$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/760342a0-96b5-39cf-9398-fd546cb52818.roa File: 760342a0-96b5-39cf-9398-fd546cb52818.roa (raw, json) Hash identifier: wdnt2YD93GSux+lFcmoCbchitDWAUuUfMcwemWCFys0= Subject key identifier: 4E:BA:B0:E7:E7:7B:B8:36:94:27:9D:6B:4A:AE:4D:28:00:10:04:0F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EF9E206DF36E2F07DF91511C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/760342a0-96b5-39cf-9398-fd546cb52818.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 54253 IP address blocks: 149.118.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:06:df:36:e2:f0:7d:f9:15:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=a1374244-6604-4bd6-86e3-9ed4b6c978f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:9f:3c:06:86:d9:d2:bc:0a:2f:17:9a:0b: 1f:07:41:d5:20:82:d1:ca:92:d5:e2:80:08:48:94: 7c:08:f4:80:1b:6f:c4:54:b1:25:e8:43:ef:3a:81: 4e:35:c5:3e:16:09:20:3a:55:76:c4:1e:03:ef:5e: 0b:0c:b0:ee:46:96:34:06:c1:9e:f1:39:e2:24:dd: a0:33:08:00:38:54:11:97:69:70:8b:90:3e:02:07: cd:29:fc:e3:15:c6:ac:73:27:e6:52:32:6a:20:94: a8:da:2f:01:a6:82:94:7a:65:a0:05:2b:d6:8e:c7: 9f:6d:6f:77:ce:8e:ef:8f:d2:5b:fa:d9:fd:f5:81: ac:6a:78:20:fc:1e:c8:ea:43:a2:78:62:de:9d:48: 11:1e:3c:1b:cd:1a:37:d8:c7:eb:70:b9:1c:11:b3: 41:25:6f:4b:58:df:d8:7d:31:de:94:d3:de:f3:ae: 05:3d:0a:e9:09:ab:45:16:88:e5:ba:72:eb:e1:00: 48:69:53:cf:c6:c1:bf:dd:89:1c:59:ab:1d:23:36: 7f:7f:06:f2:0e:5c:91:b4:30:59:bb:a0:2f:69:3c: 50:c4:0c:9f:0f:ad:64:ea:43:db:dc:ab:fb:c2:cc: 15:d5:5d:ce:28:33:d3:65:e0:a7:e1:f1:ac:38:95: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BA:B0:E7:E7:7B:B8:36:94:27:9D:6B:4A:AE:4D:28:00:10:04:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/760342a0-96b5-39cf-9398-fd546cb52818.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:03:17:5b:62:6b:68:82:01:46:0f:a2:46:9a:e6:8c:c8:ad: 08:a1:13:74:22:be:62:00:7a:42:fc:04:ba:06:6d:ef:8d:b3: ae:17:f9:b5:47:2f:95:4a:95:7e:48:c8:96:64:20:32:c9:ba: 12:59:e0:91:1d:ef:cc:0a:b4:3c:35:4a:b6:c1:ba:93:82:b0: 44:2c:58:43:5c:e7:6d:1f:c1:69:d0:02:16:0e:87:a2:f8:36: eb:5f:f1:9f:0c:fc:ca:33:c1:c7:be:e8:4b:39:44:be:da:73: 3f:b1:9e:f1:bf:d7:85:6a:89:00:64:07:a8:a2:89:31:90:59: d4:7b:36:cf:31:43:fd:28:6c:ac:b0:be:39:94:8f:68:e0:c8: 77:cc:2d:2b:4f:32:16:95:ca:79:78:bc:b4:0a:2e:a1:e8:83: 19:39:b0:9c:22:83:9c:4d:2d:83:18:e7:a1:f2:2c:dc:bd:26: 6d:55:5c:32:52:f4:12:7f:52:03:09:b2:63:92:a8:b9:92:bc: 7f:cf:fd:49:7b:af:05:cc:21:45:64:0d:d8:ee:58:0e:eb:33: 02:8d:83:73:a8:8e:e6:33:05:02:98:8e:be:07:e2:7b:ed:e4: 4e:9a:e5:7c:c2:30:b6:9e:ac:26:7a:65:7f:08:e6:35:68:27: df:ef:60:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754gbfNuLwffkVEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk YTEzNzQyNDQtNjYwNC00YmQ2LTg2ZTMtOWVkNGI2Yzk3OGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAefPAaG2dK8Ci8XmgsfB0HVIILRypLV4oAI SJR8CPSAG2/EVLEl6EPvOoFONcU+FgkgOlV2xB4D714LDLDuRpY0BsGe8TniJN2g MwgAOFQRl2lwi5A+AgfNKfzjFcascyfmUjJqIJSo2i8BpoKUemWgBSvWjsefbW93 zo7vj9Jb+tn99YGsangg/B7I6kOieGLenUgRHjwbzRo32MfrcLkcEbNBJW9LWN/Y fTHelNPe864FPQrpCatFFojlunLr4QBIaVPPxsG/3YkcWasdIzZ/fwbyDlyRtDBZ u6AvaTxQxAyfD61k6kPb3Kv7wswV1V3OKDPTZeCn4fGsOJXgIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE66sOfne7g2lCeda0quTSgAEAQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzYwMzQyYTAtOTZiNS0z OWNmLTkzOTgtZmQ1NDZjYjUyODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcDF1tia2iCAUYPokaa5ozIrQihE3QivmIAekL8BLoGbe+Ns64X+bVH L5VKlX5IyJZkIDLJuhJZ4JEd78wKtDw1SrbBupOCsEQsWENc520fwWnQAhYOh6L4 Nutf8Z8M/Mozwce+6Es5RL7acz+xnvG/14VqiQBkB6iiiTGQWdR7Ns8xQ/0obKyw vjmUj2jgyHfMLStPMhaVynl4vLQKLqHogxk5sJwig5xNLYMY56HyLNy9Jm1VXDJS 9BJ/UgMJsmOSqLmSvH/P/Ul7rwXMIUVkDdjuWA7rMwKNg3OojuYzBQKYjr4H4nvt 5E6a5XzCMLaerCZ6ZX8I5jVoJ9/vYIU= -----END CERTIFICATE-----Generated at Sat Sep 26 15:30:36 2026 by rpki-client