$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c32622f4-8fb9-3fb4-a8cd-8e2afcf2aed8.roa File: c32622f4-8fb9-3fb4-a8cd-8e2afcf2aed8.roa (raw, json) Hash identifier: guq4D9yHDKqDw008sermepBqOmsdc+Me8ZrV9nqGDCs= Subject key identifier: D1:B4:E9:F7:44:A8:A5:65:B9:51:92:CE:C2:FE:FD:2E:D3:20:63:DC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DE2B5F00B2A31E3B1787D3B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c32622f4-8fb9-3fb4-a8cd-8e2afcf2aed8.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 31898 IP address blocks: 148.116.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:f0:0b:2a:31:e3:b1:78:7d:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=1be7f537-d18d-4de6-b25a-75c1f8d9ed0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c1:96:73:e8:3b:6b:7f:15:d7:21:52:55:10: ae:31:d0:c9:2f:3e:72:bd:40:83:49:36:a8:0c:9a: d0:0f:30:10:4a:9b:e8:f4:f8:5d:dd:ca:3e:3a:f4: 82:eb:6e:26:bd:a4:f8:83:96:ae:45:74:f2:de:da: 74:ee:6e:d1:06:5b:3a:97:7a:40:d7:c8:6e:f5:f3: 7e:3f:1e:7e:73:90:ef:75:96:ef:c5:f2:f1:96:da: 1d:72:65:61:09:a8:01:8c:ae:27:2c:6f:ac:a9:32: b4:63:fe:dd:66:38:a8:ae:b8:5c:5c:6a:35:e6:09: ff:e7:74:fc:b8:a2:0d:57:c5:7d:c8:a8:47:8a:cf: f8:86:f8:f2:b4:12:53:c1:b6:75:84:26:2f:44:ce: e7:b2:fb:64:28:13:a4:1f:2a:ec:98:ff:2c:73:c8: 42:63:d9:46:ce:65:be:27:37:37:30:60:42:29:45: 55:70:d4:03:f3:81:0c:d1:ca:a0:27:b3:11:23:19: 65:92:b7:80:2f:e3:40:6f:6f:06:21:90:91:0e:6d: 9b:7c:5d:5a:c7:ed:47:a3:7a:92:e8:5c:2e:fd:92: 4a:46:b2:25:9e:09:36:67:0c:53:8b:ae:5d:1d:fe: a3:57:25:a6:8b:9e:bc:08:5f:e0:42:77:5f:68:33: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B4:E9:F7:44:A8:A5:65:B9:51:92:CE:C2:FE:FD:2E:D3:20:63:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c32622f4-8fb9-3fb4-a8cd-8e2afcf2aed8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 148.116.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ae:ae:b4:f9:44:1b:eb:c2:c0:da:66:0b:ec:c9:21:7b:27: b4:69:67:e3:74:a9:5c:66:10:f3:a1:4c:f4:09:84:a0:f0:51: ed:25:7a:72:e8:33:11:1a:f5:c0:44:14:59:f2:b1:12:8f:d0: 62:bd:87:bb:d9:db:58:85:d2:e3:a3:97:cd:e9:e5:9d:63:97: c2:a8:36:69:a2:70:c6:1a:e4:3d:10:8b:4f:0b:1c:28:22:57: e0:50:ab:ac:fa:f4:a8:14:1e:8c:0b:23:b4:3a:79:4e:63:7a: d5:30:dd:ab:8c:b6:38:13:fc:50:77:29:14:7e:64:38:41:94: 39:81:ba:a0:fc:9d:95:5b:1f:08:a2:6a:07:c1:c3:27:60:8e: a8:ce:70:93:39:86:69:8e:93:70:54:d9:25:0f:bc:48:f9:46: db:2e:a7:27:2f:5e:10:dd:31:26:01:7f:37:61:65:a9:8b:bf: c6:23:3c:b7:5f:3c:d0:87:8d:71:de:74:70:ca:b5:a3:22:57: 2d:a9:ce:f7:77:f2:28:6f:c0:11:dc:23:d1:7c:30:ce:2f:21: 08:39:b0:56:aa:1d:aa:e0:cb:aa:01:55:a9:97:78:b6:b3:0d: 16:91:19:b3:d7:25:5e:dc:73:c8:09:11:d6:92:5d:af:0a:14: 9d:46:3e:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itfALKjHjsXh9O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MWJlN2Y1MzctZDE4ZC00ZGU2LWIyNWEtNzVjMWY4ZDllZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8GWc+g7a38V1yFSVRCuMdDJLz5yvUCDSTao DJrQDzAQSpvo9Phd3co+OvSC624mvaT4g5auRXTy3tp07m7RBls6l3pA18hu9fN+ Px5+c5DvdZbvxfLxltodcmVhCagBjK4nLG+sqTK0Y/7dZjiorrhcXGo15gn/53T8 uKINV8V9yKhHis/4hvjytBJTwbZ1hCYvRM7nsvtkKBOkHyrsmP8sc8hCY9lGzmW+ Jzc3MGBCKUVVcNQD84EM0cqgJ7MRIxllkreAL+NAb28GIZCRDm2bfF1ax+1Ho3qS 6Fwu/ZJKRrIlngk2ZwxTi65dHf6jVyWmi568CF/gQndfaDPPIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG06fdEqKVluVGSzsL+/S7TIGPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzMyNjIyZjQtOGZiOS0z ZmI0LWE4Y2QtOGUyYWZjZjJhZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlHRjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWurrT5RBvrwsDaZgvsySF7J7RpZ+N0qVxmEPOhTPQJhKDwUe0lenLo MxEa9cBEFFnysRKP0GK9h7vZ21iF0uOjl83p5Z1jl8KoNmmicMYa5D0Qi08LHCgi V+BQq6z69KgUHowLI7Q6eU5jetUw3auMtjgT/FB3KRR+ZDhBlDmBuqD8nZVbHwii agfBwydgjqjOcJM5hmmOk3BU2SUPvEj5RtsupycvXhDdMSYBfzdhZamLv8YjPLdf PNCHjXHedHDKtaMiVy2pzvd38ihvwBHcI9F8MM4vIQg5sFaqHargy6oBVamXeLaz DRaRGbPXJV7cc8gJEdaSXa8KFJ1GPqo= -----END CERTIFICATE-----Generated at Sat Jun 13 14:26:28 2026 by rpki-client