$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43690444-135a-35ad-b637-c35248969914.roa File: 43690444-135a-35ad-b637-c35248969914.roa (raw, json) Hash identifier: WZiJxYfgxw10iCFlu3Ra5z9dt8cWeEGG+XwHqvEL2qM= Subject key identifier: 5C:1B:53:CC:B5:4C:76:76:70:01:55:37:7B:B8:40:70:E7:E6:9C:A9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EF87CB276F19B08E1D70D6500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43690444-135a-35ad-b637-c35248969914.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 54253 IP address blocks: 149.118.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:b2:76:f1:9b:08:e1:d7:0d:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=862b6d08-a833-47c1-a96d-9d44878b67ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d9:ca:b8:b8:b2:e2:4c:bf:d3:2e:0e:8d:68: c0:4f:77:1c:d8:5f:11:45:20:39:08:81:c4:d8:00: bc:93:1a:fa:3a:16:dc:3f:da:67:c1:49:fd:c1:1b: 2c:4d:ed:a2:3f:e3:1c:7f:05:53:94:1d:33:12:dc: 6f:49:7b:72:42:ce:6c:f3:a1:f6:12:e7:e8:f7:29: 69:c4:0b:62:ca:6e:8b:12:35:b0:cc:01:35:fc:cf: 50:b3:5c:1e:a2:6b:5c:d4:92:0f:67:ff:00:b2:62: 73:7c:79:5c:8c:12:13:df:e3:90:08:96:a2:f8:cf: c7:2a:e5:07:21:60:5d:04:cc:66:3f:d5:39:73:f7: 47:0a:7f:ca:12:7c:cb:d3:f3:a0:45:b0:a7:0e:91: 15:1d:58:7c:2f:e1:9a:60:f1:1b:31:f3:6d:3e:19: 72:2e:e6:8e:06:c0:20:6a:ed:be:4a:78:3a:1a:68: f0:26:38:25:e5:01:f2:93:dd:d0:80:af:65:33:58: f5:b8:33:1f:a2:f2:06:82:ea:4b:cf:a4:33:ee:c8: af:f4:f1:6c:7e:ae:20:e1:4a:eb:40:7f:7e:78:c0: 22:6d:75:2d:ac:69:6e:93:de:6d:8e:e5:08:fc:bc: fd:c5:58:ef:0f:93:d0:18:21:0d:b1:2c:4d:b9:5f: fe:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1B:53:CC:B5:4C:76:76:70:01:55:37:7B:B8:40:70:E7:E6:9C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43690444-135a-35ad-b637-c35248969914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:4b:9e:ac:f4:28:65:f7:60:40:d3:11:7e:f8:4a:1c:a5:b2: f7:b7:eb:0e:e4:5d:5c:e6:2b:86:b1:0d:3a:3f:51:06:ae:fe: af:75:21:68:42:66:dd:2c:59:9e:5b:28:fa:ee:9e:d6:20:af: 44:1c:78:51:50:f1:33:63:3e:91:56:96:e1:c8:0b:6c:87:f3: 73:5f:0c:03:18:9f:da:88:cb:7d:a9:4b:b9:92:8f:c9:7d:d8: 75:6c:5b:73:6a:1a:99:5b:42:74:8f:be:d2:8c:bf:43:55:ca: 38:82:3f:e9:4b:b9:62:59:89:78:1d:4a:2a:4c:ee:33:a9:68: 0c:03:37:45:c3:96:93:38:ab:ac:fb:50:13:2b:9a:1d:0a:1e: 28:81:15:84:dd:93:95:78:d3:09:2c:04:77:ad:84:64:9e:2e: 41:84:5b:2e:be:a6:a8:c6:39:22:fa:fc:76:51:5e:97:1c:cb: 09:04:3f:c3:c9:41:72:4e:22:e0:2e:7c:22:f3:5a:ca:db:17: e8:65:cb:c4:da:fb:14:d5:93:1f:61:18:e1:03:57:a0:c4:f4: bd:96:7a:6e:3d:1c:b3:18:74:05:87:d0:57:0f:da:08:63:ff: 3c:b9:ac:0a:1c:1b:12:9a:a0:aa:60:35:e9:01:dc:44:bf:58: 58:1e:b4:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLJ28ZsI4dcNZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ODYyYjZkMDgtYTgzMy00N2MxLWE5NmQtOWQ0NDg3OGI2N2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNnKuLiy4ky/0y4OjWjAT3cc2F8RRSA5CIHE 2AC8kxr6OhbcP9pnwUn9wRssTe2iP+McfwVTlB0zEtxvSXtyQs5s86H2Eufo9ylp xAtiym6LEjWwzAE1/M9Qs1weomtc1JIPZ/8AsmJzfHlcjBIT3+OQCJai+M/HKuUH IWBdBMxmP9U5c/dHCn/KEnzL0/OgRbCnDpEVHVh8L+GaYPEbMfNtPhlyLuaOBsAg au2+Sng6GmjwJjgl5QHyk93QgK9lM1j1uDMfovIGgupLz6Qz7siv9PFsfq4g4Urr QH9+eMAibXUtrGluk95tjuUI/Lz9xVjvD5PQGCENsSxNuV/+nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwbU8y1THZ2cAFVN3u4QHDn5pypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDM2OTA0NDQtMTM1YS0z NWFkLWI2MzctYzM1MjQ4OTY5OTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClXZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZLnqz0KGX3YEDTEX74Shylsve36w7kXVzmK4axDTo/UQau/q91IWhC Zt0sWZ5bKPruntYgr0QceFFQ8TNjPpFWluHIC2yH83NfDAMYn9qIy32pS7mSj8l9 2HVsW3NqGplbQnSPvtKMv0NVyjiCP+lLuWJZiXgdSipM7jOpaAwDN0XDlpM4q6z7 UBMrmh0KHiiBFYTdk5V40wksBHethGSeLkGEWy6+pqjGOSL6/HZRXpccywkEP8PJ QXJOIuAufCLzWsrbF+hly8Ta+xTVkx9hGOEDV6DE9L2Wem49HLMYdAWH0FcP2ghj /zy5rAocGxKaoKpgNekB3ES/WFgetEs= -----END CERTIFICATE-----Generated at Thu Aug 27 11:40:30 2026 by rpki-client