$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa File: cdaf3e33-82e0-3076-92c2-d497982c93fc.roa (raw, json) Hash identifier: sJ1MK0qW/as+wJwWjgdqLJRsnE3Wss3z9FGMYihpTTY= Subject key identifier: 71:5C:45:A9:61:DE:2D:28:8F:B9:00:8C:F6:D1:DE:77:37:2D:8B:F0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F497304B878F11CEE1ED68E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 149.118.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:04:b8:78:f1:1c:ee:1e:d6:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b3bb603c-7dea-4b95-88cf-734386afbd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:ed:71:2b:bc:f7:07:08:0a:0a:0c:0c:a4: 2f:66:e0:f5:83:f1:14:22:6f:59:01:71:9c:b9:8f: 37:d1:df:a5:15:87:8b:91:c4:36:33:e5:25:79:8a: 13:14:77:25:f2:e2:6f:b2:01:e6:3a:c8:22:56:b3: c1:46:6c:be:bc:65:34:fe:17:dd:87:cf:b2:a6:17: 35:92:a2:a2:94:4d:4b:d3:b6:1f:6b:eb:1b:7f:06: 7b:da:22:96:27:b5:63:38:bd:f6:c3:82:68:d2:1c: 21:f5:f3:92:36:e8:07:08:1a:7a:7e:e9:e5:8b:c1: 0f:99:5d:29:9b:2d:11:b7:59:4a:12:fa:bd:66:41: 11:30:8d:dc:37:86:d9:30:23:49:71:5f:c6:28:56: dd:d3:a1:36:f0:ed:40:86:f8:25:6e:3e:b2:0c:26: 4e:67:8b:4f:e3:b9:88:75:55:7b:f3:3d:73:90:eb: a6:0b:1c:41:91:87:90:a2:ce:18:f1:fe:c5:f4:bb: a4:69:6b:26:c9:2f:fd:72:9b:53:d4:19:83:04:c5: 59:12:d1:34:00:b4:09:76:8f:55:f7:0c:4a:45:4d: bc:2c:32:f1:e9:be:c4:5f:e4:34:36:0b:78:32:54: 31:6e:16:cc:e9:77:5f:6a:41:9c:e4:c8:7b:b7:e7: 87:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5C:45:A9:61:DE:2D:28:8F:B9:00:8C:F6:D1:DE:77:37:2D:8B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c4:32:c6:24:b0:2e:f0:b3:f2:3b:e7:e3:b7:19:27:09:19: 7c:51:31:18:26:62:d6:a8:2e:84:ab:d3:0d:a5:e0:c8:41:a9: 3a:01:49:d7:dc:2f:20:50:08:9b:9d:91:ab:96:df:90:25:33: e1:8f:58:8c:87:79:c8:6d:4e:94:da:41:c3:aa:84:ad:40:f2: 2b:8e:bf:af:00:dc:b8:88:61:dd:21:e1:5a:93:2c:dc:a2:2d: 1e:1f:3b:54:38:9d:9c:c3:6d:dd:7a:60:55:01:17:9d:63:93: a7:7d:e1:77:f3:33:3e:89:1c:f5:d5:77:2c:da:d2:d6:ed:55: c1:90:96:02:db:1c:6a:71:e3:87:d0:8a:2e:c4:a7:b4:5f:0c: 8e:2c:f3:a8:4a:d4:b6:db:b9:30:c9:d0:94:4c:4a:77:2b:1f: c5:f6:02:fd:b7:87:8b:75:59:a6:6d:0a:cd:21:1c:37:09:01: b4:de:e7:f5:3c:56:9f:71:50:2b:16:d0:90:a4:28:fa:9f:f0: e5:a1:16:36:66:32:3e:f4:c7:4e:d0:2c:7f:38:45:07:60:dd: ba:27:94:93:da:81:5c:65:2a:b0:3e:cd:8f:b7:c4:3c:32:3c: 47:71:7f:50:10:69:b3:ed:44:9c:13:8b:0a:58:3a:c8:09:d8: 9e:0a:1e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwS4ePEc7h7WjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjNiYjYwM2MtN2RlYS00Yjk1LTg4Y2YtNzM0Mzg2YWZiZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb3tcSu89wcICgoMDKQvZuD1g/EUIm9ZAXGc uY830d+lFYeLkcQ2M+UleYoTFHcl8uJvsgHmOsgiVrPBRmy+vGU0/hfdh8+yphc1 kqKilE1L07Yfa+sbfwZ72iKWJ7VjOL32w4Jo0hwh9fOSNugHCBp6funli8EPmV0p my0Rt1lKEvq9ZkERMI3cN4bZMCNJcV/GKFbd06E28O1Ahvglbj6yDCZOZ4tP47mI dVV78z1zkOumCxxBkYeQos4Y8f7F9LukaWsmyS/9cptT1BmDBMVZEtE0ALQJdo9V 9wxKRU28LDLx6b7EX+Q0Ngt4MlQxbhbM6XdfakGc5Mh7t+eHBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFcRalh3i0oj7kAjPbR3nc3LYvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2RhZjNlMzMtODJlMC0z MDc2LTkyYzItZDQ5Nzk4MmM5M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlXb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHEMsYksC7ws/I75+O3GScJGXxRMRgmYtaoLoSr0w2l4MhBqToBSdfc LyBQCJudkauW35AlM+GPWIyHechtTpTaQcOqhK1A8iuOv68A3LiIYd0h4VqTLNyi LR4fO1Q4nZzDbd16YFUBF51jk6d94XfzMz6JHPXVdyza0tbtVcGQlgLbHGpx44fQ ii7Ep7RfDI4s86hK1LbbuTDJ0JRMSncrH8X2Av23h4t1WaZtCs0hHDcJAbTe5/U8 Vp9xUCsW0JCkKPqf8OWhFjZmMj70x07QLH84RQdg3bonlJPagVxlKrA+zY+3xDwy PEdxf1AQabPtRJwTiwpYOsgJ2J4KHo4= -----END CERTIFICATE-----Generated at Fri Sep 25 21:44:09 2026 by rpki-client