$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c58edf2-2e0c-3aa6-8244-d6a62a076156.roa File: 3c58edf2-2e0c-3aa6-8244-d6a62a076156.roa (raw, json) Hash identifier: ASQKNaTaLo3o2YahwS3+uAs2iCm0rjsIT/ztgnKQbq4= Subject key identifier: E0:4E:5E:E4:46:F5:E0:C5:FC:7E:65:90:CD:D4:D2:2E:0B:53:48:A7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EF9E2074044A6ABE5329B0300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c58edf2-2e0c-3aa6-8244-d6a62a076156.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 54253 IP address blocks: 149.118.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:07:40:44:a6:ab:e5:32:9b:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=903abec0-f924-4616-a65a-2a45f6819b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b8:9b:4c:bc:c0:ff:0d:9c:de:6d:d6:8d:c9: 0b:b2:e5:b6:fd:23:35:bd:63:39:d7:d6:3a:85:ec: e4:e9:bd:a4:8d:eb:bf:57:58:83:c0:00:54:1c:81: fa:83:b2:27:9a:ef:8d:80:57:d4:42:8e:99:73:f7: 46:ac:c9:b2:cd:b2:d3:06:4d:f1:07:18:2f:4d:9e: 0d:18:53:d0:bb:46:1b:9a:15:b2:1b:41:85:3a:a8: e9:a9:3b:83:f3:e6:c8:52:5a:ac:e2:e2:33:89:f1: 3a:3e:b9:77:48:4e:f7:e6:74:1f:61:18:9b:48:c3: 41:41:36:6f:dd:3c:b6:7f:29:1e:66:54:a2:2f:e8: aa:1d:6c:ef:c3:9e:ca:41:cf:1f:5c:29:fc:09:cc: 8d:fd:d1:9f:97:dd:65:36:ca:13:0e:0f:89:9f:c7: 03:ea:53:e1:40:72:9e:ce:45:80:a1:3d:e6:e1:d6: 19:a4:7a:61:f4:3f:24:44:ff:a6:6b:2a:c2:f9:f6: 74:9f:d9:d8:1a:82:d1:a7:35:c0:c7:54:ab:1d:f6: 80:8b:51:66:b4:63:c3:f9:3c:2e:e8:1b:e8:c3:86: 63:ed:a2:81:e2:fb:54:43:17:07:7b:cd:6e:46:9c: 2f:00:5e:b8:dc:be:e0:29:60:d1:d3:b3:86:d3:86: 75:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4E:5E:E4:46:F5:E0:C5:FC:7E:65:90:CD:D4:D2:2E:0B:53:48:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c58edf2-2e0c-3aa6-8244-d6a62a076156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:90:09:9d:20:46:60:bf:5a:92:f3:68:04:0c:11:96:b3:9e: ae:08:33:ff:22:9c:10:cc:a1:c0:f6:1b:76:be:c7:cf:17:06: 45:09:b8:37:ca:16:b0:cb:35:97:a6:2e:7f:0e:52:a5:81:f5: cd:ae:48:9f:00:55:60:49:39:98:b4:8a:f0:90:05:da:4d:58: 25:ba:7b:96:d2:28:fb:66:fc:44:1c:b3:48:ac:32:b1:ad:51: ea:43:e0:9b:c4:ee:e3:b3:5f:2f:54:96:49:ee:c6:17:b9:f2: a5:da:79:b2:ff:d5:44:a2:67:04:8a:43:c5:8e:ef:ce:09:85: ac:fe:c9:7c:e8:89:07:1d:58:09:99:4b:c4:7c:fa:c3:bf:e6: f3:8e:c6:f8:38:5b:f0:4b:9a:1a:00:99:11:52:98:77:13:6c: a7:d6:e6:13:b9:9c:5b:64:5e:c0:92:04:02:94:5c:22:7f:05: 4c:00:6e:56:61:0f:42:78:d1:88:74:89:0b:00:2c:5b:05:9a: 15:c1:78:71:69:a3:b6:e9:4f:d8:18:3c:f5:ef:49:14:ed:a4: f5:91:31:90:fd:b1:50:68:77:35:e2:d9:4b:fd:bd:71:00:6a: f4:8e:85:25:2b:ce:21:50:91:79:28:64:57:a4:9b:c9:0c:01: 11:46:12:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754gdARKar5TKbAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk OTAzYWJlYzAtZjkyNC00NjE2LWE2NWEtMmE0NWY2ODE5YjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLibTLzA/w2c3m3WjckLsuW2/SM1vWM519Y6 hezk6b2kjeu/V1iDwABUHIH6g7Inmu+NgFfUQo6Zc/dGrMmyzbLTBk3xBxgvTZ4N GFPQu0YbmhWyG0GFOqjpqTuD8+bIUlqs4uIzifE6Prl3SE735nQfYRibSMNBQTZv 3Ty2fykeZlSiL+iqHWzvw57KQc8fXCn8CcyN/dGfl91lNsoTDg+Jn8cD6lPhQHKe zkWAoT3m4dYZpHph9D8kRP+mayrC+fZ0n9nYGoLRpzXAx1SrHfaAi1FmtGPD+Twu 6Bvow4Zj7aKB4vtUQxcHe81uRpwvAF643L7gKWDR07OG04Z1DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBOXuRG9eDF/H5lkM3U0i4LU0inMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2M1OGVkZjItMmUwYy0z YWE2LTgyNDQtZDZhNjJhMDc2MTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXYGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6QCZ0gRmC/WpLzaAQMEZaznq4IM/8inBDMocD2G3a+x88XBkUJuDfK FrDLNZemLn8OUqWB9c2uSJ8AVWBJOZi0ivCQBdpNWCW6e5bSKPtm/EQcs0isMrGt UepD4JvE7uOzXy9Ulknuxhe58qXaebL/1USiZwSKQ8WO784Jhaz+yXzoiQcdWAmZ S8R8+sO/5vOOxvg4W/BLmhoAmRFSmHcTbKfW5hO5nFtkXsCSBAKUXCJ/BUwAblZh D0J40Yh0iQsALFsFmhXBeHFpo7bpT9gYPPXvSRTtpPWRMZD9sVBodzXi2Uv9vXEA avSOhSUrziFQkXkoZFekm8kMARFGEgg= -----END CERTIFICATE-----Generated at Thu Aug 27 17:01:57 2026 by rpki-client