$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f41b9-bed0-3232-b809-f3388884d979.roa File: 752f41b9-bed0-3232-b809-f3388884d979.roa (raw, json) Hash identifier: Elc+C42ZoLPJhqzmmGT0yHB6bvfXhyxbJ0vBj4cnM60= Subject key identifier: CD:96:7C:DF:2A:60:54:61:B1:E9:84:F6:D4:09:8A:E1:9B:DB:5F:07 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7204DC04D7D81B8570A19580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f41b9-bed0-3232-b809-f3388884d979.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 149.118.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:dc:04:d7:d8:1b:85:70:a1:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=14d8a502-b707-4f9d-9967-eb426ee33252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:10:0f:01:9a:a7:b1:bc:20:94:7a:5f:a2:07: af:86:ea:9c:a6:ff:15:0c:fd:53:fb:c3:dc:7e:67: 8a:da:80:30:c0:8a:1d:e8:94:37:47:48:70:e0:3f: cf:bb:f7:da:81:31:d6:c3:28:42:bd:28:44:4a:29: 04:14:0d:1e:d0:5e:4a:8f:db:30:6f:95:b1:1f:ef: 23:dd:4b:a5:f9:e7:15:ed:fa:07:fd:25:2f:62:fb: 07:75:a1:c8:26:cd:6d:b9:ad:ae:d6:4e:70:e0:12: 09:67:3f:fd:d1:41:d9:6c:06:66:6f:34:e5:aa:67: aa:f4:98:84:99:80:93:ac:42:24:94:06:83:31:7e: 0c:19:2f:d2:4f:a0:e5:ca:19:6c:96:8d:da:82:8d: 98:b4:43:5c:d8:32:90:fa:84:cd:b7:24:b1:79:22: 28:b9:60:e1:c8:23:ae:b7:77:11:38:3a:fe:b2:32: 21:13:1c:f3:f8:12:02:b1:4e:7c:ea:ee:21:f4:62: 9e:f0:b0:71:da:95:32:8b:3f:f7:82:32:25:55:fe: 13:f1:d7:d4:27:62:60:f0:de:25:ee:e4:49:60:87: 5a:8b:ca:42:ed:64:f5:5d:5d:18:24:43:2c:77:9e: 53:97:d0:85:a0:04:df:8e:7a:c0:55:d6:9b:61:28: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:96:7C:DF:2A:60:54:61:B1:E9:84:F6:D4:09:8A:E1:9B:DB:5F:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f41b9-bed0-3232-b809-f3388884d979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:03:11:93:1d:3d:73:08:4f:2c:03:fc:30:dc:a3:c9:a3:d0: b3:4f:e2:1e:fd:e2:8a:16:9a:78:ad:36:9c:62:e9:15:9c:78: 78:65:de:0c:8d:e0:0e:9e:08:2e:8a:6d:24:cf:32:94:04:81: e0:b2:bb:95:36:04:95:0e:eb:61:b4:1d:37:01:4a:7c:70:55: 50:4b:59:db:6b:42:52:66:d3:1b:32:fc:c6:6c:2f:dc:9a:32: 66:da:4a:b4:06:67:fd:62:d9:ec:f4:0d:53:b9:12:e4:71:09: 77:a9:72:34:94:eb:23:eb:3c:c1:ba:55:8c:a9:3a:5e:4e:f4: 0f:be:58:ca:cd:2f:96:e5:d2:6f:a2:a8:35:11:61:f9:cf:d2: 53:16:53:60:f6:a9:2f:2d:b5:dd:05:fa:92:68:5e:a7:93:a0: b3:8d:df:6c:71:00:be:64:48:ce:c2:f0:3f:14:84:3c:ac:16: 99:44:40:db:7d:44:a2:3a:3b:e5:b7:ce:2a:fc:77:f5:47:b2: 55:19:a4:a8:37:25:30:e5:12:aa:f8:d9:c4:58:d0:e9:76:32: 3b:9c:61:e7:59:e7:39:7a:1a:ed:e0:c5:68:26:af:a2:5d:e3: a9:24:d0:ae:ce:18:e5:e2:da:ad:c9:6f:af:44:8e:db:c2:f7: 66:82:b1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNwE19gbhXChlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk MTRkOGE1MDItYjcwNy00ZjlkLTk5NjctZWI0MjZlZTMzMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBAPAZqnsbwglHpfogevhuqcpv8VDP1T+8Pc fmeK2oAwwIod6JQ3R0hw4D/Pu/fagTHWwyhCvShESikEFA0e0F5Kj9swb5WxH+8j 3Uul+ecV7foH/SUvYvsHdaHIJs1tua2u1k5w4BIJZz/90UHZbAZmbzTlqmeq9JiE mYCTrEIklAaDMX4MGS/ST6Dlyhlslo3ago2YtENc2DKQ+oTNtySxeSIouWDhyCOu t3cRODr+sjIhExzz+BICsU586u4h9GKe8LBx2pUyiz/3gjIlVf4T8dfUJ2Jg8N4l 7uRJYIdai8pC7WT1XV0YJEMsd55Tl9CFoATfjnrAVdabYShl6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2WfN8qYFRhsemE9tQJiuGb218HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzUyZjQxYjktYmVkMC0z MjMyLWI4MDktZjMzODg4ODRkOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0DEZMdPXMITywD/DDco8mj0LNP4h794ooWmnitNpxi6RWceHhl3gyN 4A6eCC6KbSTPMpQEgeCyu5U2BJUO62G0HTcBSnxwVVBLWdtrQlJm0xsy/MZsL9ya MmbaSrQGZ/1i2ez0DVO5EuRxCXepcjSU6yPrPMG6VYypOl5O9A++WMrNL5bl0m+i qDURYfnP0lMWU2D2qS8ttd0F+pJoXqeToLON32xxAL5kSM7C8D8UhDysFplEQNt9 RKI6O+W3zir8d/VHslUZpKg3JTDlEqr42cRY0Ol2MjucYedZ5zl6Gu3gxWgmr6Jd 46kk0K7OGOXi2q3Jb69EjtvC92aCsSA= -----END CERTIFICATE-----Generated at Mon Jul 13 02:50:53 2026 by rpki-client