$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b3105a7-ca24-3e42-badc-2aa11de975b8.roa File: 2b3105a7-ca24-3e42-badc-2aa11de975b8.roa (raw, json) Hash identifier: VbjKrXYsZoB6B6ga/i2e9EA/xR1zPUjL5kdC6JWjy2w= Subject key identifier: 8D:A3:91:9C:5F:05:FD:6A:1F:6E:19:53:CE:13:DA:5D:08:E4:B0:CB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F14678E73CA11775A35A41FC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b3105a7-ca24-3e42-badc-2aa11de975b8.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 149.118.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8e:73:ca:11:77:5a:35:a4:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=2241b600-2df2-4c24-bb6d-4f1dc8f9da09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e7:c7:f9:8d:20:45:50:9a:a7:cd:26:b3:88: b0:5b:78:9c:9c:0a:aa:0a:f9:5f:e1:da:dd:74:88: b9:91:81:46:12:ce:8d:68:70:74:72:a4:6b:d4:54: 27:2e:d3:22:b3:ee:85:48:29:ec:04:0d:3d:8f:81: 80:b1:ac:4a:63:f8:53:18:bd:46:3f:f7:e9:6b:6a: 19:5c:42:e8:0a:76:a4:0a:2f:ce:83:31:dc:52:3a: 32:e6:d0:38:ba:89:e5:26:c4:ae:3d:84:d0:7b:fe: d1:65:ee:48:bd:f2:de:71:64:c6:3f:14:0a:26:5a: d8:42:ad:43:86:59:db:1e:fc:86:1a:9d:2e:5d:1e: 46:1f:b9:b1:4c:9e:42:cf:96:4f:f1:e9:1b:ef:0c: 30:20:01:b2:c4:85:e6:e4:a1:9a:fa:c3:b9:74:6e: e8:ce:78:d3:15:7a:0e:b4:f2:50:f0:47:0f:a7:3f: dc:7d:16:7a:00:b2:f2:5c:9d:b3:9e:34:79:23:ab: 95:26:f7:b0:31:00:56:92:8f:a3:eb:2a:f4:bc:52: 27:5b:84:f1:7e:11:d5:71:42:ee:4d:90:fd:97:75: 38:10:97:84:a4:08:29:49:4d:84:61:9b:3d:31:6b: 74:56:6b:1d:ec:35:11:6c:35:02:f0:40:29:cd:da: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A3:91:9C:5F:05:FD:6A:1F:6E:19:53:CE:13:DA:5D:08:E4:B0:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b3105a7-ca24-3e42-badc-2aa11de975b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5d:aa:39:8f:69:77:5c:1d:e8:27:9b:24:5c:8a:30:a9:62: b5:4d:7e:ce:a7:5e:b0:cc:e8:1f:37:d5:d2:f3:f2:3e:a7:b0: f5:16:ba:07:9d:53:b4:b2:72:15:69:af:c5:53:3f:16:59:c4: 25:1f:99:b0:84:8d:ca:d5:95:b5:cc:de:81:89:5c:bb:e6:3f: be:64:ac:8b:a2:3b:2b:44:15:db:33:d3:7d:c6:a1:08:2c:42: 96:2e:10:cc:85:db:ef:3b:9c:53:4f:f8:85:87:f3:fb:19:15: ac:18:a6:31:fa:4d:50:f9:82:2c:33:49:15:6f:b6:a7:ef:cf: d8:51:ff:5e:a7:65:f7:4a:1c:57:c1:6e:af:d9:ca:d7:45:94: 78:c4:db:62:b1:78:98:c4:a5:f7:2a:f0:6b:d7:91:da:d3:fb: 8a:6b:a2:8d:b4:e9:5a:49:62:87:dd:da:1d:4a:c8:8f:a8:34: 51:7a:f5:81:74:4a:da:30:41:de:4c:c1:09:a5:22:a9:c8:c7: f9:d5:81:ce:30:cf:c1:06:e4:05:e2:73:69:6e:7f:7a:bc:3a: 39:ac:73:8f:e4:db:4e:cf:c3:21:95:37:bd:85:94:d2:5b:13: e4:49:2c:95:89:06:fb:a4:02:28:af:c4:01:31:86:87:34:e6: 1e:fe:0d:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ45zyhF3WjWkH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MjI0MWI2MDAtMmRmMi00YzI0LWJiNmQtNGYxZGM4ZjlkYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+fH+Y0gRVCap80ms4iwW3icnAqqCvlf4drd dIi5kYFGEs6NaHB0cqRr1FQnLtMis+6FSCnsBA09j4GAsaxKY/hTGL1GP/fpa2oZ XELoCnakCi/OgzHcUjoy5tA4uonlJsSuPYTQe/7RZe5IvfLecWTGPxQKJlrYQq1D hlnbHvyGGp0uXR5GH7mxTJ5Cz5ZP8ekb7wwwIAGyxIXm5KGa+sO5dG7oznjTFXoO tPJQ8EcPpz/cfRZ6ALLyXJ2znjR5I6uVJvewMQBWko+j6yr0vFInW4TxfhHVcULu TZD9l3U4EJeEpAgpSU2EYZs9MWt0Vmsd7DURbDUC8EApzdq2WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2jkZxfBf1qH24ZU84T2l0I5LDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmIzMTA1YTctY2EyNC0z ZTQyLWJhZGMtMmFhMTFkZTk3NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlXagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNdqjmPaXdcHegnmyRcijCpYrVNfs6nXrDM6B831dLz8j6nsPUWuged U7SychVpr8VTPxZZxCUfmbCEjcrVlbXM3oGJXLvmP75krIuiOytEFdsz033GoQgs QpYuEMyF2+87nFNP+IWH8/sZFawYpjH6TVD5giwzSRVvtqfvz9hR/16nZfdKHFfB bq/ZytdFlHjE22KxeJjEpfcq8GvXkdrT+4proo206VpJYofd2h1KyI+oNFF69YF0 StowQd5MwQmlIqnIx/nVgc4wz8EG5AXic2luf3q8Ojmsc4/k207PwyGVN72FlNJb E+RJLJWJBvukAiivxAExhoc05h7+DUA= -----END CERTIFICATE-----Generated at Tue Sep 22 19:03:25 2026 by rpki-client