$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea60ecef-3d71-3d33-a1a2-9a0ffb5bedd5.roa File: ea60ecef-3d71-3d33-a1a2-9a0ffb5bedd5.roa (raw, json) Hash identifier: wfr+2IsjCDvtmDs+OP4NN0w0IxUjt8UzTPXiQcWhM4c= Subject key identifier: C3:2C:76:25:A0:C1:99:30:87:C2:58:D5:51:61:D7:27:8A:A8:CD:97 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DDD206F19DEBEB471E0BB5F40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea60ecef-3d71-3d33-a1a2-9a0ffb5bedd5.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 54253 IP address blocks: 149.118.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:6f:19:de:be:b4:71:e0:bb:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=3975b681-7de1-46c7-b761-1703d5770838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:7b:dc:98:68:cd:41:cf:f3:db:e4:35:7e: a5:e4:82:6a:6f:17:0f:e4:78:c9:30:f4:f6:0d:85: c0:2c:81:74:42:e8:15:a5:fe:b0:e4:cd:9d:15:3f: a9:78:c1:aa:48:b7:29:54:83:c7:a1:f4:a0:b7:8c: 3f:d1:39:b1:0e:c7:0e:84:68:00:14:23:d8:a1:50: 48:87:d8:ab:97:8d:57:e3:22:6a:d7:40:d7:9b:e8: 3f:41:10:c6:0a:c0:37:15:22:3f:51:f6:4d:6f:d5: db:30:42:14:a1:1c:f2:e1:ce:9c:13:60:c4:bc:75: 3e:0b:a0:f7:e5:13:dd:52:c0:a8:fd:d8:9c:34:80: fd:c4:7a:4f:14:1c:5e:8b:82:a3:b0:74:14:92:d2: d6:81:0e:f5:9a:92:fb:db:c4:fc:14:a1:53:aa:77: 6e:6c:dd:e4:b7:49:38:9c:70:07:a1:1e:b0:e7:80: 9d:7a:fd:45:93:67:db:e8:e3:88:d0:d6:87:06:53: 41:c0:b6:5a:7e:5b:3b:0f:f1:c2:5c:57:6b:59:a3: 86:82:d2:88:05:23:3c:22:4c:53:90:03:86:87:cf: cf:04:b6:53:37:b9:58:b0:1a:c5:db:db:21:ee:2d: 1f:35:7d:54:d5:3c:f7:d4:2e:0f:c2:87:9f:9e:b0: e8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2C:76:25:A0:C1:99:30:87:C2:58:D5:51:61:D7:27:8A:A8:CD:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea60ecef-3d71-3d33-a1a2-9a0ffb5bedd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:79:e1:8a:8d:cc:33:32:5d:47:0e:36:74:52:b9:a8:03:9c: fd:eb:f9:b3:33:71:0d:19:84:6a:0f:f1:85:3b:a6:15:13:94: 38:36:1e:0f:fe:84:a4:b6:33:6f:80:ef:d4:01:46:5c:81:54: 31:d1:7e:bb:f6:a0:2d:55:d0:b9:2e:85:95:17:54:24:d9:da: 4f:32:4d:d8:7a:60:d6:82:97:ac:7d:4e:0c:ef:5e:11:0f:db: 9b:5c:60:22:dc:b4:6a:02:15:67:2e:8d:3a:df:dc:b5:1e:64: 21:72:30:24:c8:44:1d:b2:c2:34:36:38:38:4d:cb:ff:95:b8: bb:e9:bc:11:82:51:4d:d1:94:02:e1:9e:45:72:d3:e1:fb:df: cf:33:02:3f:b4:d6:0a:23:b8:8e:6c:b0:2c:20:36:3b:14:7f: 66:1d:80:68:ef:9d:0e:cb:c5:e3:81:91:38:43:4e:81:8e:36: 94:5d:24:75:05:dd:4c:83:66:a4:d8:f0:78:34:20:f5:49:94: c4:a0:c8:d2:31:9e:49:4a:a4:e5:63:40:68:7a:20:7f:eb:0e: 4d:b7:c5:10:cf:75:e3:93:24:99:6e:88:49:be:01:0f:99:69: 71:7f:1f:53:62:bf:e6:b3:f7:f3:a2:6e:22:27:6a:3e:4a:92: 3e:68:60:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIG8Z3r60ceC7X0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk Mzk3NWI2ODEtN2RlMS00NmM3LWI3NjEtMTcwM2Q1NzcwODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkd73JhozUHP89vkNX6l5IJqbxcP5HjJMPT2 DYXALIF0QugVpf6w5M2dFT+peMGqSLcpVIPHofSgt4w/0TmxDscOhGgAFCPYoVBI h9irl41X4yJq10DXm+g/QRDGCsA3FSI/UfZNb9XbMEIUoRzy4c6cE2DEvHU+C6D3 5RPdUsCo/dicNID9xHpPFBxei4KjsHQUktLWgQ71mpL728T8FKFTqndubN3kt0k4 nHAHoR6w54Cdev1Fk2fb6OOI0NaHBlNBwLZafls7D/HCXFdrWaOGgtKIBSM8IkxT kAOGh8/PBLZTN7lYsBrF29sh7i0fNX1U1Tz31C4PwoefnrDojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMsdiWgwZkwh8JY1VFh1yeKqM2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWE2MGVjZWYtM2Q3MS0z ZDMzLWExYTItOWEwZmZiNWJlZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClXb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR54YqNzDMyXUcONnRSuagDnP3r+bMzcQ0ZhGoP8YU7phUTlDg2Hg/+ hKS2M2+A79QBRlyBVDHRfrv2oC1V0LkuhZUXVCTZ2k8yTdh6YNaCl6x9TgzvXhEP 25tcYCLctGoCFWcujTrf3LUeZCFyMCTIRB2ywjQ2ODhNy/+VuLvpvBGCUU3RlALh nkVy0+H7388zAj+01gojuI5ssCwgNjsUf2YdgGjvnQ7LxeOBkThDToGONpRdJHUF 3UyDZqTY8Hg0IPVJlMSgyNIxnklKpOVjQGh6IH/rDk23xRDPdeOTJJluiEm+AQ+Z aXF/H1Niv+az9/OibiInaj5Kkj5oYHQ= -----END CERTIFICATE-----Generated at Thu May 28 17:44:30 2026 by rpki-client