$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea47cf13-e59d-317b-8a4a-079dc506f9f7.roa File: ea47cf13-e59d-317b-8a4a-079dc506f9f7.roa (raw, json) Hash identifier: 6zdSDxKfLd1oLqfW3goyCaXv+VB64py4Xk7oyrN6KLk= Subject key identifier: 07:C3:3D:1E:39:75:6C:07:92:4A:50:B2:71:16:C2:0A:E1:DD:DB:79 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1467A968C4CD65F05A089C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea47cf13-e59d-317b-8a4a-079dc506f9f7.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 149.118.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a9:68:c4:cd:65:f0:5a:08:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=93680a58-22ac-43e5-8d37-cba3ccc1356b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ab:2e:1f:15:8e:2e:57:82:ae:8c:a6:4f:ee: 09:d4:49:4d:1a:eb:4b:fb:89:a4:58:e7:ce:27:7b: bd:e3:ce:c9:ec:61:cc:3f:f0:c8:47:bc:ff:33:bc: d6:87:72:b9:ab:7b:f9:ca:06:1f:2f:69:4b:07:9f: b3:0b:1b:8e:0a:54:96:59:da:8c:71:47:39:53:e8: f0:75:20:07:72:da:2f:5c:86:29:5a:68:2f:9d:c7: 35:43:38:1b:11:d9:77:85:d2:ec:aa:6d:64:50:b3: b2:1c:33:a3:1a:cc:69:62:b5:78:3a:fe:47:31:67: a2:72:2b:bd:12:35:c8:98:5b:aa:46:08:e4:88:2e: 41:c4:b7:b9:0e:fe:fd:87:6f:0b:44:61:cd:0d:f2: f5:87:05:f8:f8:d9:e4:61:30:c6:76:44:fd:9f:d6: c6:ea:74:e8:81:33:ed:3c:e6:9f:93:fc:d2:40:f3: 12:70:bb:c2:4d:d6:6a:d2:58:51:02:52:e3:dc:17: 2e:3a:4b:c8:e9:21:fd:a9:66:34:d6:37:4e:25:88: 17:69:ac:da:13:4f:1d:d8:fc:c5:69:75:53:26:9d: 7f:8c:e8:75:93:3c:dc:0a:dc:a5:8b:b6:4e:3f:00: ec:db:6a:7e:7a:36:77:65:99:8e:af:ac:cf:bc:7a: d4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C3:3D:1E:39:75:6C:07:92:4A:50:B2:71:16:C2:0A:E1:DD:DB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea47cf13-e59d-317b-8a4a-079dc506f9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:be:d4:2c:27:54:47:65:2c:fd:9f:f9:7e:80:f9:b1:a0:2b: 80:1b:c3:10:17:a2:d8:ea:19:36:fc:5b:c6:92:9c:da:69:f0: 71:71:1b:46:61:d2:a3:4b:d4:0e:0b:59:98:4a:bd:33:02:2c: 32:f5:7e:a9:99:45:12:11:f0:5f:86:60:47:a8:00:0d:e5:8f: b8:2e:a1:4d:73:97:d3:86:b7:06:87:fb:0a:ed:73:cf:fe:df: 3f:c7:ab:73:aa:57:4a:a3:ab:30:27:10:5b:7c:de:75:fd:0f: a0:fc:78:e7:a0:a3:74:92:c7:e9:b6:22:9c:76:fc:f5:47:5b: ab:91:f3:7d:dc:46:9e:33:73:ff:fd:cb:7e:95:1c:e0:b5:1f: 39:59:0a:b2:a9:7e:8d:67:94:cd:e6:ac:a5:66:99:a1:1c:73: 9a:30:93:87:87:37:bf:d2:bc:a0:36:52:1d:70:a8:2a:4c:9f: fe:e6:fd:fe:33:2a:30:d5:99:54:b5:b9:57:a3:e1:4f:14:b3: 2a:e0:b8:35:80:7e:c4:0d:d9:a8:38:4f:8e:e7:59:0f:cf:cc: be:1f:09:45:32:e2:15:c8:ed:40:38:69:33:df:40:20:f9:e4: 2b:c4:4a:9d:ba:a0:00:03:89:3a:ea:0b:bb:02:ec:02:74:be: e2:38:66:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6loxM1l8FoInIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk OTM2ODBhNTgtMjJhYy00M2U1LThkMzctY2JhM2NjYzEzNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkasuHxWOLleCroymT+4J1ElNGutL+4mkWOfO J3u9487J7GHMP/DIR7z/M7zWh3K5q3v5ygYfL2lLB5+zCxuOClSWWdqMcUc5U+jw dSAHctovXIYpWmgvncc1QzgbEdl3hdLsqm1kULOyHDOjGsxpYrV4Ov5HMWeiciu9 EjXImFuqRgjkiC5BxLe5Dv79h28LRGHNDfL1hwX4+NnkYTDGdkT9n9bG6nTogTPt POafk/zSQPMScLvCTdZq0lhRAlLj3BcuOkvI6SH9qWY01jdOJYgXaazaE08d2PzF aXVTJp1/jOh1kzzcCtyli7ZOPwDs22p+ejZ3ZZmOr6zPvHrUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfDPR45dWwHkkpQsnEWwgrh3dt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWE0N2NmMTMtZTU5ZC0z MTdiLThhNGEtMDc5ZGM1MDZmOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm+1CwnVEdlLP2f+X6A+bGgK4AbwxAXotjqGTb8W8aSnNpp8HFxG0Zh 0qNL1A4LWZhKvTMCLDL1fqmZRRIR8F+GYEeoAA3lj7guoU1zl9OGtwaH+wrtc8/+ 3z/Hq3OqV0qjqzAnEFt83nX9D6D8eOego3SSx+m2Ipx2/PVHW6uR833cRp4zc//9 y36VHOC1HzlZCrKpfo1nlM3mrKVmmaEcc5owk4eHN7/SvKA2Uh1wqCpMn/7m/f4z KjDVmVS1uVej4U8UsyrguDWAfsQN2ag4T47nWQ/PzL4fCUUy4hXI7UA4aTPfQCD5 5CvESp26oAADiTrqC7sC7AJ0vuI4Zik= -----END CERTIFICATE-----Generated at Sun Sep 20 23:14:45 2026 by rpki-client