$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6085afda-92ea-3a98-afe7-df16e71c8738.roa File: 6085afda-92ea-3a98-afe7-df16e71c8738.roa (raw, json) Hash identifier: d6wIM10suVZJ2VbA658TEaslY49Aw1u2JIRcGlqmvFM= Subject key identifier: CD:FA:50:79:E3:8C:FE:3B:AF:DB:CA:FF:82:BD:00:07:D5:8E:0F:33 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0AA2270B1A6D16F282105400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6085afda-92ea-3a98-afe7-df16e71c8738.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 149.130.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:27:0b:1a:6d:16:f2:82:10:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=2cb5d2db-e6de-4aa9-825a-2f15ed0e20fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:62:a0:ce:a9:b6:be:eb:cc:c2:05:3d:87: 38:a1:fe:60:96:75:1e:1a:b7:82:4f:3d:87:a2:f3: 16:ea:02:f8:ae:f7:00:8c:5b:10:50:56:af:4b:99: 13:7e:23:32:88:79:f5:f6:34:25:a7:30:22:f5:d8: c9:79:dd:31:87:0a:5b:e6:47:98:21:14:c6:a4:50: b5:06:c9:fc:4b:76:db:20:ce:17:72:de:10:27:36: 25:89:0b:e2:fe:33:58:3c:f6:d1:38:ee:fe:ab:80: 28:76:ba:59:9f:34:51:9c:bc:5c:b8:af:6d:3b:f4: 2f:3b:0c:15:7a:3a:b6:77:56:8f:74:e8:dd:ff:e1: 18:bb:81:45:c0:b6:91:39:b5:6b:87:b0:70:3c:1f: ad:10:1b:1f:64:3c:0f:63:dd:6c:12:37:81:40:68: 21:03:51:3c:e7:cf:93:a6:51:8d:48:1f:88:ad:a4: 17:b4:82:f2:a5:c3:54:57:0c:63:74:c3:70:de:35: 62:f4:de:30:80:2d:b7:e9:8b:78:10:93:4a:7c:55: b0:95:9b:6d:b3:db:c1:34:67:9f:c7:9e:ff:e8:19: bb:49:a5:45:39:3a:9e:51:10:fc:35:90:93:ad:d0: c8:48:96:88:64:57:82:6a:35:1b:05:00:84:42:b9: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FA:50:79:E3:8C:FE:3B:AF:DB:CA:FF:82:BD:00:07:D5:8E:0F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6085afda-92ea-3a98-afe7-df16e71c8738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.130.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a7:62:b3:8e:96:f9:1e:15:78:7a:2a:14:c6:3c:7f:09:f4: e1:4f:eb:49:0b:5e:6b:7e:cb:a0:e7:13:ab:b1:fd:6d:93:cf: 8f:ae:59:6c:d7:14:0e:48:28:96:77:90:0f:3a:13:00:a7:99: 09:b4:0c:e4:3c:52:8e:b3:5c:5c:25:c9:79:59:c9:d9:4d:f0: 00:a8:ea:26:e7:b6:de:49:14:5e:cb:31:62:43:73:f2:54:a4: d0:ef:a7:94:09:5b:73:b8:37:a4:da:07:14:3f:30:58:c7:53: 1a:87:3e:42:e7:97:dc:e6:fa:2d:a4:29:e2:55:3f:4d:58:46: b0:b6:e8:9e:07:ee:2f:3c:51:e1:d2:23:29:f5:71:5c:d0:37: a4:bf:b2:b4:26:9f:8c:af:71:91:d2:3f:ad:0e:6a:1d:28:da: e0:68:47:41:e6:db:c9:b2:b2:88:59:29:62:25:d9:74:0c:c9: de:96:17:ef:6e:26:d7:c7:00:33:d1:f7:86:cf:41:fd:e2:92: 92:cf:e0:ef:ae:91:df:bb:ff:63:de:c8:12:61:7d:b8:fa:49: 41:15:ca:e0:b8:96:58:a5:a0:2e:2d:be:23:df:33:0e:1d:df: 04:b1:4a:d8:34:37:40:46:cd:c9:34:1c:63:98:b1:92:47:19: 81:00:a5:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoicLGm0W8oIQVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk MmNiNWQyZGItZTZkZS00YWE5LTgyNWEtMmYxNWVkMGUyMGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCdioM6ptr7rzMIFPYc4of5glnUeGreCTz2H ovMW6gL4rvcAjFsQUFavS5kTfiMyiHn19jQlpzAi9djJed0xhwpb5keYIRTGpFC1 Bsn8S3bbIM4Xct4QJzYliQvi/jNYPPbROO7+q4AodrpZnzRRnLxcuK9tO/QvOwwV ejq2d1aPdOjd/+EYu4FFwLaRObVrh7BwPB+tEBsfZDwPY91sEjeBQGghA1E858+T plGNSB+IraQXtILypcNUVwxjdMNw3jVi9N4wgC236Yt4EJNKfFWwlZtts9vBNGef x57/6Bm7SaVFOTqeURD8NZCTrdDISJaIZFeCajUbBQCEQrniFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM36UHnjjP47r9vK/4K9AAfVjg8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjA4NWFmZGEtOTJlYS0z YTk4LWFmZTctZGYxNmU3MWM4NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGnYrOOlvkeFXh6KhTGPH8J9OFP60kLXmt+y6DnE6ux/W2Tz4+uWWzX FA5IKJZ3kA86EwCnmQm0DOQ8Uo6zXFwlyXlZydlN8ACo6ibntt5JFF7LMWJDc/JU pNDvp5QJW3O4N6TaBxQ/MFjHUxqHPkLnl9zm+i2kKeJVP01YRrC26J4H7i88UeHS Iyn1cVzQN6S/srQmn4yvcZHSP60Oah0o2uBoR0Hm28mysohZKWIl2XQMyd6WF+9u JtfHADPR94bPQf3ikpLP4O+ukd+7/2PeyBJhfbj6SUEVyuC4lliloC4tviPfMw4d 3wSxStg0N0BGzck0HGOYsZJHGYEApeQ= -----END CERTIFICATE-----Generated at Thu Sep 24 06:34:06 2026 by rpki-client