$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa File: cdaf3e33-82e0-3076-92c2-d497982c93fc.roa (raw, json) Hash identifier: sx/OoakWCFwWZrRBEI+30jZgHzDczHY2wqMm3iujjQ8= Subject key identifier: 76:2E:D8:94:23:69:99:CA:9C:F7:BF:FF:A8:5F:91:02:16:A8:3D:AA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DD78B0E00B1A3C4CE99432180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa Signing time: Fri 15 May 2026 13:00:30 +0000 ROA not before: Fri 15 May 2026 13:00:30 +0000 ROA not after: Thu 13 Aug 2026 13:00:30 +0000 asID: 54253 IP address blocks: 149.118.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d7:8b:0e:00:b1:a3:c4:ce:99:43:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 15 13:00:30 2026 GMT Not After : Aug 13 13:00:30 2026 GMT Subject: CN=af23d4d3-8438-481a-a3c3-cbee8dd4ddd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:cf:1b:61:06:be:9f:99:47:68:bd:f7:d1: 02:75:1a:ab:3b:e5:b0:0e:4c:8b:8b:74:04:83:85: 31:33:69:ab:96:5f:10:05:28:43:d1:25:9f:93:2c: e3:f2:f9:69:83:6d:d8:fc:62:2d:f3:69:b5:7e:93: b5:df:b0:63:3c:b2:74:0a:cd:2f:5f:07:90:96:1d: 40:90:71:c0:d7:dd:15:d1:4b:c8:f9:53:50:75:53: 7d:1c:76:54:23:b0:d0:a3:53:e2:65:f7:3e:d3:4b: 37:38:3d:c3:ce:38:34:ef:0d:8b:72:24:02:ce:81: e5:85:8d:7e:1b:f6:8a:8d:8a:58:b8:fc:6b:4a:95: b5:52:7a:09:25:4a:a9:60:f8:95:d8:9c:3c:2f:7a: be:6e:05:5e:70:ce:ac:33:87:f7:1a:ff:86:66:3b: 87:10:54:33:46:3b:71:2e:72:a6:cc:dd:0e:f3:2f: 8d:f2:67:34:bf:e0:fe:61:18:dc:b4:f6:52:37:9d: 33:ce:e8:c3:44:44:6c:34:71:a5:e1:95:4a:4e:e7: 66:1d:da:9f:b7:02:e3:7d:b4:cb:a9:39:92:db:b8: c1:c9:d3:20:d3:0b:ab:f9:3f:a5:68:51:7f:bd:2e: e7:cb:4a:d5:25:12:c5:1b:49:87:d6:62:e0:78:a0: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2E:D8:94:23:69:99:CA:9C:F7:BF:FF:A8:5F:91:02:16:A8:3D:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:aa:81:e4:7a:5c:e0:54:2c:df:14:55:cb:af:26:fd:7b:4f: c1:13:34:c5:a7:dc:a8:c6:d6:71:98:b2:65:4f:2c:92:21:74: 74:72:69:35:e8:b3:25:d1:d1:a3:9c:34:db:04:7a:3c:de:5c: da:06:40:5c:f2:25:37:11:aa:e2:be:e5:94:f7:45:02:8e:bd: f3:c9:a3:98:dc:8c:6a:19:ec:05:c0:c9:e4:2a:fd:6b:fc:59: 14:68:a8:2b:43:4c:23:dc:07:4f:99:51:28:6f:a0:03:27:00: 66:b2:b6:6e:11:00:4b:3a:54:9f:68:71:44:be:68:3f:b7:f9: 8e:d6:fe:32:13:98:59:c9:15:47:95:e3:df:59:36:a2:f2:af: 3d:4a:bb:10:b6:23:5c:a1:14:b4:63:95:03:cd:f9:2a:a4:e7: 1e:d3:6b:e3:9b:0c:cb:a5:b6:4a:42:a2:60:f4:18:a1:29:14: 5c:fc:da:47:d0:d8:2f:c3:23:95:e6:de:c9:e2:66:17:f5:dd: 57:c6:cd:1b:4b:88:57:86:b2:cf:c0:24:b0:3a:22:1d:1e:6d: 71:71:d2:65:f0:b6:a7:dc:9d:20:7d:7a:ed:5b:52:d7:68:24: b9:c8:af:db:b7:bb:53:b0:d0:16:32:51:d1:49:c0:f2:9f:5f: bf:71:22:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Xiw4AsaPEzplDIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxNTEzMDAzMFoXDTI2MDgxMzEzMDAzMFowLzEtMCsGA1UEAxMk YWYyM2Q0ZDMtODQzOC00ODFhLWEzYzMtY2JlZThkZDRkZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3fPG2EGvp+ZR2i999ECdRqrO+WwDkyLi3QE g4UxM2mrll8QBShD0SWfkyzj8vlpg23Y/GIt82m1fpO137BjPLJ0Cs0vXweQlh1A kHHA190V0UvI+VNQdVN9HHZUI7DQo1PiZfc+00s3OD3Dzjg07w2LciQCzoHlhY1+ G/aKjYpYuPxrSpW1UnoJJUqpYPiV2Jw8L3q+bgVecM6sM4f3Gv+GZjuHEFQzRjtx LnKmzN0O8y+N8mc0v+D+YRjctPZSN50zzujDRERsNHGl4ZVKTudmHdqftwLjfbTL qTmS27jBydMg0wur+T+laFF/vS7ny0rVJRLFG0mH1mLgeKAg0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYu2JQjaZnKnPe//6hfkQIWqD2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2RhZjNlMzMtODJlMC0z MDc2LTkyYzItZDQ5Nzk4MmM5M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlXb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaqgeR6XOBULN8UVcuvJv17T8ETNMWn3KjG1nGYsmVPLJIhdHRyaTXo syXR0aOcNNsEejzeXNoGQFzyJTcRquK+5ZT3RQKOvfPJo5jcjGoZ7AXAyeQq/Wv8 WRRoqCtDTCPcB0+ZUShvoAMnAGaytm4RAEs6VJ9ocUS+aD+3+Y7W/jITmFnJFUeV 499ZNqLyrz1KuxC2I1yhFLRjlQPN+Sqk5x7Ta+ObDMultkpComD0GKEpFFz82kfQ 2C/DI5Xm3sniZhf13VfGzRtLiFeGss/AJLA6Ih0ebXFx0mXwtqfcnSB9eu1bUtdo JLnIr9u3u1Ow0BYyUdFJwPKfX79xIsI= -----END CERTIFICATE-----Generated at Thu May 28 17:04:17 2026 by rpki-client