$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa File: f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa (raw, json) Hash identifier: HqEWuTqSxtNKW6F5+qkWfMlJxAhTYcSKo7BuADUl8kg= Subject key identifier: 25:9D:4E:C2:30:ED:3F:51:27:05:B6:8D:2F:CE:0F:AE:8F:B4:C8:76 Certificate issuer: /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Certificate serial: 010D0C9F4328584DA11ABAE587AE31F6166D9080 Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 22379 IP address blocks: 149.20.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:ba:e5:87:ae:31:f6:16:6d:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=019d373f-0ca8-431d-87cf-61286f852e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:13:7e:ac:01:c4:fa:7c:18:a4:a4:00:4d: 3b:6a:a3:b0:cf:53:b6:ff:85:f7:91:81:2a:f3:4a: 16:8f:74:ed:b6:b9:37:fc:6c:fe:09:29:04:6c:0d: f3:9a:5a:19:7f:88:01:b7:eb:49:dd:95:dd:60:a9: 3d:c8:e2:81:70:5c:6a:72:e7:80:75:d5:23:51:2a: fb:51:81:d7:08:4a:a5:02:70:f8:18:08:45:ae:90: 1a:fd:dd:7a:c6:d9:7d:3a:b9:3c:38:90:75:f9:02: b5:0f:e6:45:a9:cf:f4:6f:8a:da:21:f9:7f:09:38: 84:16:69:35:11:89:cd:2f:08:bc:2c:c1:1d:a4:ca: 0e:a6:9f:6f:5a:de:d1:05:f2:e6:f9:99:36:07:ae: 68:99:6f:be:aa:10:23:5c:5c:f1:dd:52:95:c6:a7: ae:8f:f2:6f:23:f9:07:23:ea:23:b8:d0:35:ff:11: d1:83:44:99:60:09:d2:62:fe:8b:47:f1:33:83:d9: 21:db:3c:fc:a8:d7:22:86:ba:32:8d:69:2f:8b:ce: d1:94:ce:b0:1b:f8:b1:6d:ee:87:63:5d:54:8f:7a: 3f:3a:58:7a:32:3d:b9:68:0c:82:b0:f9:aa:9a:47: 90:a6:03:da:37:43:03:7f:45:7d:78:98:34:a4:e2: 0f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9D:4E:C2:30:ED:3F:51:27:05:B6:8D:2F:CE:0F:AE:8F:B4:C8:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl X509v3 Authority Key Identifier: keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer sbgp-ipAddrBlock: critical IPv4: 149.20.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:9b:50:4a:8c:75:da:d8:0e:a6:41:9a:41:4c:df:5a:2a:d7: f6:f1:c5:7a:05:53:db:3e:a5:52:ff:f6:2b:6a:1d:90:71:a4: 09:59:2b:ba:c7:17:b9:0d:d4:0a:69:4f:92:73:ee:39:6e:db: 89:75:0c:a2:81:3e:46:65:cc:c6:61:a2:26:09:96:ef:28:43: d8:33:9f:5f:9f:8a:a9:0a:f5:42:22:99:e1:c8:a8:6b:e7:04: 95:c5:24:0c:7d:33:a9:8b:81:72:b9:e5:fc:37:65:c7:14:6f: c1:61:1a:c5:59:b5:53:27:15:f2:30:c7:89:bf:6f:9b:ff:45: de:a4:04:10:ea:0b:00:54:b6:b2:ef:37:32:bd:3b:82:4c:7c: ce:95:a6:eb:8e:2e:4e:6d:b3:24:8c:ee:2e:78:68:8c:d0:3f: f9:cf:d2:d2:91:a8:0d:28:f8:c5:30:76:d6:70:f9:62:ae:7f: 5d:7c:50:c9:47:32:eb:3c:ce:7f:5c:59:75:86:8f:b4:cd:e3: 07:0b:13:31:9c:86:99:53:21:6a:cb:bf:4d:ed:9b:3d:ae:4a: d7:83:9d:eb:27:1d:c9:44:81:5d:ef:d5:6e:e7:2e:a0:5f:dd: 73:87:83:25:4e:17:d3:11:db:f2:e2:3b:6a:1c:fd:b4:92:bd: b1:d8:e1:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGrrlh64x9hZtkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJjODgyMDctZTdjNy00NTNlLWE0YWItNzdiNzIxNTJj MzNhMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MDE5ZDM3M2YtMGNhOC00MzFkLTg3Y2YtNjEyODZmODUyZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyETfqwBxPp8GKSkAE07aqOwz1O2/4X3kYEq 80oWj3Tttrk3/Gz+CSkEbA3zmloZf4gBt+tJ3ZXdYKk9yOKBcFxqcueAddUjUSr7 UYHXCEqlAnD4GAhFrpAa/d16xtl9Ork8OJB1+QK1D+ZFqc/0b4raIfl/CTiEFmk1 EYnNLwi8LMEdpMoOpp9vWt7RBfLm+Zk2B65omW++qhAjXFzx3VKVxqeuj/JvI/kH I+ojuNA1/xHRg0SZYAnSYv6LR/Ezg9kh2zz8qNcihroyjWkvi87RlM6wG/ixbe6H Y11Uj3o/Olh6Mj25aAyCsPmqmkeQpgPaN0MDf0V9eJg0pOIPCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWdTsIw7T9RJwW2jS/OD66PtMh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4 ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1MmMzM2EvZjg1ZmY1ZTctYTMzOC0z ZDU3LWJjZmUtMDBhYzdlZjU0ZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWJjODgyMDctZTdjNy00NTNlLWE0 YWItNzdiNzIxNTJjMzNhLzliYzg4MjA3LWU3YzctNDUzZS1hNGFiLTc3YjcyMTUy YzMzYS5jcmwwHwYDVR0jBBgwFoAUSTAeHE2iWcjFZa+Ue8VgdNKWIv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3 MjE1MmMzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRRGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6bUEqMddrYDqZBmkFM31oq1/bxxXoFU9s+pVL/9itqHZBxpAlZK7rH F7kN1AppT5Jz7jlu24l1DKKBPkZlzMZhoiYJlu8oQ9gzn1+fiqkK9UIimeHIqGvn BJXFJAx9M6mLgXK55fw3ZccUb8FhGsVZtVMnFfIwx4m/b5v/Rd6kBBDqCwBUtrLv NzK9O4JMfM6VpuuOLk5tsySM7i54aIzQP/nP0tKRqA0o+MUwdtZw+WKuf118UMlH Mus8zn9cWXWGj7TN4wcLEzGchplTIWrLv03tmz2uSteDnesnHclEgV3v1W7nLqBf 3XOHgyVOF9MR2/LiO2oc/bSSvbHY4Uo= -----END CERTIFICATE-----Generated at Thu Apr 30 12:01:24 2026 by rpki-client