$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1fcf4f8c-15d8-3c4e-86b1-84b4ab2f6d78.roa File: 1fcf4f8c-15d8-3c4e-86b1-84b4ab2f6d78.roa (raw, json) Hash identifier: 0XFS42N5m3ZAlvZ0h/fKRvmkLtleg3CEZx4o5ULFO8Q= Subject key identifier: 25:F9:4F:A4:1E:A8:35:BA:D3:61:6A:62:F2:93:BB:95:B5:9B:56:46 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A203039AEAAB5B40C477640 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1fcf4f8c-15d8-3c4e-86b1-84b4ab2f6d78.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 149.130.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:30:39:ae:aa:b5:b4:0c:47:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=bdf9fe55-bad8-4052-a354-887445f5e327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:05:12:95:5a:c9:e2:a6:d8:6c:57:81:55:95: de:ce:db:3a:08:b8:6d:c9:29:c0:2a:37:75:e2:ab: 1a:87:70:a2:2d:36:eb:bd:04:2b:bc:13:a7:22:09: 89:83:69:7e:55:33:15:b0:5f:84:f7:42:2b:76:4f: 35:f5:f4:cb:3c:0d:1c:1f:ce:f7:02:23:b8:af:fb: 46:f8:2e:45:f1:3a:0d:1c:57:4b:ba:2b:49:a0:7e: 9f:7e:12:76:3f:a9:84:b5:8a:0c:fc:7d:16:de:96: d5:73:ab:a0:ab:80:b9:73:04:3f:d9:9e:35:c6:5b: 53:8d:dd:60:00:11:5c:59:c9:8a:37:f9:4a:8b:19: 4a:ad:2b:5d:ed:c0:be:8d:4f:9a:55:b0:b0:99:57: 8c:c6:cb:4f:74:58:e3:3e:46:7f:8b:6b:8e:a0:93: 65:a9:df:0e:0c:79:3c:2f:c2:14:02:33:8b:c2:d3: ae:79:df:a8:0a:67:08:56:66:99:fd:96:9d:f6:c0: 03:14:73:c0:b1:8c:d5:af:44:5b:74:a3:69:f6:88: dd:a8:fa:96:1e:5a:d2:e0:80:a4:15:14:e4:9b:b7: e3:a1:8e:75:16:ff:6a:d0:6d:49:b3:25:96:1e:9a: e6:50:ae:34:ce:4f:5f:ac:f9:36:aa:fe:d2:25:fa: e0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F9:4F:A4:1E:A8:35:BA:D3:61:6A:62:F2:93:BB:95:B5:9B:56:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1fcf4f8c-15d8-3c4e-86b1-84b4ab2f6d78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.130.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3e:33:66:b2:c5:45:4a:b0:7f:17:ae:d4:0f:e6:86:2a:0a: fb:26:0e:07:a4:eb:e5:c1:15:45:9e:57:02:b9:f7:22:3d:dd: f6:7d:f3:f8:f7:a2:38:a2:f3:a2:d4:66:8b:23:79:84:2a:d5: b9:d3:7d:06:04:6f:73:19:4f:35:7a:b5:29:95:d7:c5:0d:e0: 57:87:0c:7b:7c:7f:a9:84:14:4a:30:10:c7:4b:5e:50:6d:57: ae:28:e1:12:98:62:f5:ec:72:9e:17:c0:96:4d:76:8a:7a:9f: 9a:12:af:3d:dd:98:f0:be:a1:40:31:bb:9c:b7:41:00:b2:0c: 68:20:81:03:88:4b:2d:b5:e0:90:ff:82:60:4e:02:36:4e:74: 87:b4:50:fa:f2:93:78:be:9f:f8:4a:03:9a:9f:cb:a1:dc:fe: 4a:db:9f:ab:2f:1d:8b:c8:cf:91:14:3a:1b:79:db:38:5a:02: 91:41:91:10:ff:63:08:7d:61:2d:bb:28:8a:3d:35:61:3b:c8: de:64:1f:4a:5e:00:79:a3:6e:df:a8:d4:06:37:9d:63:02:cd: fa:5d:32:b1:67:59:bf:19:58:ff:0d:30:8d:df:c8:b2:e6:3b: 18:8e:f4:39:39:d9:34:ec:47:83:a9:1b:a7:8f:6a:e0:77:5f: 31:03:d3:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDA5rqq1tAxHdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk YmRmOWZlNTUtYmFkOC00MDUyLWEzNTQtODg3NDQ1ZjVlMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQUSlVrJ4qbYbFeBVZXezts6CLhtySnAKjd1 4qsah3CiLTbrvQQrvBOnIgmJg2l+VTMVsF+E90Irdk819fTLPA0cH873AiO4r/tG +C5F8ToNHFdLuitJoH6ffhJ2P6mEtYoM/H0W3pbVc6ugq4C5cwQ/2Z41xltTjd1g ABFcWcmKN/lKixlKrStd7cC+jU+aVbCwmVeMxstPdFjjPkZ/i2uOoJNlqd8ODHk8 L8IUAjOLwtOued+oCmcIVmaZ/Zad9sADFHPAsYzVr0RbdKNp9ojdqPqWHlrS4ICk FRTkm7fjoY51Fv9q0G1JsyWWHprmUK40zk9frPk2qv7SJfrgWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX5T6QeqDW602FqYvKTu5W1m1ZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWZjZjRmOGMtMTVkOC0z YzRlLTg2YjEtODRiNGFiMmY2ZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElYLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEI+M2ayxUVKsH8XrtQP5oYqCvsmDgek6+XBFUWeVwK59yI93fZ98/j3 ojii86LUZosjeYQq1bnTfQYEb3MZTzV6tSmV18UN4FeHDHt8f6mEFEowEMdLXlBt V64o4RKYYvXscp4XwJZNdop6n5oSrz3dmPC+oUAxu5y3QQCyDGgggQOISy214JD/ gmBOAjZOdIe0UPryk3i+n/hKA5qfy6Hc/krbn6svHYvIz5EUOht52zhaApFBkRD/ Ywh9YS27KIo9NWE7yN5kH0peAHmjbt+o1AY3nWMCzfpdMrFnWb8ZWP8NMI3fyLLm OxiO9Dk52TTsR4OpG6ePauB3XzED0wY= -----END CERTIFICATE-----Generated at Wed May 13 04:34:47 2026 by rpki-client