$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d409bd1e-09f9-315b-a369-bd40e9c97f27.roa File: d409bd1e-09f9-315b-a369-bd40e9c97f27.roa (raw, json) Hash identifier: CZtrgErxTZhcLYsALvXXWkxldhPwKh9rm2uxgXcgzHI= Subject key identifier: 65:D1:70:6B:DE:6D:1F:8A:50:B6:04:2D:0B:BA:F6:67:0D:83:DF:1B Certificate issuer: /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55 Certificate serial: 010D0C9F4328584D9E502F4182BD3E9B11C8F480 Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d409bd1e-09f9-315b-a369-bd40e9c97f27.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 148.59.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2f:41:82:bd:3e:9b:11:c8:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=6b29938d-1888-4ad1-ab3d-de19be9671fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:66:51:85:ac:c2:48:a5:d9:79:94:01:b0:36: 24:d8:50:12:e9:f9:fc:73:c7:25:ac:21:67:61:a7: f2:2d:25:72:04:88:a2:44:c2:22:a2:8f:1b:6e:4d: 9f:4c:44:47:38:7d:9c:b0:e9:cb:09:31:c4:25:c0: 9f:85:c1:43:05:2c:fc:c7:c5:09:31:df:bd:ce:ca: d8:23:9f:27:ec:48:20:6e:bc:39:7d:f2:64:bd:cd: b9:19:22:ca:b3:6c:c7:b7:de:dc:16:8c:84:6c:08: c8:4d:ca:72:52:4a:50:5c:c8:97:d8:b1:25:7a:a5: cf:66:0f:3f:6e:e0:54:69:9e:68:17:81:c8:ed:ca: a8:8d:e7:f4:f7:a9:19:1f:f7:86:81:9f:b9:7e:6f: 7a:39:b9:bb:29:92:43:c5:93:99:75:46:32:26:d3: fe:9b:b9:0a:ab:06:f6:97:5c:5d:70:38:fe:f8:e2: 00:ca:62:52:af:46:5a:6f:19:be:90:a1:b1:71:e4: 51:a7:47:f9:de:9b:ef:e2:5e:4c:39:c9:03:9a:bd: 6a:14:ae:5a:c3:60:53:9b:f6:5e:86:0d:e6:b0:7c: d2:f5:61:64:a4:02:3b:71:92:dd:7b:69:e6:be:ad: f4:fb:24:a7:a8:5d:d2:5c:51:99:95:ef:9c:15:37: 12:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D1:70:6B:DE:6D:1F:8A:50:B6:04:2D:0B:BA:F6:67:0D:83:DF:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d409bd1e-09f9-315b-a369-bd40e9c97f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl X509v3 Authority Key Identifier: keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer sbgp-ipAddrBlock: critical IPv4: 148.59.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:75:0c:48:34:47:63:f0:41:54:b3:0f:46:a4:62:11:7c:3a: 23:d4:4d:42:de:1f:15:02:2a:9f:48:68:f4:63:f3:aa:b7:ef: ae:d2:78:4f:8f:b1:bd:69:6c:8c:3b:0e:06:cc:e2:09:1a:a9: b5:ce:7a:6f:19:42:ff:83:e6:1a:8c:23:be:9b:b2:cc:d4:9a: 7b:4a:b6:4b:d1:bc:5a:6b:5e:72:02:41:b2:cd:5d:97:4c:58: 33:a5:49:d9:9f:c5:ed:01:99:e5:cb:7e:86:fc:5f:bf:34:b4: 36:ee:c0:7b:5d:6c:e1:90:9a:7b:49:9d:8b:87:4e:d2:ea:87: 84:d4:4b:f1:47:b7:06:0d:6e:4c:4c:36:42:d8:f3:0e:a2:eb: 5b:99:a1:c1:23:9d:aa:e2:59:dd:c7:30:29:76:47:5e:c0:77: f4:f3:82:a5:70:38:4d:cf:58:a7:fe:9d:7b:e1:0f:90:41:cc: 1f:af:49:ae:0d:c4:0c:b5:d9:94:33:89:4f:da:26:b2:3f:a1: a4:30:1f:f6:cb:75:86:2e:75:77:a7:7c:b6:cd:ca:ac:a1:29: 54:ab:f9:b4:e4:ab:d0:1e:12:97:ac:b5:21:eb:06:22:2d:18: c6:be:9b:2f:c3:7a:d8:9c:47:70:c3:8c:2e:10:b4:29:18:ab: b5:e7:a7:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUC9Bgr0+mxHI9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcwNWZkZjAtZTQ4My00OWQ5LTg3MTMtMWNjNmFhODVk YjU1MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NmIyOTkzOGQtMTg4OC00YWQxLWFiM2QtZGUxOWJlOTY3MWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGZRhazCSKXZeZQBsDYk2FAS6fn8c8clrCFn YafyLSVyBIiiRMIioo8bbk2fTERHOH2csOnLCTHEJcCfhcFDBSz8x8UJMd+9zsrY I58n7Eggbrw5ffJkvc25GSLKs2zHt97cFoyEbAjITcpyUkpQXMiX2LEleqXPZg8/ buBUaZ5oF4HI7cqojef096kZH/eGgZ+5fm96Obm7KZJDxZOZdUYyJtP+m7kKqwb2 l1xdcDj++OIAymJSr0Zabxm+kKGxceRRp0f53pvv4l5MOckDmr1qFK5aw2BTm/Ze hg3msHzS9WFkpAI7cZLde2nmvq30+ySnqF3SXFGZle+cFTcSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXRcGvebR+KULYELQu69mcNg98bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1 ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2YWE4NWRiNTUvZDQwOWJkMWUtMDlmOS0z MTViLWEzNjktYmQ0MGU5Yzk3ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzcwNWZkZjAtZTQ4My00OWQ5LTg3 MTMtMWNjNmFhODVkYjU1L2M3MDVmZGYwLWU0ODMtNDlkOS04NzEzLTFjYzZhYTg1 ZGI1NS5jcmwwHwYDVR0jBBgwFoAUa70NuVfAKfR62iQNowf8+cKsB7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2 YWE4NWRiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx1DEg0R2PwQVSzD0akYhF8OiPUTULeHxUCKp9IaPRj86q3767SeE+P sb1pbIw7DgbM4gkaqbXOem8ZQv+D5hqMI76bsszUmntKtkvRvFprXnICQbLNXZdM WDOlSdmfxe0BmeXLfob8X780tDbuwHtdbOGQmntJnYuHTtLqh4TUS/FHtwYNbkxM NkLY8w6i61uZocEjnariWd3HMCl2R17Ad/TzgqVwOE3PWKf+nXvhD5BBzB+vSa4N xAy12ZQziU/aJrI/oaQwH/bLdYYudXenfLbNyqyhKVSr+bTkq9AeEpestSHrBiIt GMa+my/DeticR3DDjC4QtCkYq7Xnp5U= -----END CERTIFICATE-----Generated at Wed May 13 07:48:23 2026 by rpki-client