$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa File: f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa (raw, json) Hash identifier: pAgDAwFUasyRWSJK5ixQ8FEaG6z1YYITixRrPsk0sSk= Subject key identifier: 71:BA:37:68:67:33:15:A3:E4:4C:02:C4:6A:27:97:25:DB:26:6F:FE Certificate issuer: /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Certificate serial: 010D0C9F4328584F23C25A390A89A6F253540460 Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 22379 IP address blocks: 149.20.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5a:39:0a:89:a6:f2:53:54:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=24518be0-f841-4e79-b0da-e46c528e911b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:b5:bb:31:5c:e2:19:0f:8a:7c:43:e6:11: 50:1b:c2:e9:08:aa:75:c7:73:1b:47:6a:66:40:c6: 4f:2b:4f:75:67:db:8a:d4:87:0e:ff:e3:a9:05:76: f8:8d:15:4d:4d:8f:4a:3d:a4:15:56:31:56:41:cb: 9b:13:bc:31:03:57:57:7a:45:19:de:12:29:23:23: ae:c3:e8:2e:ef:16:08:ae:df:fd:34:d2:1b:bc:bf: d2:50:40:6f:0a:35:8f:1b:6c:8f:c2:08:ad:d5:62: 94:7c:f8:a9:a0:c0:b7:1d:dc:e6:d8:f8:4f:58:a5: 45:e3:13:ab:85:a6:97:a5:27:81:05:7a:2d:4f:e3: e1:c3:f8:e2:ef:0c:80:d0:d0:c9:cb:69:96:f5:f7: 5b:c2:36:71:d1:1d:dc:8c:4f:da:0c:ec:b1:3d:95: ea:01:b2:00:15:f2:1c:64:e7:e1:5f:92:9a:55:4a: 19:16:39:fb:7c:a7:b5:3a:41:ec:6d:a1:d0:d6:e8: 67:0d:20:4b:08:c2:fd:d6:2c:6d:f2:38:50:de:6b: 12:09:3f:cb:46:84:6f:fc:f1:65:4b:7b:cd:95:b6: d7:b8:9b:db:5e:39:f3:c7:64:cc:e2:61:fb:87:b2: 15:6b:a1:b0:02:a1:a1:31:7f:68:ad:c5:30:cc:56: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BA:37:68:67:33:15:A3:E4:4C:02:C4:6A:27:97:25:DB:26:6F:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl X509v3 Authority Key Identifier: keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer sbgp-ipAddrBlock: critical IPv4: 149.20.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:81:5c:21:e6:ee:51:b8:cd:f8:da:89:5b:67:ec:53:de:e1: 50:24:27:c7:19:68:c9:5f:eb:0e:07:d4:9a:6a:e2:fa:b9:8a: 53:99:77:9f:75:a3:af:21:ec:4f:8e:92:d9:75:fd:0a:8d:27: 7c:1a:63:81:53:42:42:db:5f:91:ec:6b:f9:b4:e3:2d:42:22: 9c:9d:7b:33:ac:32:1f:23:26:49:47:5a:11:54:9f:19:34:d0: e2:33:cf:ce:6a:71:b1:81:7a:39:8e:89:dc:83:75:af:5f:cc: bc:b4:4c:d0:b2:b7:6f:7d:65:ca:b2:84:3a:24:69:f4:bb:65: 47:10:6d:d0:07:5f:ef:75:df:88:eb:ea:78:c1:4c:26:68:15: 44:b2:24:e8:0c:9a:ca:04:1f:ce:85:57:2f:ba:c4:21:5c:61: 48:88:82:36:02:ab:89:e1:80:a2:50:12:17:98:64:17:70:10: 91:48:2c:7b:47:5b:31:5f:42:46:c5:17:16:7a:f6:2c:3b:d5: 34:c8:b5:ea:50:ad:b3:91:1f:64:6a:c6:71:6f:2d:2b:07:57: df:9b:6f:b7:bb:7c:05:0b:07:6a:1f:6c:b1:53:da:25:d0:e7: dc:f6:98:ce:c0:c8:0c:71:9a:9e:d4:b4:76:88:c1:80:95:53: bd:a2:22:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlo5Comm8lNUBGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJjODgyMDctZTdjNy00NTNlLWE0YWItNzdiNzIxNTJj MzNhMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MjQ1MThiZTAtZjg0MS00ZTc5LWIwZGEtZTQ2YzUyOGU5MTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoou1uzFc4hkPinxD5hFQG8LpCKp1x3MbR2pm QMZPK091Z9uK1IcO/+OpBXb4jRVNTY9KPaQVVjFWQcubE7wxA1dXekUZ3hIpIyOu w+gu7xYIrt/9NNIbvL/SUEBvCjWPG2yPwgit1WKUfPipoMC3Hdzm2PhPWKVF4xOr haaXpSeBBXotT+Phw/ji7wyA0NDJy2mW9fdbwjZx0R3cjE/aDOyxPZXqAbIAFfIc ZOfhX5KaVUoZFjn7fKe1OkHsbaHQ1uhnDSBLCML91ixt8jhQ3msSCT/LRoRv/PFl S3vNlbbXuJvbXjnzx2TM4mH7h7IVa6GwAqGhMX9orcUwzFag+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG6N2hnMxWj5EwCxGonlyXbJm/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4 ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1MmMzM2EvZjg1ZmY1ZTctYTMzOC0z ZDU3LWJjZmUtMDBhYzdlZjU0ZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWJjODgyMDctZTdjNy00NTNlLWE0 YWItNzdiNzIxNTJjMzNhLzliYzg4MjA3LWU3YzctNDUzZS1hNGFiLTc3YjcyMTUy YzMzYS5jcmwwHwYDVR0jBBgwFoAUSTAeHE2iWcjFZa+Ue8VgdNKWIv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3 MjE1MmMzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRRGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGBXCHm7lG4zfjaiVtn7FPe4VAkJ8cZaMlf6w4H1Jpq4vq5ilOZd591 o68h7E+Oktl1/QqNJ3waY4FTQkLbX5Hsa/m04y1CIpydezOsMh8jJklHWhFUnxk0 0OIzz85qcbGBejmOidyDda9fzLy0TNCyt299ZcqyhDokafS7ZUcQbdAHX+9134jr 6njBTCZoFUSyJOgMmsoEH86FVy+6xCFcYUiIgjYCq4nhgKJQEheYZBdwEJFILHtH WzFfQkbFFxZ69iw71TTItepQrbORH2RqxnFvLSsHV9+bb7e7fAULB2ofbLFT2iXQ 59z2mM7AyAxxmp7UtHaIwYCVU72iIiI= -----END CERTIFICATE-----Generated at Wed Sep 23 10:20:47 2026 by rpki-client