$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5a0bc9d-19ed-3ebf-a83a-6a8b2511b8d7.roa File: d5a0bc9d-19ed-3ebf-a83a-6a8b2511b8d7.roa (raw, json) Hash identifier: m+mfHSeXNk1HA01J6SduNJj8mlgP6qyf0NoTcHHPBnM= Subject key identifier: 49:BD:54:5A:60:B2:CB:66:7F:95:5D:03:63:CF:E3:2F:3E:76:DE:86 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E147ED34E3AF1815B66D11790 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5a0bc9d-19ed-3ebf-a83a-6a8b2511b8d7.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 31898 IP address blocks: 148.116.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:d3:4e:3a:f1:81:5b:66:d1:17:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=481a1b42-f7e6-4484-9a01-403e5f7e8fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:02:da:05:f3:a2:47:6e:be:83:66:05:10:71: e5:bc:8b:6f:be:1f:0e:a4:59:a8:01:83:18:d7:04: 3d:ae:b8:00:bb:52:e7:77:40:5c:6a:b2:07:a0:de: 0d:f6:b4:27:2e:d5:7d:f2:ee:a8:32:5a:dc:f5:64: 16:c2:1d:a6:88:61:72:9e:1d:dc:c0:70:8a:57:76: 16:c6:c2:0a:09:6e:3e:c2:b5:7a:45:c0:10:24:dd: 0b:14:7e:b5:9d:99:ba:7f:cf:cd:75:cc:df:72:ba: a3:c0:48:67:04:23:e6:ab:70:77:d5:88:d5:bb:b4: b0:72:5c:b4:56:e1:59:bd:8f:5b:91:15:e4:79:c2: 6c:68:de:3b:f1:d6:43:bf:11:ba:df:a8:b4:4d:1f: 82:70:2f:db:7b:a7:f2:b2:81:38:d3:03:8c:e4:52: 7f:91:6e:69:af:35:d4:e4:26:e9:8b:10:bc:c6:0f: 73:31:4e:06:90:3c:ba:d8:e4:ed:55:11:ed:c9:38: b0:60:86:5e:ab:f0:b1:23:cb:cf:05:bb:ee:da:74: 7d:df:8e:55:81:0f:06:ad:04:96:4c:fe:b7:e3:fc: c3:f1:72:53:f5:b7:35:d7:c6:a5:70:20:9d:e9:c5: 40:a5:2a:fa:1a:78:6a:79:39:13:12:d1:1d:38:e6: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BD:54:5A:60:B2:CB:66:7F:95:5D:03:63:CF:E3:2F:3E:76:DE:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5a0bc9d-19ed-3ebf-a83a-6a8b2511b8d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 148.116.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:63:6d:a3:78:1f:25:b5:58:64:18:70:0b:e3:ac:8a:de:52: 8a:10:f1:70:a3:3e:e0:dd:31:ab:96:cf:1c:52:8d:51:f9:9a: 43:ff:30:04:65:cc:69:08:80:e2:f6:57:74:e5:70:e1:00:2a: 80:0f:08:db:f2:25:63:ea:30:30:64:33:95:7e:c7:8a:38:23: 70:29:de:2a:7e:9e:03:53:9b:cc:54:c6:6f:51:fb:3d:76:50: 47:4d:b0:99:59:b6:f3:07:d1:23:a0:9d:c9:6a:09:d2:51:d1: 44:f1:4c:6a:f2:ba:78:14:4e:a1:85:9d:9f:e0:25:bc:0e:04: ce:b4:b5:62:ab:7b:10:b1:b4:1d:a4:ad:ee:19:6b:8a:46:6b: 23:bd:f1:66:52:35:16:22:e6:78:2f:36:7c:7c:ef:94:15:74: 02:b4:06:d8:18:6d:3a:19:b7:fa:57:84:50:0c:a3:b2:f0:bb: 8f:92:69:89:6d:d7:dd:3b:8c:e3:3b:dd:9e:4a:91:43:1d:27: 11:1e:f3:17:3a:fe:c6:bc:cd:70:41:31:2b:4a:44:32:88:78: fe:0d:65:bd:fc:00:91:a5:5b:50:6e:41:2b:2f:30:87:13:d0: f6:79:1f:75:32:32:65:fd:28:32:52:71:1b:df:02:bf:8a:0d: ce:e3:f0:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftNOOvGBW2bRF5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk NDgxYTFiNDItZjdlNi00NDg0LTlhMDEtNDAzZTVmN2U4ZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gLaBfOiR26+g2YFEHHlvItvvh8OpFmoAYMY 1wQ9rrgAu1Lnd0BcarIHoN4N9rQnLtV98u6oMlrc9WQWwh2miGFynh3cwHCKV3YW xsIKCW4+wrV6RcAQJN0LFH61nZm6f8/NdczfcrqjwEhnBCPmq3B31YjVu7Swcly0 VuFZvY9bkRXkecJsaN478dZDvxG636i0TR+CcC/be6fysoE40wOM5FJ/kW5przXU 5CbpixC8xg9zMU4GkDy62OTtVRHtyTiwYIZeq/CxI8vPBbvu2nR9345VgQ8GrQSW TP634/zD8XJT9bc118alcCCd6cVApSr6GnhqeTkTEtEdOOZ66wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm9VFpgsstmf5VdA2PP4y8+dt6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDVhMGJjOWQtMTllZC0z ZWJmLWE4M2EtNmE4YjI1MTFiOGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlHR2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhjbaN4HyW1WGQYcAvjrIreUooQ8XCjPuDdMauWzxxSjVH5mkP/MARl zGkIgOL2V3TlcOEAKoAPCNvyJWPqMDBkM5V+x4o4I3Ap3ip+ngNTm8xUxm9R+z12 UEdNsJlZtvMH0SOgnclqCdJR0UTxTGryungUTqGFnZ/gJbwOBM60tWKrexCxtB2k re4Za4pGayO98WZSNRYi5ngvNnx875QVdAK0BtgYbToZt/pXhFAMo7Lwu4+SaYlt 1907jOM73Z5KkUMdJxEe8xc6/sa8zXBBMStKRDKIeP4NZb38AJGlW1BuQSsvMIcT 0PZ5H3UyMmX9KDJScRvfAr+KDc7j8Hc= -----END CERTIFICATE-----Generated at Sat Jun 13 13:50:17 2026 by rpki-client