$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa File: f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa (raw, json) Hash identifier: QFu7XlqOx1L9xxKXvFbAs6jf1e+lPIi+4w9b6C20l+A= Subject key identifier: 1B:D0:43:DA:D1:1D:44:D1:C2:BA:18:71:B6:82:BA:02:6B:AF:B6:36 Certificate issuer: /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Certificate serial: 010D0C9F4328584E815F937E966826502724EA00 Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 22379 IP address blocks: 149.20.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:93:7e:96:68:26:50:27:24:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=a59d57bf-d0d4-47e9-9db5-f8e30ffbcf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:40:80:a1:09:a4:61:12:0e:c5:03:5d:b0: 0a:84:e5:e8:8d:c2:ca:64:8c:d5:ee:d8:c7:04:5d: 55:0e:bb:ba:a4:47:88:6e:e9:bf:36:9b:ab:19:ed: d0:d7:0a:6a:40:63:30:e2:07:60:33:3d:a1:cf:bc: 1a:18:fe:27:04:23:65:68:4a:4d:c8:98:0e:35:ea: cf:73:97:a0:55:27:f7:80:a2:51:69:27:a1:17:6e: 78:e6:24:df:4e:e1:21:10:0a:72:5f:24:7d:a6:59: 43:fe:c4:bd:18:0a:51:d0:0a:26:2c:16:d3:bc:8b: bb:c0:c3:3d:f0:f9:98:2b:b9:62:d2:77:e8:a3:dc: f4:b0:bb:d0:6a:0a:30:ce:da:37:28:5d:d4:a7:71: 9a:7f:ad:9a:74:c4:b9:d2:f6:4e:39:f5:c6:80:43: 01:82:b7:3f:89:66:a6:40:04:4f:6f:72:87:5b:f4: a4:71:b3:f3:a1:16:c3:18:e8:14:ad:67:4d:71:84: 1a:33:01:ee:95:30:bc:bf:5a:14:45:5b:a2:98:d2: 39:66:14:07:e3:ba:12:40:1e:f7:99:21:72:aa:28: cf:93:e6:fc:42:82:a7:66:85:5a:da:85:a1:38:7b: b5:d7:d1:1d:97:d2:dd:92:4a:cf:38:15:78:76:a1: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D0:43:DA:D1:1D:44:D1:C2:BA:18:71:B6:82:BA:02:6B:AF:B6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl X509v3 Authority Key Identifier: keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer sbgp-ipAddrBlock: critical IPv4: 149.20.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:83:84:f4:51:ea:39:0b:fb:db:ec:db:7c:6a:4e:47:b6:36: 0a:9e:b3:9d:b0:dc:9a:7f:d5:87:e3:79:08:8d:ff:6c:22:e1: bb:28:52:c3:13:ff:cb:4a:ac:a1:b5:08:85:aa:96:e7:d9:39: 55:e0:78:c6:ee:5a:e7:99:83:b9:e2:89:dd:33:d2:4b:d3:a4: 08:5c:1a:4a:0a:af:0a:87:91:81:39:87:a7:2a:d3:da:71:45: e3:89:61:37:8a:91:c5:f7:7e:0a:e2:47:28:25:48:06:02:5f: bb:5d:a7:28:ce:e2:6e:25:0f:ce:69:12:94:f2:ff:34:85:d9: c0:fb:3c:08:31:48:ab:4e:43:93:4a:49:30:00:35:60:c8:4d: 30:e1:fa:c6:c1:db:9e:ec:7e:c4:50:9f:08:df:dd:ff:8a:25: 3f:cf:e1:47:c9:46:2a:46:1a:25:b8:3b:7f:35:ff:5e:0a:11: 1c:df:1c:ef:f0:16:8e:5b:22:d7:c0:33:59:c1:78:88:e5:fd: 79:9e:6d:cb:b6:58:29:fb:70:60:80:0f:80:9d:07:a9:07:11: ba:d5:62:ac:49:e3:80:34:62:fc:2e:f4:3c:1f:08:ea:57:89: 1c:3a:c1:73:48:11:bc:6f:97:88:c6:21:03:96:80:5e:3b:34: fa:9d:a2:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5N+lmgmUCck6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJjODgyMDctZTdjNy00NTNlLWE0YWItNzdiNzIxNTJj MzNhMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk YTU5ZDU3YmYtZDBkNC00N2U5LTlkYjUtZjhlMzBmZmJjZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4hAgKEJpGESDsUDXbAKhOXojcLKZIzV7tjH BF1VDru6pEeIbum/NpurGe3Q1wpqQGMw4gdgMz2hz7waGP4nBCNlaEpNyJgONerP c5egVSf3gKJRaSehF2545iTfTuEhEApyXyR9pllD/sS9GApR0AomLBbTvIu7wMM9 8PmYK7li0nfoo9z0sLvQagowzto3KF3Up3Gaf62adMS50vZOOfXGgEMBgrc/iWam QARPb3KHW/SkcbPzoRbDGOgUrWdNcYQaMwHulTC8v1oURVuimNI5ZhQH47oSQB73 mSFyqijPk+b8QoKnZoVa2oWhOHu119Edl9LdkkrPOBV4dqELIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvQQ9rRHUTRwroYcbaCugJrr7Y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4 ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1MmMzM2EvZjg1ZmY1ZTctYTMzOC0z ZDU3LWJjZmUtMDBhYzdlZjU0ZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWJjODgyMDctZTdjNy00NTNlLWE0 YWItNzdiNzIxNTJjMzNhLzliYzg4MjA3LWU3YzctNDUzZS1hNGFiLTc3YjcyMTUy YzMzYS5jcmwwHwYDVR0jBBgwFoAUSTAeHE2iWcjFZa+Ue8VgdNKWIv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3 MjE1MmMzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRRGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSDhPRR6jkL+9vs23xqTke2Ngqes52w3Jp/1YfjeQiN/2wi4bsoUsMT /8tKrKG1CIWqlufZOVXgeMbuWueZg7niid0z0kvTpAhcGkoKrwqHkYE5h6cq09px ReOJYTeKkcX3fgriRyglSAYCX7tdpyjO4m4lD85pEpTy/zSF2cD7PAgxSKtOQ5NK STAANWDITTDh+sbB257sfsRQnwjf3f+KJT/P4UfJRipGGiW4O381/14KERzfHO/w Fo5bItfAM1nBeIjl/Xmebcu2WCn7cGCAD4CdB6kHEbrVYqxJ44A0Yvwu9DwfCOpX iRw6wXNIEbxvl4jGIQOWgF47NPqdol8= -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:41 2026 by rpki-client