$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5a0bc9d-19ed-3ebf-a83a-6a8b2511b8d7.roa File: d5a0bc9d-19ed-3ebf-a83a-6a8b2511b8d7.roa (raw, json) Hash identifier: 1iAyKwafX9guXOZ4/+XapS+A8Y+US6DyQqdUKorx8fI= Subject key identifier: AD:40:A3:96:5A:88:ED:28:0B:84:D5:2E:F6:B3:3A:11:86:6A:BB:35 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F58CD522F8C544DAC7B131000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5a0bc9d-19ed-3ebf-a83a-6a8b2511b8d7.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 31898 IP address blocks: 148.116.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:52:2f:8c:54:4d:ac:7b:13:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=139fe61e-1113-44f7-8374-d7fee705e78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:1d:cc:97:64:7d:6c:7e:ed:b1:d8:3d:f7: d3:05:66:33:ac:2a:f4:89:8e:fb:04:64:2c:0f:44: f1:98:35:73:84:74:ad:f6:4a:09:fa:68:a7:71:fb: 0c:4e:23:b6:b0:1a:22:36:31:4a:c7:77:f5:d9:9e: c1:f8:37:59:86:0c:51:30:7a:a5:1e:66:ba:a0:f9: 1d:c6:4e:61:b1:4f:3b:d5:6b:4e:19:90:56:49:41: f7:81:96:d1:84:d4:dc:35:07:77:51:d9:50:66:70: 44:9e:3f:d0:c7:db:04:71:78:79:3e:f1:d8:94:3c: 88:c7:cc:e2:b4:6d:79:67:8e:a9:69:12:32:a6:4c: 48:a5:14:c5:d9:af:33:5d:64:47:c1:ed:81:dc:04: 60:4b:2b:20:8b:cc:7e:56:67:60:10:c8:70:21:64: 00:46:a3:88:e6:de:94:7a:b2:fd:3d:2a:cd:75:ba: 12:db:4a:26:d1:91:22:46:f2:21:4a:46:20:1f:e5: 7a:da:8b:64:31:4e:71:44:56:86:90:ba:d1:6b:e3: 82:29:da:a2:6a:b4:c9:62:ae:22:a2:0d:74:a8:af: 6a:8b:56:3e:8b:a4:a3:5a:4b:cb:af:98:27:6a:79: 45:9c:14:e8:97:9e:53:8b:3d:8e:cf:c6:3b:71:7d: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:40:A3:96:5A:88:ED:28:0B:84:D5:2E:F6:B3:3A:11:86:6A:BB:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5a0bc9d-19ed-3ebf-a83a-6a8b2511b8d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 148.116.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:62:05:d2:21:ce:73:6c:89:40:c3:33:22:e4:3b:6f:85:47: 3f:a5:99:dd:59:30:c5:78:3c:7c:7a:9d:07:e5:54:92:12:f2: 30:8a:14:e4:a0:1f:88:8c:1c:54:67:c8:33:08:17:c7:b5:d0: 5d:5c:58:60:a1:95:82:93:40:31:51:fc:27:35:49:1c:73:39: e8:90:ee:67:fa:19:a7:85:09:60:bf:0b:13:54:40:7f:ea:0a: eb:cd:4d:49:57:a8:d4:c4:a8:6d:79:33:0f:0f:37:4e:a3:f0: b8:6b:c8:77:e5:55:95:1f:6e:26:c6:1f:af:4f:d2:d0:d7:57: 7a:b0:9d:4b:9f:b0:77:c9:c7:1f:93:2e:a9:ed:0d:c1:cd:6e: e3:3c:58:9b:bc:29:f1:78:95:ac:d0:8f:8f:9b:80:22:07:e9: 91:a0:10:04:c1:90:f3:3d:dc:5b:ec:f4:84:e8:ed:57:0b:9c: c1:85:e1:75:07:c8:27:9f:fa:61:bd:cb:93:72:9e:83:fb:14: 8a:3f:06:b0:b5:a6:50:33:fe:bd:68:21:f3:6a:a3:88:98:5e: d8:de:e6:0a:7b:dc:09:c4:ce:31:4f:af:29:5d:d8:7d:fa:c8: 5d:94:71:20:f1:db:e3:d7:f9:ad:ca:f9:23:0a:73:89:18:20: 78:7b:25:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVIvjFRNrHsTEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk MTM5ZmU2MWUtMTExMy00NGY3LTgzNzQtZDdmZWU3MDVlNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRAdzJdkfWx+7bHYPffTBWYzrCr0iY77BGQs D0TxmDVzhHSt9koJ+mincfsMTiO2sBoiNjFKx3f12Z7B+DdZhgxRMHqlHma6oPkd xk5hsU871WtOGZBWSUH3gZbRhNTcNQd3UdlQZnBEnj/Qx9sEcXh5PvHYlDyIx8zi tG15Z46paRIypkxIpRTF2a8zXWRHwe2B3ARgSysgi8x+VmdgEMhwIWQARqOI5t6U erL9PSrNdboS20om0ZEiRvIhSkYgH+V62otkMU5xRFaGkLrRa+OCKdqiarTJYq4i og10qK9qi1Y+i6SjWkvLr5gnanlFnBTol55Tiz2Oz8Y7cX0GnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1Ao5ZaiO0oC4TVLvazOhGGars1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDVhMGJjOWQtMTllZC0z ZWJmLWE4M2EtNmE4YjI1MTFiOGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlHR2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRiBdIhznNsiUDDMyLkO2+FRz+lmd1ZMMV4PHx6nQflVJIS8jCKFOSg H4iMHFRnyDMIF8e10F1cWGChlYKTQDFR/Cc1SRxzOeiQ7mf6GaeFCWC/CxNUQH/q CuvNTUlXqNTEqG15Mw8PN06j8LhryHflVZUfbibGH69P0tDXV3qwnUufsHfJxx+T LqntDcHNbuM8WJu8KfF4lazQj4+bgCIH6ZGgEATBkPM93Fvs9ITo7VcLnMGF4XUH yCef+mG9y5NynoP7FIo/BrC1plAz/r1oIfNqo4iYXtje5gp73AnEzjFPryld2H36 yF2UcSDx2+PX+a3K+SMKc4kYIHh7JQM= -----END CERTIFICATE-----Generated at Tue Oct 13 05:58:08 2026 by rpki-client