$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/73a112f4-6c44-39d5-8d45-aa4ab716c142.roa File: 73a112f4-6c44-39d5-8d45-aa4ab716c142.roa (raw, json) Hash identifier: cCG+xPd2h1MfnS2QeY77lhb5p9MiA+Ev9kc2YCuDwJw= Subject key identifier: 05:3E:83:56:08:AD:43:BE:05:82:B3:EE:F0:61:25:82:9E:52:12:E1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F58CD66950C472042BFBEAF80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/73a112f4-6c44-39d5-8d45-aa4ab716c142.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 31898 IP address blocks: 147.5.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:66:95:0c:47:20:42:bf:be:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=a68b0600-c5df-48e8-b25b-469ff345d653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a6:52:92:28:f3:e5:07:0e:c9:96:70:75:14: a4:2e:4a:9b:41:51:d4:ce:58:ca:97:d2:d8:7e:93: 2e:bb:ac:40:e5:ec:cb:ad:75:9b:ac:7a:0b:9c:dc: df:01:6f:fc:c0:2f:c3:37:f9:0d:71:7d:9b:27:b5: 44:dc:02:81:34:9e:b7:bf:4a:1a:dd:fa:74:41:00: b1:9d:96:81:41:0c:cf:52:f3:29:37:e8:b3:76:68: 9e:df:d4:f9:46:42:6d:a0:cb:9d:09:10:0b:83:2f: d7:1d:5e:4f:54:16:76:98:b9:ab:a3:20:3a:e2:68: 10:7e:64:e9:0d:c4:a0:ae:35:29:09:7f:4a:c6:05: 1f:d0:6e:7d:b5:14:9e:df:2b:01:b3:94:c8:45:e0: 0c:60:d5:21:e8:da:20:e0:2b:e8:d3:1d:2d:d1:2f: 54:85:96:db:f1:96:3c:02:28:22:53:6b:03:05:a8: 84:f7:af:f7:89:39:7e:8e:4e:4c:86:ae:57:ab:b2: 49:4e:50:02:52:eb:96:66:b8:15:38:1d:8d:db:35: 43:b5:e7:59:38:58:dd:79:bf:4f:84:aa:af:d7:12: fc:86:91:62:93:c9:4d:27:2c:c6:56:44:6b:2f:ce: 73:e0:24:4d:10:f2:11:db:c0:7e:11:b7:ac:e3:da: 10:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3E:83:56:08:AD:43:BE:05:82:B3:EE:F0:61:25:82:9E:52:12:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/73a112f4-6c44-39d5-8d45-aa4ab716c142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.5.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:50:b9:70:4f:44:c9:a5:c3:a5:63:da:17:4f:d4:d7:ba:0b: 91:b3:35:68:20:8d:40:43:fa:92:6d:72:3b:9b:3e:0b:5b:2e: 29:95:bb:f2:01:fe:b3:74:6c:7d:11:45:a1:e2:cc:40:54:b4: a5:ec:d7:f5:51:3f:6d:6e:b1:3d:9d:d3:3d:5f:a3:5b:b0:05: a1:4e:2d:96:ff:61:8f:59:fb:8a:26:83:cd:f3:1e:0f:5a:b3: 45:f8:f5:df:14:d1:6e:75:0c:a8:ad:6c:cb:e2:f8:0d:57:b8: fb:5c:05:4f:dd:41:61:84:f1:7c:5d:32:a0:ca:94:0a:bf:b4: c0:e2:7e:9c:bd:69:c8:3d:c2:8c:15:8b:23:33:19:b2:95:c8: b0:ce:9e:1d:f2:67:ea:c7:8e:77:d6:7b:96:69:e0:9f:76:50: 16:d1:1a:f5:75:16:86:18:d0:ed:8f:48:9e:9c:2a:4e:fb:e6: 91:43:4d:e4:c8:8c:25:a5:b2:a1:78:4e:c6:f0:00:8e:47:93: 75:00:6e:80:4d:45:da:0f:5a:4f:47:ad:fe:ce:15:98:45:be: a6:cf:45:81:0b:61:11:09:b2:30:2f:a1:b2:90:aa:28:59:9a: ef:b9:ff:26:a7:af:2d:06:5a:cd:d2:61:58:f7:4e:89:8b:e0: ea:64:8d:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzWaVDEcgQr++r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk YTY4YjA2MDAtYzVkZi00OGU4LWIyNWItNDY5ZmYzNDVkNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ZSkijz5QcOyZZwdRSkLkqbQVHUzljKl9LY fpMuu6xA5ezLrXWbrHoLnNzfAW/8wC/DN/kNcX2bJ7VE3AKBNJ63v0oa3fp0QQCx nZaBQQzPUvMpN+izdmie39T5RkJtoMudCRALgy/XHV5PVBZ2mLmroyA64mgQfmTp DcSgrjUpCX9KxgUf0G59tRSe3ysBs5TIReAMYNUh6Nog4Cvo0x0t0S9UhZbb8ZY8 AigiU2sDBaiE96/3iTl+jk5Mhq5Xq7JJTlACUuuWZrgVOB2N2zVDtedZOFjdeb9P hKqv1xL8hpFik8lNJyzGVkRrL85z4CRNEPIR28B+Ebes49oQSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAU+g1YIrUO+BYKz7vBhJYKeUhLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzNhMTEyZjQtNmM0NC0z OWQ1LThkNDUtYWE0YWI3MTZjMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5QuXBPRMmlw6Vj2hdP1Ne6C5GzNWggjUBD+pJtcjubPgtbLimVu/IB /rN0bH0RRaHizEBUtKXs1/VRP21usT2d0z1fo1uwBaFOLZb/YY9Z+4omg83zHg9a s0X49d8U0W51DKitbMvi+A1XuPtcBU/dQWGE8XxdMqDKlAq/tMDifpy9acg9wowV iyMzGbKVyLDOnh3yZ+rHjnfWe5Zp4J92UBbRGvV1FoYY0O2PSJ6cKk775pFDTeTI jCWlsqF4TsbwAI5Hk3UAboBNRdoPWk9Hrf7OFZhFvqbPRYELYREJsjAvobKQqihZ mu+5/yanry0GWs3SYVj3TomL4OpkjRc= -----END CERTIFICATE-----Generated at Sun Oct 11 17:21:26 2026 by rpki-client