49:15 2026 by rpki-client