$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f130f72e-eb0f-3c6f-b906-9fb05a1b38b4.roa File: f130f72e-eb0f-3c6f-b906-9fb05a1b38b4.roa (raw, json) Hash identifier: 3bpPzXjKIhISTjwDiAafqRvPRCOzLagOdGfLSsZFHFo= Subject key identifier: 71:76:33:2F:7E:21:61:06:BD:5F:42:2A:1D:A6:5E:26:DB:1A:87:FB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F14679D0096F7C2EE20D36740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f130f72e-eb0f-3c6f-b906-9fb05a1b38b4.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 149.118.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9d:00:96:f7:c2:ee:20:d3:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=4eb91de9-7bab-437f-aec1-2c5c86ce2e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:05:f6:6a:a1:f0:fd:e6:8d:34:03:2e:a7: be:da:45:79:e7:77:41:ec:4f:c5:ef:ac:78:b3:e6: 92:8c:5a:9a:4f:68:94:9b:cb:9a:85:74:86:72:cb: 35:de:b3:8e:1e:5f:31:5b:91:59:60:fe:de:d6:44: 95:e5:61:37:b2:38:4d:64:89:ab:0a:08:33:b2:14: 9c:01:f3:58:7a:6b:f6:d0:18:36:ed:1c:5d:1b:35: d7:7e:21:f7:eb:ee:28:a1:4b:62:c5:94:92:4b:07: e9:24:d0:18:6a:7a:81:97:a4:a4:5d:0f:8c:e5:7f: 3f:48:85:46:ba:6b:8f:84:20:fb:fc:ad:13:2b:5b: 9e:c3:89:38:6f:34:d6:75:84:44:68:c9:42:35:70: db:e6:6c:dc:ba:a3:37:4f:19:df:0b:3c:46:0c:be: 3e:fc:b5:b8:42:2c:47:50:b2:67:80:f4:d6:f8:d5: ac:02:f2:b3:0f:cb:50:f8:9b:ba:2a:a6:06:7d:a9: 2f:b7:21:d7:c0:82:b8:cb:08:05:16:d4:c9:2e:ac: 68:95:83:0d:ef:66:f3:32:34:71:c2:96:8b:c3:d6: f0:ee:19:c8:d8:c9:8c:25:64:42:7b:4f:db:a2:f1: bf:97:b5:5d:cd:f0:a7:01:77:3a:e1:03:c5:e3:eb: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:76:33:2F:7E:21:61:06:BD:5F:42:2A:1D:A6:5E:26:DB:1A:87:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f130f72e-eb0f-3c6f-b906-9fb05a1b38b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:21:ab:ca:b1:62:86:3a:38:c6:e1:19:32:54:7a:a5:71:51: 49:ec:4b:81:d6:6f:55:c9:b4:01:16:b9:b1:09:5b:bf:2c:70: 85:7f:a9:00:bb:54:d5:ea:6a:82:c1:d5:7f:ba:0c:39:fb:d5: c3:19:a3:7d:24:94:6c:fa:44:4a:9b:ae:46:94:4e:38:0c:a6: 42:39:7d:06:96:35:7c:0b:10:1e:f0:0d:2a:86:9a:5f:2b:b8: b7:fe:32:ce:1c:be:9a:51:3d:ec:ff:b1:3f:c5:bd:8d:35:a1: 71:2c:37:c9:7c:34:86:68:4c:dc:1e:89:a5:b0:ed:da:af:94: e3:91:b0:f5:a6:f5:97:40:8e:4c:18:3f:09:f6:6b:e8:30:63: 68:46:af:b3:9d:f6:51:61:26:13:91:a3:a2:50:63:29:0c:d1: 65:b7:ee:2a:02:ca:72:74:c1:a7:f2:79:ef:22:83:e9:48:78: 35:30:f0:da:fd:e6:72:f6:40:bb:f3:9f:64:6c:83:2d:c0:1e: bb:0f:be:a3:b7:25:af:a8:99:ef:3b:e2:6b:14:47:1c:e8:d2: 7f:84:9f:be:1b:27:26:51:c9:95:6c:4e:44:8e:87:61:d1:4a: 82:94:0d:9a:8b:17:ad:15:c8:72:89:98:26:eb:d7:c4:3b:17: b8:0b:d2:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ50AlvfC7iDTZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NGViOTFkZTktN2JhYi00MzdmLWFlYzEtMmM1Yzg2Y2UyZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojEF9mqh8P3mjTQDLqe+2kV553dB7E/F76x4 s+aSjFqaT2iUm8uahXSGcss13rOOHl8xW5FZYP7e1kSV5WE3sjhNZImrCggzshSc AfNYemv20Bg27RxdGzXXfiH36+4ooUtixZSSSwfpJNAYanqBl6SkXQ+M5X8/SIVG umuPhCD7/K0TK1uew4k4bzTWdYREaMlCNXDb5mzcuqM3TxnfCzxGDL4+/LW4QixH ULJngPTW+NWsAvKzD8tQ+Ju6KqYGfakvtyHXwIK4ywgFFtTJLqxolYMN72bzMjRx wpaLw9bw7hnI2MmMJWRCe0/bovG/l7VdzfCnAXc64QPF4+sJuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF2My9+IWEGvV9CKh2mXibbGof7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjEzMGY3MmUtZWIwZi0z YzZmLWI5MDYtOWZiMDVhMWIzOGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEhq8qxYoY6OMbhGTJUeqVxUUnsS4HWb1XJtAEWubEJW78scIV/qQC7 VNXqaoLB1X+6DDn71cMZo30klGz6REqbrkaUTjgMpkI5fQaWNXwLEB7wDSqGml8r uLf+Ms4cvppRPez/sT/FvY01oXEsN8l8NIZoTNweiaWw7dqvlOORsPWm9ZdAjkwY Pwn2a+gwY2hGr7Od9lFhJhORo6JQYykM0WW37ioCynJ0wafyee8ig+lIeDUw8Nr9 5nL2QLvzn2Rsgy3AHrsPvqO3Ja+ome874msURxzo0n+En74bJyZRyZVsTkSOh2HR SoKUDZqLF60VyHKJmCbr18Q7F7gL0jY= -----END CERTIFICATE-----Generated at Tue Sep 22 10:32:53 2026 by rpki-client