$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74cd78b5-7282-34f1-b87a-36ced3aa68ca.roa File: 74cd78b5-7282-34f1-b87a-36ced3aa68ca.roa (raw, json) Hash identifier: ypyNo3wahBUM8Hab/SXBYQjOWUAK38jtUdO+6KAhJ6U= Subject key identifier: 50:08:4C:13:06:86:17:F8:90:78:8B:96:74:46:A6:07:0B:E3:4C:18 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A14E77D001042303A7F180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74cd78b5-7282-34f1-b87a-36ced3aa68ca.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 147.154.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:4e:77:d0:01:04:23:03:a7:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f9aa4559-2fc7-4a9c-8f71-58cd79e1806b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:99:55:16:3d:03:61:31:66:22:93:85:ef: 45:d7:eb:79:fe:19:7f:02:30:d1:17:f1:af:25:85: 76:6a:29:ae:a0:0d:bb:ef:25:5c:31:20:13:44:b7: 56:81:35:0d:49:0f:7d:16:f5:ce:ac:f1:9d:bb:c6: d3:0c:14:03:d9:57:7d:76:0f:ba:9f:96:5c:3a:eb: 31:2c:fc:44:07:5c:42:ec:3b:ed:14:04:41:42:d3: 71:c3:ab:bf:3f:1b:71:8e:77:60:d7:f4:1c:e6:2e: e2:77:28:47:eb:e9:95:b8:38:0e:46:12:ac:ab:9b: 2a:44:81:29:a4:95:82:91:0d:69:87:ee:88:72:81: 75:de:d8:be:bc:4a:13:10:a2:17:bc:e4:f6:db:ec: 66:55:34:6a:2c:b9:ee:93:04:fa:93:3b:05:7a:9b: bd:0a:f2:c6:98:00:94:af:36:3a:c7:b0:97:b0:36: fc:65:40:ed:7e:c0:17:48:0d:d4:cc:be:d6:95:dc: 97:8d:2a:34:82:ea:79:f0:48:12:91:3e:95:7e:68: 40:d9:66:8c:22:61:54:5b:31:19:ac:24:1e:8a:d7: 69:5d:5f:fc:78:90:03:05:b3:b3:72:58:de:5d:a0: 62:4b:7d:ad:70:62:15:11:14:7a:3c:d1:8c:a5:af: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:08:4C:13:06:86:17:F8:90:78:8B:96:74:46:A6:07:0B:E3:4C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74cd78b5-7282-34f1-b87a-36ced3aa68ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:20:21:77:93:02:19:65:2d:fe:20:37:fd:68:71:a7:d7:b9: 4c:f9:b5:8e:97:84:af:60:22:80:3e:32:98:4c:0b:d7:46:a3: 78:22:76:04:f2:53:36:04:dc:32:a8:d0:b8:d6:1b:b5:2c:dc: e9:3e:fa:2a:5d:df:67:f1:fe:6b:3c:6f:d9:f9:05:a3:da:03: d3:18:1b:8a:86:25:a6:b4:a0:6a:ca:65:ff:35:06:a1:ae:35: 25:20:8a:dd:30:c0:fd:99:78:8f:cc:98:87:bb:cd:7d:e8:e0: f6:8e:f0:ea:62:be:06:47:96:d7:51:66:64:bc:ab:c6:51:45: 0c:c7:73:47:ff:58:2e:f5:31:ce:a6:73:d3:ea:0d:44:f5:cd: 28:52:27:4b:53:98:ab:4d:09:b6:9d:16:ff:13:60:c1:d6:a3: 1b:00:ac:52:6f:2f:56:28:32:ea:b7:37:d9:d7:8a:8a:ed:39: 7b:35:68:4b:e9:59:23:02:9a:51:15:72:cd:54:7c:5a:d3:a6: 3e:5f:36:05:1a:b8:ab:1e:d2:2c:67:26:a1:49:0c:e0:00:7e: 94:53:d2:65:5b:20:8b:04:9d:ec:95:ba:91:ce:49:40:47:94: 09:f6:85:9e:a6:dd:93:46:a9:36:cf:e5:9e:c3:2f:a6:bb:2f: 56:c9:dc:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoU530AEEIwOn8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjlhYTQ1NTktMmZjNy00YTljLThmNzEtNThjZDc5ZTE4MDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSyZVRY9A2ExZiKThe9F1+t5/hl/AjDRF/Gv JYV2aimuoA277yVcMSATRLdWgTUNSQ99FvXOrPGdu8bTDBQD2Vd9dg+6n5ZcOusx LPxEB1xC7DvtFARBQtNxw6u/Pxtxjndg1/Qc5i7idyhH6+mVuDgORhKsq5sqRIEp pJWCkQ1ph+6IcoF13ti+vEoTEKIXvOT22+xmVTRqLLnukwT6kzsFepu9CvLGmACU rzY6x7CXsDb8ZUDtfsAXSA3UzL7WldyXjSo0gup58EgSkT6VfmhA2WaMImFUWzEZ rCQeitdpXV/8eJADBbOzcljeXaBiS32tcGIVERR6PNGMpa8QuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAITBMGhhf4kHiLlnRGpgcL40wYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzRjZDc4YjUtNzI4Mi0z NGYxLWI4N2EtMzZjZWQzYWE2OGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk5rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0gIXeTAhllLf4gN/1ocafXuUz5tY6XhK9gIoA+MphMC9dGo3gidgTy UzYE3DKo0LjWG7Us3Ok++ipd32fx/ms8b9n5BaPaA9MYG4qGJaa0oGrKZf81BqGu NSUgit0wwP2ZeI/MmIe7zX3o4PaO8OpivgZHltdRZmS8q8ZRRQzHc0f/WC71Mc6m c9PqDUT1zShSJ0tTmKtNCbadFv8TYMHWoxsArFJvL1YoMuq3N9nXiortOXs1aEvp WSMCmlEVcs1UfFrTpj5fNgUauKse0ixnJqFJDOAAfpRT0mVbIIsEneyVupHOSUBH lAn2hZ6m3ZNGqTbP5Z7DL6a7L1bJ3B0= -----END CERTIFICATE-----Generated at Thu Sep 24 04:31:29 2026 by rpki-client