$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/888dd582-7832-36d3-a68b-f620a335149f.roa File: 888dd582-7832-36d3-a68b-f620a335149f.roa (raw, json) Hash identifier: Q6N95rQx0sA10Ed4kvkI7dFhZuN0Nd4tKbu6w4e2Oyc= Subject key identifier: E9:3C:0E:F0:C2:C8:0E:00:2D:54:5F:51:37:77:2D:CD:C0:C8:22:D5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E0792D96222ECD2F868228740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/888dd582-7832-36d3-a68b-f620a335149f.roa Signing time: Mon 01 Jun 2026 17:55:03 +0000 ROA not before: Mon 01 Jun 2026 17:55:03 +0000 ROA not after: Sun 30 Aug 2026 17:55:03 +0000 asID: 31898 IP address blocks: 149.118.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:92:d9:62:22:ec:d2:f8:68:22:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jun 1 17:55:03 2026 GMT Not After : Aug 30 17:55:03 2026 GMT Subject: CN=e55610d8-11cd-4db7-85a1-733339e4a872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:65:75:bb:05:3b:ca:8d:1f:c0:45:94:1f:34: bc:fc:13:b5:fd:e4:d7:c2:f2:81:f9:4c:dc:e0:50: 93:eb:46:62:e1:c9:b8:30:52:a2:31:b7:73:10:83: c0:e2:26:71:1e:1f:fe:c4:e2:0e:c2:c4:87:14:85: ce:83:10:4c:32:2b:8f:a8:b0:2c:61:2f:df:5d:50: a2:e8:2a:1c:56:a9:8c:be:3f:c2:ac:98:72:85:ae: ef:3f:41:b3:3b:cd:23:d2:c1:59:a7:15:af:73:27: b0:c8:63:ce:a4:c9:38:ee:95:f8:1a:19:81:00:4d: cb:01:00:02:1d:d2:d5:fc:3f:cb:ee:d9:d4:0c:71: 73:68:34:4c:b1:8b:50:74:17:35:3b:90:54:d8:c2: c8:b8:26:d9:44:46:f3:92:99:fd:02:85:64:38:d3: b2:b7:76:cc:45:42:24:f8:ef:3d:c2:20:50:43:cd: 91:94:fd:48:48:0e:f9:7e:ba:19:d2:d4:9b:ad:cc: 91:5d:02:80:a0:d8:96:3f:84:f1:f4:a3:d2:42:88: 82:48:f4:60:c1:19:ff:b3:08:46:35:25:70:c7:93: 34:08:e1:93:d0:b4:3c:2f:79:cb:52:8f:41:81:bc: 68:61:03:b5:c0:35:bb:da:51:6f:4b:ed:de:df:d9: d1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3C:0E:F0:C2:C8:0E:00:2D:54:5F:51:37:77:2D:CD:C0:C8:22:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/888dd582-7832-36d3-a68b-f620a335149f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4e:99:f2:08:b5:05:5d:92:a5:0b:97:ab:01:96:35:05:b2: 7d:67:e5:87:da:d7:7b:98:0f:28:e2:7e:e9:6c:5d:72:17:78: 55:ed:b8:1d:3e:c6:d2:a3:47:0a:7d:c5:b7:70:4d:96:f8:85: c4:c4:2c:9e:06:26:a9:c9:e6:b7:e8:18:73:43:3d:47:2f:3d: 7b:ed:63:1f:fa:55:5d:eb:c1:de:7e:91:d1:7f:81:ec:87:72: f1:74:51:51:e1:84:33:36:a6:f3:44:84:81:03:54:1a:fd:58: 1e:9d:1c:8c:01:4a:d5:4c:04:4f:43:c9:d8:07:f4:75:45:0f: 88:14:f7:cc:b4:de:06:37:ec:d5:57:0c:9a:c8:ad:e1:ee:2a: 62:96:00:9b:fa:e9:34:ef:6a:20:8c:6d:a1:df:35:b7:5d:77: 99:9f:f8:73:4f:29:8d:a0:02:74:12:fd:44:16:b0:5b:eb:fe: 2f:b8:d8:7c:c2:43:da:f5:e7:38:41:12:08:14:dc:73:81:69: e3:fc:3c:c9:ed:a0:fe:f6:91:ef:fb:bc:b9:37:7c:6d:8d:49: af:ca:b3:d3:d1:60:7c:60:20:90:fb:b3:cf:2f:e8:9d:4b:c6: fd:7b:1d:db:42:f2:ac:00:3a:4c:4a:70:b2:79:20:4e:9d:06: 73:d6:f4:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HktliIuzS+Ggih0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDYwMTE3NTUwM1oXDTI2MDgzMDE3NTUwM1owLzEtMCsGA1UEAxMk ZTU1NjEwZDgtMTFjZC00ZGI3LTg1YTEtNzMzMzM5ZTRhODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmV1uwU7yo0fwEWUHzS8/BO1/eTXwvKB+Uzc 4FCT60Zi4cm4MFKiMbdzEIPA4iZxHh/+xOIOwsSHFIXOgxBMMiuPqLAsYS/fXVCi 6CocVqmMvj/CrJhyha7vP0GzO80j0sFZpxWvcyewyGPOpMk47pX4GhmBAE3LAQAC HdLV/D/L7tnUDHFzaDRMsYtQdBc1O5BU2MLIuCbZREbzkpn9AoVkONOyt3bMRUIk +O89wiBQQ82RlP1ISA75froZ0tSbrcyRXQKAoNiWP4Tx9KPSQoiCSPRgwRn/swhG NSVwx5M0COGT0LQ8L3nLUo9BgbxoYQO1wDW72lFvS+3e39nRmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk8DvDCyA4ALVRfUTd3Lc3AyCLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODg4ZGQ1ODItNzgzMi0z NmQzLWE2OGItZjYyMGEzMzUxNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlXYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFOmfIItQVdkqULl6sBljUFsn1n5Yfa13uYDyjifulsXXIXeFXtuB0+ xtKjRwp9xbdwTZb4hcTELJ4GJqnJ5rfoGHNDPUcvPXvtYx/6VV3rwd5+kdF/geyH cvF0UVHhhDM2pvNEhIEDVBr9WB6dHIwBStVMBE9DydgH9HVFD4gU98y03gY37NVX DJrIreHuKmKWAJv66TTvaiCMbaHfNbddd5mf+HNPKY2gAnQS/UQWsFvr/i+42HzC Q9r15zhBEggU3HOBaeP8PMntoP72ke/7vLk3fG2NSa/Ks9PRYHxgIJD7s88v6J1L xv17HdtC8qwAOkxKcLJ5IE6dBnPW9Bg= -----END CERTIFICATE-----Generated at Sat Jun 13 22:51:20 2026 by rpki-client