$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b3105a7-ca24-3e42-badc-2aa11de975b8.roa File: 2b3105a7-ca24-3e42-badc-2aa11de975b8.roa (raw, json) Hash identifier: xBL6nv0i33WSf8bf8D8u1lkgvYD/QWEoKvc+yGxluAI= Subject key identifier: A1:33:B5:82:B4:B5:D3:B9:6C:F9:7F:E8:BF:56:09:47:17:BD:50:9A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7204C0ED35053EBFD219B600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b3105a7-ca24-3e42-badc-2aa11de975b8.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 149.118.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:c0:ed:35:05:3e:bf:d2:19:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=7fb78172-6a8d-44b6-a8f5-8339e80f2efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3c:2b:31:b6:75:de:dd:e5:2b:23:1d:3d:3b: c9:5d:b9:84:82:3f:78:31:10:d9:ff:96:4c:70:25: 18:b5:7e:4b:ad:c8:8c:74:28:cf:52:1c:58:ad:d7: 9c:53:c2:2f:96:c3:f9:fa:2c:79:1b:00:a9:3c:f6: 6f:32:91:16:a1:6e:ac:00:80:69:ce:df:74:19:1c: ad:6e:c1:36:ba:53:d2:2e:b3:a8:fb:c0:99:93:ca: 05:d6:22:3a:c9:af:32:4f:9f:c7:cb:b6:a7:ba:34: 3d:91:36:02:f5:c6:c0:94:aa:2f:f9:13:f6:ed:ab: 95:7e:7f:83:dd:8d:b9:0d:0e:23:d6:49:40:33:68: f1:25:3a:25:dd:71:7b:ba:a0:b5:00:85:50:cb:b2: 72:ff:06:09:2d:b4:ab:a4:92:52:d7:90:8e:03:c7: fc:7b:cd:17:6a:f5:b3:99:29:e2:69:1a:b3:c3:49: 4e:6f:2e:7f:fa:13:4d:a6:c0:b8:2d:9b:ea:3a:69: 42:19:f3:07:31:97:ff:d0:52:ad:46:9d:4b:65:35: 26:db:43:7c:3d:b1:ed:30:15:39:35:34:55:f0:12: 47:78:b2:41:4a:c4:85:7a:d3:a7:03:0c:f1:65:a8: 4a:ea:20:72:2f:b6:e6:4b:81:ac:2e:84:90:2d:d4: a5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:33:B5:82:B4:B5:D3:B9:6C:F9:7F:E8:BF:56:09:47:17:BD:50:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b3105a7-ca24-3e42-badc-2aa11de975b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:58:af:be:21:f8:d4:d0:b8:98:92:89:82:5b:5b:a1:76:03: 92:99:94:33:f3:48:89:0c:0d:42:c8:4b:2a:49:c0:bd:d3:21: 3c:8b:9b:ef:e0:0b:83:3e:fc:9b:28:84:f9:bf:93:01:a9:f6: 76:4c:94:6d:f9:3b:e2:3f:0c:35:a8:9f:f3:fb:46:52:0c:2e: 20:dd:59:c1:d4:a2:23:af:2c:24:c9:4c:b6:cd:35:1d:25:87: cd:21:18:e9:93:a4:42:47:bd:c0:ce:2b:89:5d:65:61:f1:e3: 6d:33:40:10:71:73:ac:8f:24:38:0f:71:69:14:48:1b:b6:3b: 47:c6:87:8c:c4:7b:55:3e:bb:9d:cf:c4:b2:1d:88:fe:fa:af: ab:5e:db:e7:01:8d:9c:ed:7c:2d:51:8c:9b:e7:a1:c1:a0:f8: 1e:60:64:85:be:a1:5a:78:d3:24:ec:2f:23:b6:8f:fa:be:da: 34:68:67:7c:ec:0c:53:f8:8a:7d:34:97:e3:2e:b7:7c:6b:60: 6c:1a:32:eb:ba:01:7a:b6:2f:b2:95:dc:1e:be:b8:fe:ba:47: 4a:65:36:c4:70:45:88:30:82:f2:6b:7f:30:da:9f:60:4d:70: 7f:01:da:36:cb:64:da:01:eb:1d:b9:4f:0d:3a:a9:e5:93:29: a8:d8:03:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBMDtNQU+v9IZtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk N2ZiNzgxNzItNmE4ZC00NGI2LWE4ZjUtODMzOWU4MGYyZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizwrMbZ13t3lKyMdPTvJXbmEgj94MRDZ/5ZM cCUYtX5LrciMdCjPUhxYrdecU8IvlsP5+ix5GwCpPPZvMpEWoW6sAIBpzt90GRyt bsE2ulPSLrOo+8CZk8oF1iI6ya8yT5/Hy7anujQ9kTYC9cbAlKov+RP27auVfn+D 3Y25DQ4j1klAM2jxJTol3XF7uqC1AIVQy7Jy/wYJLbSrpJJS15COA8f8e80XavWz mSniaRqzw0lOby5/+hNNpsC4LZvqOmlCGfMHMZf/0FKtRp1LZTUm20N8PbHtMBU5 NTRV8BJHeLJBSsSFetOnAwzxZahK6iByL7bmS4GsLoSQLdSlQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEztYK0tdO5bPl/6L9WCUcXvVCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmIzMTA1YTctY2EyNC0z ZTQyLWJhZGMtMmFhMTFkZTk3NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlXagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVYr74h+NTQuJiSiYJbW6F2A5KZlDPzSIkMDULISypJwL3TITyLm+/g C4M+/JsohPm/kwGp9nZMlG35O+I/DDWon/P7RlIMLiDdWcHUoiOvLCTJTLbNNR0l h80hGOmTpEJHvcDOK4ldZWHx420zQBBxc6yPJDgPcWkUSBu2O0fGh4zEe1U+u53P xLIdiP76r6te2+cBjZztfC1RjJvnocGg+B5gZIW+oVp40yTsLyO2j/q+2jRoZ3zs DFP4in00l+Mut3xrYGwaMuu6AXq2L7KV3B6+uP66R0plNsRwRYgwgvJrfzDan2BN cH8B2jbLZNoB6x25Tw06qeWTKajYA0k= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:14 2026 by rpki-client