$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b106529-125c-3344-a133-c20a51d4bb0b.roa File: 4b106529-125c-3344-a133-c20a51d4bb0b.roa (raw, json) Hash identifier: /xtwkazsG6zhLCNF/lJZ8SogmovROORETaPbMPpwowI= Subject key identifier: 99:19:90:19:04:F1:8E:D4:A1:05:81:37:20:7E:5F:24:B7:40:C2:7A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E078F2ECBF675D2E6C1A3E200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b106529-125c-3344-a133-c20a51d4bb0b.roa Signing time: Mon 01 Jun 2026 17:47:40 +0000 ROA not before: Mon 01 Jun 2026 17:47:40 +0000 ROA not after: Sun 30 Aug 2026 17:47:40 +0000 asID: 31898 IP address blocks: 148.116.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:8f:2e:cb:f6:75:d2:e6:c1:a3:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jun 1 17:47:40 2026 GMT Not After : Aug 30 17:47:40 2026 GMT Subject: CN=be558459-dc51-43de-bce1-6ea2dae21f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:66:e0:95:32:b1:09:a5:34:a9:5b:8b:e8: 8a:2a:ce:69:4a:06:a9:41:bc:4b:63:34:c8:ca:8d: aa:02:98:4d:69:1f:78:91:43:9d:4f:4c:32:70:9c: d6:04:39:4a:f3:29:32:aa:e2:56:90:23:b1:ef:99: bb:75:4b:c7:8c:5b:ea:29:86:0d:5c:1c:9f:7f:5f: 55:07:b4:d6:cb:f6:07:d3:ea:cd:96:34:14:8a:f4: b6:d9:2e:b4:fc:3c:b1:7c:c7:08:dd:ac:98:86:d4: 44:f8:65:aa:82:1e:5c:c6:b5:ec:d9:74:7d:e1:f7: 39:c1:fc:d1:3f:1a:aa:58:45:f5:c3:de:98:b4:35: de:04:f5:0b:c4:ad:93:96:9f:a6:51:fa:64:6d:36: 50:b4:3a:f3:04:c9:e6:a1:db:4a:c2:29:9f:f3:dc: 3b:bb:83:ea:7b:c6:bd:0e:7a:25:1f:ab:48:db:2c: 29:be:62:2b:38:55:3a:b2:e9:cb:0e:9d:10:7b:e8: 8b:1c:97:22:4b:da:ad:3d:54:29:87:2b:9c:02:5a: 10:55:64:fa:c5:47:40:e0:68:08:12:57:af:f7:c8: e1:91:ba:0b:17:95:0b:af:ff:c5:1b:b0:b5:fc:8d: fe:d2:53:ce:e6:3e:c6:b9:68:13:03:0a:20:f4:e6: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:19:90:19:04:F1:8E:D4:A1:05:81:37:20:7E:5F:24:B7:40:C2:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b106529-125c-3344-a133-c20a51d4bb0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 148.116.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b8:c7:91:48:ef:e4:b7:30:40:9e:1a:ce:25:2d:0f:67:47: 47:50:05:95:f5:7a:9f:03:bc:76:59:86:9f:e3:db:4e:f1:2b: ba:b3:48:3e:ac:a3:fc:71:29:78:fb:98:ac:59:8f:15:26:bd: 96:6e:4a:4a:8a:fb:a4:c9:6c:8a:25:22:ef:47:ca:96:07:fc: 69:89:6c:be:11:15:59:86:b9:82:be:9d:69:d9:0f:ba:81:a0: 93:8d:39:b3:39:1e:44:ac:b7:ec:fb:96:c6:8c:8c:65:0f:5c: db:d2:c2:c1:71:19:35:08:36:9c:49:62:d5:0b:62:b1:2e:2a: 60:17:a3:e4:88:eb:5a:4a:2a:71:c6:d1:c6:06:ce:01:4c:77: df:82:3c:19:66:bd:bb:14:e6:d9:5c:3b:ea:5d:9a:a4:f9:d0: c3:d6:f2:6d:09:85:c1:eb:49:cc:c8:fb:ac:7a:cb:15:41:72: c8:17:cd:5d:e7:40:70:80:5c:0e:1a:95:68:55:e2:48:f9:71: 37:d7:c8:ab:0b:9a:c5:ae:ce:6c:8d:78:b2:b5:15:97:c0:d6: a2:af:52:d4:18:bc:82:e1:e1:72:72:f0:a6:1a:d4:f4:c2:69: 21:42:98:de:07:0e:d0:a2:43:61:c7:fc:f6:d3:63:28:97:4d: b3:8b:0b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Hjy7L9nXS5sGj4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDYwMTE3NDc0MFoXDTI2MDgzMDE3NDc0MFowLzEtMCsGA1UEAxMk YmU1NTg0NTktZGM1MS00M2RlLWJjZTEtNmVhMmRhZTIxZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW1m4JUysQmlNKlbi+iKKs5pSgapQbxLYzTI yo2qAphNaR94kUOdT0wycJzWBDlK8ykyquJWkCOx75m7dUvHjFvqKYYNXByff19V B7TWy/YH0+rNljQUivS22S60/DyxfMcI3ayYhtRE+GWqgh5cxrXs2XR94fc5wfzR PxqqWEX1w96YtDXeBPULxK2Tlp+mUfpkbTZQtDrzBMnmodtKwimf89w7u4Pqe8a9 DnolH6tI2ywpvmIrOFU6sunLDp0Qe+iLHJciS9qtPVQphyucAloQVWT6xUdA4GgI Elev98jhkboLF5ULr//FG7C1/I3+0lPO5j7GuWgTAwog9Ob+nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkZkBkE8Y7UoQWBNyB+XyS3QMJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGIxMDY1MjktMTI1Yy0z MzQ0LWExMzMtYzIwYTUxZDRiYjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlHQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG4x5FI7+S3MECeGs4lLQ9nR0dQBZX1ep8DvHZZhp/j207xK7qzSD6s o/xxKXj7mKxZjxUmvZZuSkqK+6TJbIolIu9HypYH/GmJbL4RFVmGuYK+nWnZD7qB oJONObM5HkSst+z7lsaMjGUPXNvSwsFxGTUINpxJYtULYrEuKmAXo+SI61pKKnHG 0cYGzgFMd9+CPBlmvbsU5tlcO+pdmqT50MPW8m0JhcHrSczI+6x6yxVBcsgXzV3n QHCAXA4alWhV4kj5cTfXyKsLmsWuzmyNeLK1FZfA1qKvUtQYvILh4XJy8KYa1PTC aSFCmN4HDtCiQ2HH/PbTYyiXTbOLC3M= -----END CERTIFICATE-----Generated at Sat Jun 13 19:03:07 2026 by rpki-client