$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d810d5fd-eb55-3893-8279-e1c69a1b7a38.roa File: d810d5fd-eb55-3893-8279-e1c69a1b7a38.roa (raw, json) Hash identifier: uW00fVMii5G0n+SqimKErlsZsiPKjrjQCtLbfpUZOdw= Subject key identifier: A0:80:58:B3:E8:74:C8:E8:AD:64:01:D0:61:28:F8:57:40:FC:44:4A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7204DEFAAD950E70A3484600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d810d5fd-eb55-3893-8279-e1c69a1b7a38.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 149.118.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:de:fa:ad:95:0e:70:a3:48:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=94cdc46a-ba23-4c87-b642-75e0760245e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e6:74:75:af:27:77:2d:4d:53:a3:77:f0:b6: fd:16:27:16:b3:f0:27:67:e6:a4:c5:ae:6f:3a:f7: 80:b0:34:a9:08:30:7f:ff:b8:09:0b:1d:81:e1:66: 47:10:89:94:b4:df:47:6e:58:43:25:3a:76:1b:7b: 9a:54:57:2c:2b:66:eb:c7:09:73:48:b2:b9:6a:d2: f5:72:c5:35:d3:97:fc:f9:8a:a7:7e:d4:87:82:64: 60:7f:65:4b:ec:65:12:4c:5a:fc:8e:b9:f8:5e:7a: 58:32:9c:43:77:4e:fa:01:2f:1a:1f:2b:45:cd:a4: 44:e9:6a:46:82:4f:f8:a4:9d:03:cf:7d:88:0c:5c: cc:8b:68:68:d6:38:07:08:5c:be:7a:9b:29:ff:2f: 32:ad:41:a2:4a:60:05:28:e5:88:57:b2:75:ab:2d: d7:ac:b5:b1:48:be:49:ec:8d:7c:87:b7:b6:68:c3: 17:64:a7:91:c0:7e:14:47:63:2d:8d:8a:a5:ca:94: 47:46:07:7d:5b:e4:2e:1a:17:d1:5d:03:cf:e7:7e: 34:92:52:d1:46:85:c2:1b:17:3a:f7:f9:b4:34:c1: ff:b2:ed:ca:c2:d0:2b:2a:e5:18:9e:61:bf:47:67: 37:f0:c4:15:be:06:ac:89:97:8b:da:2d:53:a5:25: 4d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:80:58:B3:E8:74:C8:E8:AD:64:01:D0:61:28:F8:57:40:FC:44:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d810d5fd-eb55-3893-8279-e1c69a1b7a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9c:2e:8c:af:39:65:55:f1:07:21:dd:9e:30:00:b6:28:81: 63:52:e4:7e:1f:01:bd:19:62:43:9b:da:a3:4b:33:2b:5a:a5: 33:2e:56:d8:26:66:de:1a:2f:3f:ff:d7:85:4b:41:94:ea:8e: 73:c5:e5:65:1f:cd:78:13:96:e5:24:86:6d:17:88:29:37:3b: be:a7:d2:cf:8b:38:c7:d7:4c:81:21:a0:78:c2:10:e4:dc:d2: 47:af:93:fd:8b:01:81:d2:75:4f:98:61:24:75:d4:b8:7c:cd: 96:44:d6:9a:85:74:20:83:7a:13:b7:b6:ab:ba:d3:bb:55:c8: ba:01:7e:6e:6f:cb:4d:6a:6f:6a:03:2e:2b:3e:2f:ff:6e:53: 7a:6e:f6:4c:b9:49:17:9b:91:f6:60:4d:bf:be:6d:1f:c8:73: cb:a3:fe:cc:49:16:e0:4a:92:bc:18:53:28:6f:1f:8d:88:fd: 9b:1e:ca:9a:f2:e2:6c:36:69:cc:dd:30:3b:0c:7d:ee:9b:9f: f8:97:ec:ba:ea:0a:7a:1c:1a:76:20:bc:e4:07:2d:fa:57:f2: 4e:cf:f2:70:91:2d:32:f6:71:fd:9b:32:ac:70:8f:28:96:9e: 13:fd:bc:8e:da:7b:0c:ba:45:b5:b9:52:09:70:77:43:a1:07: 59:12:28:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBN76rZUOcKNIRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk OTRjZGM0NmEtYmEyMy00Yzg3LWI2NDItNzVlMDc2MDI0NWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+Z0da8ndy1NU6N38Lb9FicWs/AnZ+akxa5v OveAsDSpCDB//7gJCx2B4WZHEImUtN9HblhDJTp2G3uaVFcsK2brxwlzSLK5atL1 csU105f8+YqnftSHgmRgf2VL7GUSTFr8jrn4XnpYMpxDd076AS8aHytFzaRE6WpG gk/4pJ0Dz32IDFzMi2ho1jgHCFy+epsp/y8yrUGiSmAFKOWIV7J1qy3XrLWxSL5J 7I18h7e2aMMXZKeRwH4UR2MtjYqlypRHRgd9W+QuGhfRXQPP5340klLRRoXCGxc6 9/m0NMH/su3KwtArKuUYnmG/R2c38MQVvgasiZeL2i1TpSVNHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCAWLPodMjorWQB0GEo+FdA/ERKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDgxMGQ1ZmQtZWI1NS0z ODkzLTgyNzktZTFjNjlhMWI3YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlXaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFycLoyvOWVV8Qch3Z4wALYogWNS5H4fAb0ZYkOb2qNLMytapTMuVtgm Zt4aLz//14VLQZTqjnPF5WUfzXgTluUkhm0XiCk3O76n0s+LOMfXTIEhoHjCEOTc 0kevk/2LAYHSdU+YYSR11Lh8zZZE1pqFdCCDehO3tqu607tVyLoBfm5vy01qb2oD Lis+L/9uU3pu9ky5SRebkfZgTb++bR/Ic8uj/sxJFuBKkrwYUyhvH42I/Zseypry 4mw2aczdMDsMfe6bn/iX7LrqCnocGnYgvOQHLfpX8k7P8nCRLTL2cf2bMqxwjyiW nhP9vI7aewy6RbW5Uglwd0OhB1kSKMY= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:39 2026 by rpki-client