$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a04f1e7c-60ef-349b-a9ba-a123a0e14d50.roa File: a04f1e7c-60ef-349b-a9ba-a123a0e14d50.roa (raw, json) Hash identifier: 1onh3PkSNaovy4CHuwauwH/qXg9wrN+ZXerb5nIYY9c= Subject key identifier: 96:84:2D:22:9D:10:51:8E:3F:4E:5E:15:9B:7E:3E:02:95:48:86:CF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EB6E1B50DF36109458D1E9180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a04f1e7c-60ef-349b-a9ba-a123a0e14d50.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 31898 IP address blocks: 149.118.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:b5:0d:f3:61:09:45:8d:1e:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=f43ad79d-4d0d-4e88-90b7-40f5eb196027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3c:9a:17:33:79:9e:24:cf:2d:42:26:a3:f5: 28:53:d6:41:b2:8b:85:57:e7:b3:bd:d1:d6:a0:30: 43:50:82:75:73:d1:39:c4:b3:e4:b9:b8:4e:e6:1e: 73:61:1d:81:74:77:8a:f0:3d:35:e7:7c:5f:c7:b7: b1:dc:c1:cd:39:12:1e:74:37:c5:79:43:64:32:04: 32:34:1e:c8:c7:6f:f2:76:09:20:7c:96:e3:f7:97: b7:b6:7c:28:ce:9b:1b:dc:fe:a5:ca:0e:00:2b:5c: 5a:6d:7e:e0:85:81:14:ff:c0:bb:c3:81:16:77:94: 87:4b:dc:ee:f7:b4:62:c4:ca:68:b5:fb:5a:9f:94: c3:46:62:72:a6:2c:d8:d3:f4:6b:f1:e0:91:2b:9a: 87:7b:c1:21:82:2b:63:ec:2b:9c:50:de:a8:03:19: c3:43:f3:70:15:91:fa:fd:3a:8b:e3:b1:45:df:12: 89:6c:c8:70:9c:38:ba:04:ee:e3:0d:6d:0c:07:b2: 1c:73:f1:8b:73:82:76:ad:c3:d2:9b:36:9d:f6:2b: 93:97:78:f8:13:2d:b0:c6:2d:9a:26:04:97:76:20: 79:98:cd:1f:c2:34:41:2b:ea:cb:98:63:2e:6f:b8: 70:c1:54:10:c4:6e:41:71:1c:85:16:7b:59:bb:b1: f4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:84:2D:22:9D:10:51:8E:3F:4E:5E:15:9B:7E:3E:02:95:48:86:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a04f1e7c-60ef-349b-a9ba-a123a0e14d50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:59:8e:2d:8e:7a:4f:e9:be:d3:a0:89:17:4c:d4:27:36:0f: 2c:91:f6:e1:de:5b:2d:7f:2f:9b:57:77:93:13:7c:28:f2:94: a2:15:31:87:39:43:ac:30:11:da:a2:42:df:0d:fb:82:9f:0e: f2:8f:ff:40:77:1e:e3:af:b1:74:05:2a:8b:29:02:28:7c:ae: d5:a2:dd:67:c9:41:57:4a:ff:4e:02:1a:45:af:98:45:a7:67: ea:c7:c7:76:18:7a:e8:02:8a:bf:aa:2b:f2:49:2b:58:8f:22: 8c:a6:54:bc:7f:f2:71:7f:ee:34:b0:5c:4e:a5:56:66:43:86: 90:b7:09:31:c8:b3:31:3d:a1:78:21:d8:b3:55:70:82:c9:dd: 58:44:e4:c6:8a:74:f1:e0:68:73:7f:a1:25:7b:1a:47:61:63: 17:f5:20:78:4b:cc:d5:c7:73:1c:df:5e:58:17:6d:5b:df:a6: c2:63:89:bd:cd:c0:37:82:83:f8:9c:23:9e:fe:1f:5c:81:c4: 2f:02:bb:7a:ec:01:1e:88:27:da:50:19:42:79:fe:ab:01:26: 0d:1a:30:31:23:55:1b:05:43:c5:f4:53:43:37:59:9f:d2:9d: a4:f0:37:fb:d1:8c:5f:d4:90:0b:ac:5f:d9:7d:7f:30:f6:27: 73:de:73:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624bUN82EJRY0ekYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk ZjQzYWQ3OWQtNGQwZC00ZTg4LTkwYjctNDBmNWViMTk2MDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TyaFzN5niTPLUImo/UoU9ZBsouFV+ezvdHW oDBDUIJ1c9E5xLPkubhO5h5zYR2BdHeK8D0153xfx7ex3MHNORIedDfFeUNkMgQy NB7Ix2/ydgkgfJbj95e3tnwozpsb3P6lyg4AK1xabX7ghYEU/8C7w4EWd5SHS9zu 97RixMpotftan5TDRmJypizY0/Rr8eCRK5qHe8Ehgitj7CucUN6oAxnDQ/NwFZH6 /TqL47FF3xKJbMhwnDi6BO7jDW0MB7Icc/GLc4J2rcPSmzad9iuTl3j4Ey2wxi2a JgSXdiB5mM0fwjRBK+rLmGMub7hwwVQQxG5BcRyFFntZu7H0cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaELSKdEFGOP05eFZt+PgKVSIbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTA0ZjFlN2MtNjBlZi0z NDliLWE5YmEtYTEyM2EwZTE0ZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVZji2Oek/pvtOgiRdM1Cc2DyyR9uHeWy1/L5tXd5MTfCjylKIVMYc5 Q6wwEdqiQt8N+4KfDvKP/0B3HuOvsXQFKospAih8rtWi3WfJQVdK/04CGkWvmEWn Z+rHx3YYeugCir+qK/JJK1iPIoymVLx/8nF/7jSwXE6lVmZDhpC3CTHIszE9oXgh 2LNVcILJ3VhE5MaKdPHgaHN/oSV7GkdhYxf1IHhLzNXHcxzfXlgXbVvfpsJjib3N wDeCg/icI57+H1yBxC8Cu3rsAR6IJ9pQGUJ5/qsBJg0aMDEjVRsFQ8X0U0M3WZ/S naTwN/vRjF/UkAusX9l9fzD2J3Pec1c= -----END CERTIFICATE-----Generated at Thu Aug 27 07:09:14 2026 by rpki-client