$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f41b9-bed0-3232-b809-f3388884d979.roa File: 752f41b9-bed0-3232-b809-f3388884d979.roa (raw, json) Hash identifier: nML6c4AEbsVdBtWVuqZGZ3CRFVrKMKfXnJi3TDvjxJ8= Subject key identifier: DC:5D:48:A1:5D:AA:0C:D7:19:4D:F7:A8:C5:F5:32:0D:90:B9:A5:BB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1467AA9142DDFB3A123684B4 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f41b9-bed0-3232-b809-f3388884d979.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 149.118.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:aa:91:42:dd:fb:3a:12:36:84:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=4aa87ea5-0be8-48f0-addd-666734f9e2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:e4:87:66:d8:30:eb:9d:b7:b6:3a:14:44: 6c:39:a9:c5:27:a9:9e:e1:cc:67:d6:ab:6e:e1:fb: d0:08:8c:61:90:ea:2f:af:42:89:cb:83:56:a6:0a: 7a:c0:d6:c1:53:8c:a2:8c:5c:ae:62:14:43:ac:68: 0b:8b:9f:ac:41:74:1f:cd:62:c2:c5:4f:c1:a8:e2: 94:f3:31:4f:79:79:0d:d4:d5:e2:62:c0:11:ba:db: 29:44:f0:d4:5f:8e:0f:db:b8:ab:11:83:2b:90:66: 7b:a4:6c:8e:e4:20:38:62:25:0d:f1:91:b3:63:f7: a5:58:68:63:1a:d7:39:12:65:06:e9:94:9c:81:47: ce:69:f6:80:6c:2e:ab:75:e1:70:30:0b:25:84:b7: c6:ce:c5:43:1a:0a:35:5e:f1:7e:b8:cd:8b:91:34: a3:9a:7e:f8:71:9a:14:4b:22:4e:30:9b:da:9c:58: e0:0d:4b:88:a6:24:8b:3b:17:7c:c7:2c:23:61:f6: 4f:51:28:62:73:94:75:5a:3d:96:0d:8e:14:3c:88: 66:92:41:22:2a:ff:a3:8f:07:d4:75:11:a3:d2:b4: 69:b6:63:b7:ed:d7:a0:3e:ad:18:f4:bc:a5:1d:03: 29:24:6c:12:97:ab:9f:56:dd:6f:bd:d3:d3:50:4c: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5D:48:A1:5D:AA:0C:D7:19:4D:F7:A8:C5:F5:32:0D:90:B9:A5:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f41b9-bed0-3232-b809-f3388884d979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:21:d3:0c:fa:ca:e2:77:44:12:3f:ca:45:ea:43:28:46:f7: 81:d7:a2:a7:01:c1:d7:47:88:33:5b:a2:ce:7a:57:ab:67:23: 49:2c:69:0b:c0:08:8f:47:f5:db:3f:76:5a:34:83:1b:0e:e5: a0:29:d3:ce:13:23:8c:5f:3d:ce:c0:ce:9c:e3:87:bc:66:c5: c3:55:d8:2d:c6:d6:b6:1d:c3:e3:56:b5:8e:6a:92:bb:17:bc: 0f:ea:3c:99:3e:2a:d6:ef:c1:6f:dd:1e:2f:e0:5f:1c:9d:2d: 47:81:4b:8e:7a:1b:fe:49:fb:30:e8:04:74:e2:1f:4f:4d:7c: 03:f2:f7:86:09:d3:0a:d7:30:11:86:e7:04:7a:8f:75:49:f5: 13:1f:ea:e4:64:5a:21:90:6d:91:ca:45:ac:05:70:3e:e9:5b: 76:55:d7:3e:16:a9:6d:f4:ea:f7:95:e2:ac:ab:92:99:97:ba: 88:3d:4c:b5:ff:a3:64:3a:ba:8c:53:89:a6:3b:4d:1e:83:d3: 6b:94:a1:19:f8:c7:ae:cf:30:e6:5b:c5:72:68:62:27:7d:c4: 2c:89:eb:48:85:ef:c9:b4:77:e2:bb:ee:3c:9d:d8:9f:e0:10: 0f:e4:0f:d0:cb:17:bf:38:37:f4:d8:78:1f:fb:2e:30:e6:60: db:49:32:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6qRQt37OhI2hLQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NGFhODdlYTUtMGJlOC00OGYwLWFkZGQtNjY2NzM0ZjllMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua/kh2bYMOudt7Y6FERsOanFJ6me4cxn1qtu 4fvQCIxhkOovr0KJy4NWpgp6wNbBU4yijFyuYhRDrGgLi5+sQXQfzWLCxU/BqOKU 8zFPeXkN1NXiYsARutspRPDUX44P27irEYMrkGZ7pGyO5CA4YiUN8ZGzY/elWGhj Gtc5EmUG6ZScgUfOafaAbC6rdeFwMAslhLfGzsVDGgo1XvF+uM2LkTSjmn74cZoU SyJOMJvanFjgDUuIpiSLOxd8xywjYfZPUShic5R1Wj2WDY4UPIhmkkEiKv+jjwfU dRGj0rRptmO37degPq0Y9LylHQMpJGwSl6ufVt1vvdPTUExvqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxdSKFdqgzXGU33qMX1Mg2QuaW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzUyZjQxYjktYmVkMC0z MjMyLWI4MDktZjMzODg4ODRkOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUh0wz6yuJ3RBI/ykXqQyhG94HXoqcBwddHiDNbos56V6tnI0ksaQvA CI9H9ds/dlo0gxsO5aAp084TI4xfPc7Azpzjh7xmxcNV2C3G1rYdw+NWtY5qkrsX vA/qPJk+KtbvwW/dHi/gXxydLUeBS456G/5J+zDoBHTiH09NfAPy94YJ0wrXMBGG 5wR6j3VJ9RMf6uRkWiGQbZHKRawFcD7pW3ZV1z4WqW306veV4qyrkpmXuog9TLX/ o2Q6uoxTiaY7TR6D02uUoRn4x67PMOZbxXJoYid9xCyJ60iF78m0d+K77jyd2J/g EA/kD9DLF784N/TYeB/7LjDmYNtJMmk= -----END CERTIFICATE-----Generated at Thu Oct 1 15:06:50 2026 by rpki-client