$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bae3c99f-4b01-3fa4-9baf-89cd5d7158dc.roa File: bae3c99f-4b01-3fa4-9baf-89cd5d7158dc.roa (raw, json) Hash identifier: uCIDuT7lS3maZ8Cxq/5+z5emeRrsdDghbhsXVF9W/eQ= Subject key identifier: 32:2E:2B:E3:52:6A:1C:A6:D1:63:C3:F0:BC:AB:6E:18:67:9C:9C:92 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F9BCDEDB6D0224AF54A03E280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bae3c99f-4b01-3fa4-9baf-89cd5d7158dc.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 54253 IP address blocks: 149.118.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:ed:b6:d0:22:4a:f5:4a:03:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=764849a0-026d-485b-a7a8-96a330f19e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:95:1e:67:00:79:d7:d7:85:0f:a4:19:73: 39:f3:30:84:1b:93:0a:fc:8f:99:7a:e8:35:fc:85: 1b:60:35:b0:b6:29:ae:59:dd:a9:2a:39:f8:58:15: 50:ba:23:4a:4f:5e:a3:32:a6:da:33:e1:f5:0f:b2: 42:d6:b2:d1:e5:67:d5:72:6a:ce:ac:07:18:3a:c4: a7:46:60:46:b8:5c:3e:86:f9:47:0d:63:34:b6:74: cb:78:9d:b5:fa:24:67:25:e8:4e:de:7e:22:1f:02: 70:7b:79:55:c9:cb:d1:ec:85:f1:7a:6e:e7:ba:3b: 69:ac:33:2c:67:6c:96:2b:d9:e4:de:6e:96:0e:ff: 5c:80:eb:23:74:49:2a:a1:6e:98:22:fe:83:86:cb: da:12:06:37:9e:d5:33:e5:25:91:98:25:80:14:33: b2:a9:7b:ea:43:76:56:ea:48:55:87:4d:a5:b2:b4: 41:3e:12:4f:4e:11:e4:54:b9:8b:16:1c:68:5a:14: 23:f9:ad:fc:4c:2c:50:3a:58:fe:d7:32:3d:55:a0: ff:e6:ca:1b:1c:cc:30:77:ba:37:f7:16:f0:c3:b5: 86:54:4f:bd:97:ed:19:38:dd:52:6f:16:ec:e1:a7: f1:e1:fb:ba:ce:d9:44:3d:8b:70:3c:ae:fb:26:f9: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2E:2B:E3:52:6A:1C:A6:D1:63:C3:F0:BC:AB:6E:18:67:9C:9C:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bae3c99f-4b01-3fa4-9baf-89cd5d7158dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:71:40:06:85:fc:6d:ba:40:44:13:88:1d:5d:63:82:a7:7b: f3:6f:c7:d0:4e:67:c0:9d:d0:ab:48:32:b1:ef:97:05:1e:4c: cd:cd:76:0c:7e:bf:40:53:50:8e:2b:7c:62:e5:a2:cf:ac:df: 3c:1c:b1:6d:fc:da:11:b1:7f:69:f6:66:71:d3:45:95:6b:cc: f7:21:99:9a:52:a8:83:fe:36:60:dd:4e:4c:d6:0e:89:a9:b7: 51:c9:55:31:1c:49:bc:da:98:7a:52:cb:6c:3a:bd:31:3f:a3: 9c:2a:f1:83:c9:20:60:8a:74:fb:e2:d2:b0:c7:c0:8d:aa:c1: f2:eb:08:61:4f:25:5d:22:cb:3f:c4:a1:9a:e4:de:6c:61:5b: d6:db:69:d3:3f:20:72:e2:84:df:3b:77:01:ae:7c:2a:ac:31: ea:27:bf:e6:54:3e:ff:a8:11:3e:14:14:46:13:48:2f:8d:14: da:7a:8d:dc:18:8b:73:1d:55:02:c6:b1:a5:56:ef:cd:9c:2b: 3b:83:15:d6:fc:58:0a:42:92:ba:68:ff:78:a5:82:9e:12:ee: cb:ba:86:f2:25:06:b6:8c:ea:c4:d2:92:65:33:20:4d:01:ce: 72:c0:9a:9d:86:44:fe:6d:41:f9:52:6f:6a:77:1c:64:f0:3b: 25:37:f2:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bze220CJK9UoD4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NzY0ODQ5YTAtMDI2ZC00ODViLWE3YTgtOTZhMzMwZjE5ZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy+VHmcAedfXhQ+kGXM58zCEG5MK/I+Zeug1 /IUbYDWwtimuWd2pKjn4WBVQuiNKT16jMqbaM+H1D7JC1rLR5WfVcmrOrAcYOsSn RmBGuFw+hvlHDWM0tnTLeJ21+iRnJehO3n4iHwJwe3lVycvR7IXxem7nujtprDMs Z2yWK9nk3m6WDv9cgOsjdEkqoW6YIv6DhsvaEgY3ntUz5SWRmCWAFDOyqXvqQ3ZW 6khVh02lsrRBPhJPThHkVLmLFhxoWhQj+a38TCxQOlj+1zI9VaD/5sobHMwwd7o3 9xbww7WGVE+9l+0ZON1Sbxbs4afx4fu6ztlEPYtwPK77JvmtgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIuK+NSahym0WPD8LyrbhhnnJySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmFlM2M5OWYtNGIwMS0z ZmE0LTliYWYtODljZDVkNzE1OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlXZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtxQAaF/G26QEQTiB1dY4Kne/Nvx9BOZ8Cd0KtIMrHvlwUeTM3Ndgx+ v0BTUI4rfGLlos+s3zwcsW382hGxf2n2ZnHTRZVrzPchmZpSqIP+NmDdTkzWDomp t1HJVTEcSbzamHpSy2w6vTE/o5wq8YPJIGCKdPvi0rDHwI2qwfLrCGFPJV0iyz/E oZrk3mxhW9bbadM/IHLihN87dwGufCqsMeonv+ZUPv+oET4UFEYTSC+NFNp6jdwY i3MdVQLGsaVW782cKzuDFdb8WApCkrpo/3ilgp4S7su6hvIlBraM6sTSkmUzIE0B znLAmp2GRP5tQflSb2p3HGTwOyU38vw= -----END CERTIFICATE-----Generated at Sun Nov 15 21:16:23 2026 by rpki-client