$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47ec2a17-6b3a-36a2-94cf-4d6f4da14533.roa File: 47ec2a17-6b3a-36a2-94cf-4d6f4da14533.roa (raw, json) Hash identifier: nSxg9yfm51Hf02Sx1hKRzjVKhoDtFtPzcZnPz50kYas= Subject key identifier: 62:11:E7:10:6B:4E:2A:4D:3B:D2:F2:79:C7:0F:B7:65:30:52:DF:D0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EF9E20772A931EFA5A0AB2900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47ec2a17-6b3a-36a2-94cf-4d6f4da14533.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 54253 IP address blocks: 149.118.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:07:72:a9:31:ef:a5:a0:ab:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=fa4e6391-4a16-4623-bd0c-0b7072965f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:df:b5:42:d2:75:e4:73:51:1b:c7:1c:a0: 80:31:2c:1a:fe:aa:ed:3d:2e:80:f1:99:37:8b:86: 99:22:26:5c:15:55:da:b5:8e:97:e0:88:a2:47:ae: b6:d4:69:75:84:5a:e6:44:f2:54:be:19:aa:0f:ca: 82:18:e8:4f:6c:a2:08:bb:30:01:74:a6:e1:8f:29: 3b:51:28:ae:d6:ab:24:ce:92:5e:8c:74:3a:f9:8e: 3a:9a:bb:c8:20:c5:1d:5d:e1:60:bd:26:87:ad:2f: bb:52:dd:f8:f5:21:aa:bd:05:d8:45:66:fe:28:9d: a9:0c:00:f0:c4:65:c8:c9:b0:77:d8:97:22:a1:f9: 78:f8:77:fb:af:df:2d:c8:58:d0:7a:af:ef:48:fc: 74:5f:a7:35:9b:f0:d0:0c:43:b4:1d:37:19:d9:c6: 3a:8d:a9:40:dc:d7:c0:5e:59:e4:bf:c6:d4:62:3a: c3:c3:db:62:52:9f:08:a9:5e:f2:87:b5:3c:46:aa: fb:c9:6d:5f:55:18:45:24:ad:98:2e:1f:17:26:c1: 7e:c0:b3:dc:e4:a1:60:3a:57:dd:d3:3f:a2:76:c0: 9f:14:84:cf:bc:8c:9d:4e:f8:f7:89:c8:bd:65:f6: 47:b2:dc:80:91:2e:cc:37:c4:6e:84:06:b3:16:c1: 0e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:11:E7:10:6B:4E:2A:4D:3B:D2:F2:79:C7:0F:B7:65:30:52:DF:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47ec2a17-6b3a-36a2-94cf-4d6f4da14533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f0:31:1a:9d:cb:49:19:7e:79:1b:f8:cc:0c:6b:47:98:3c: 18:1f:53:6c:97:7b:95:d8:34:93:bd:5c:fe:a2:53:a2:08:f4: 56:71:2c:15:de:6e:ea:9d:96:0b:31:6d:e7:03:e0:55:db:ce: e0:d0:48:8c:00:11:66:d4:66:de:b3:66:55:52:04:0d:a8:c8: ee:8c:de:85:af:2d:4a:62:14:c1:70:aa:d2:5d:fb:7a:bc:99: 0d:b4:da:22:d6:2d:46:50:5e:77:15:71:25:01:70:d8:3e:b5: c6:c5:27:85:9e:76:17:f2:f9:4b:b5:65:a1:dc:52:4d:aa:d8: 2e:d1:43:b3:13:d4:d2:8c:46:a3:25:15:51:4d:de:70:c8:a0: 51:17:89:ad:c5:f0:02:4d:77:3d:3f:aa:94:f7:c1:44:72:94: 43:d8:79:8a:54:40:f8:cc:4f:9c:b3:e9:50:20:6b:52:4d:a0: d8:f1:31:48:b1:94:b8:ed:c7:c7:1f:cf:40:95:6a:a3:fd:91: 9e:38:fa:78:86:99:b9:f3:92:68:83:84:9b:d2:f4:97:4e:32: ee:25:ba:c8:68:b2:99:72:a3:f1:6d:79:dc:2e:e3:1c:2b:b8: 7f:0b:97:20:df:d0:c4:37:22:90:19:32:c8:68:c8:78:b8:1e: 1b:73:f1:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754gdyqTHvpaCrKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk ZmE0ZTYzOTEtNGExNi00NjIzLWJkMGMtMGI3MDcyOTY1ZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFDftULSdeRzURvHHKCAMSwa/qrtPS6A8Zk3 i4aZIiZcFVXatY6X4IiiR6621Gl1hFrmRPJUvhmqD8qCGOhPbKIIuzABdKbhjyk7 USiu1qskzpJejHQ6+Y46mrvIIMUdXeFgvSaHrS+7Ut349SGqvQXYRWb+KJ2pDADw xGXIybB32Jciofl4+Hf7r98tyFjQeq/vSPx0X6c1m/DQDEO0HTcZ2cY6jalA3NfA Xlnkv8bUYjrDw9tiUp8IqV7yh7U8Rqr7yW1fVRhFJK2YLh8XJsF+wLPc5KFgOlfd 0z+idsCfFITPvIydTvj3ici9ZfZHstyAkS7MN8RuhAazFsEO0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIR5xBrTipNO9LyeccPt2UwUt/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDdlYzJhMTctNmIzYS0z NmEyLTk0Y2YtNGQ2ZjRkYTE0NTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlXYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfwMRqdy0kZfnkb+MwMa0eYPBgfU2yXe5XYNJO9XP6iU6II9FZxLBXe buqdlgsxbecD4FXbzuDQSIwAEWbUZt6zZlVSBA2oyO6M3oWvLUpiFMFwqtJd+3q8 mQ202iLWLUZQXncVcSUBcNg+tcbFJ4Wedhfy+Uu1ZaHcUk2q2C7RQ7MT1NKMRqMl FVFN3nDIoFEXia3F8AJNdz0/qpT3wURylEPYeYpUQPjMT5yz6VAga1JNoNjxMUix lLjtx8cfz0CVaqP9kZ44+niGmbnzkmiDhJvS9JdOMu4lushosplyo/Ftedwu4xwr uH8LlyDf0MQ3IpAZMshoyHi4Hhtz8eE= -----END CERTIFICATE-----Generated at Sat Sep 26 18:35:24 2026 by rpki-client