$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d22125b8-8575-39ae-a02b-0e84d98d5d79.roa File: d22125b8-8575-39ae-a02b-0e84d98d5d79.roa (raw, json) Hash identifier: jMxEFP9sWQZEJIAkY0r8BeqAtvskCme3p2smWOabqcQ= Subject key identifier: B1:6D:2A:08:34:0B:1F:B9:77:3F:52:7A:C6:22:E7:B6:5B:78:82:01 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D33FE573287C6D96497381700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d22125b8-8575-39ae-a02b-0e84d98d5d79.roa Signing time: Tue 17 Mar 2026 23:00:16 +0000 ROA not before: Tue 17 Mar 2026 23:00:16 +0000 ROA not after: Mon 15 Jun 2026 23:00:16 +0000 asID: 31898 IP address blocks: 149.118.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:fe:57:32:87:c6:d9:64:97:38:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 17 23:00:16 2026 GMT Not After : Jun 15 23:00:16 2026 GMT Subject: CN=881a08ed-20bc-4608-a671-42bc1eba0081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:75:c4:d5:74:31:13:df:3d:b2:9a:4c:d0: 52:33:ba:75:11:20:71:4e:15:9a:0c:8e:fa:37:82: b8:71:8b:79:4b:c8:7e:6c:33:65:12:12:43:1c:39: 56:e7:67:2a:e1:f5:82:24:68:cd:a5:0e:ab:5c:06: 51:ca:92:a4:97:e8:1c:a0:5d:96:c1:5d:41:3e:0a: 8d:11:ba:7b:2c:e5:5e:ff:5d:02:b2:42:d3:35:ec: 7b:cd:3a:d5:5c:fa:3f:54:3b:ce:48:dc:d3:b5:02: 60:29:6b:de:3d:22:4a:ca:81:03:3d:0b:06:1b:7e: 0c:7c:87:e9:63:d8:af:49:9c:af:6b:7f:da:ec:57: 2e:88:8e:86:86:65:f6:34:f4:5c:72:9e:9b:74:67: 17:8f:d7:48:c5:b4:03:18:65:c6:de:49:47:36:9a: 24:90:9f:54:b7:34:62:e0:40:98:9c:82:cb:26:ea: d8:64:a7:4a:dd:98:f5:93:a9:6c:ed:81:00:42:e0: d6:f3:75:06:d2:c9:60:73:1e:74:32:02:83:46:9a: 00:18:d5:40:73:98:c1:5b:d0:27:b6:dd:0b:f4:09: 23:7e:ab:93:f8:6e:34:77:73:b6:a0:1c:49:7e:05: 5d:48:1d:36:8c:44:29:05:27:3d:f0:fb:af:dc:35: c6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6D:2A:08:34:0B:1F:B9:77:3F:52:7A:C6:22:E7:B6:5B:78:82:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d22125b8-8575-39ae-a02b-0e84d98d5d79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a2:04:c6:1a:b4:ff:5d:85:11:3e:ef:da:cc:4a:d1:07:a0: ed:cc:21:14:41:53:39:19:0f:00:32:16:6f:59:46:5b:62:67: df:8e:54:36:ad:77:aa:af:75:15:66:09:b0:54:bf:f6:83:0f: 5a:f6:1c:73:c0:63:3c:f2:17:82:e2:50:db:83:79:67:ee:4f: aa:a0:5c:ea:bd:0c:27:c8:53:fa:ed:83:2d:01:b5:47:f6:5d: 21:b0:3d:28:7a:bf:b3:49:ad:e5:08:1c:da:b3:02:23:34:d4: 4d:9e:50:08:2c:b5:52:90:f1:e0:25:71:4d:c6:44:5d:b3:73: dd:44:32:42:cc:9b:a7:e0:d8:10:e6:31:2f:b8:d6:81:2e:99: 2b:34:99:44:55:e8:a4:a0:59:e4:ab:c0:04:3f:bb:f7:88:6e: 6d:aa:26:e6:a9:bb:3e:70:c8:dc:af:8b:4c:af:ed:9a:c2:21: bb:b2:64:4d:86:b4:3d:94:84:b2:3f:80:8b:47:8c:4e:8f:2e: 41:c3:e1:17:1f:4e:8e:26:dc:c9:e8:c9:80:5e:79:a0:80:a2: 24:e8:a2:10:90:69:f2:3c:4f:8e:c7:da:d1:4e:57:58:24:0c: c0:fe:6c:d4:5e:9a:3d:b2:f5:3e:a2:b1:a2:95:8c:cb:66:08: 38:f0:b7:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0z/lcyh8bZZJc4FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMxNzIzMDAxNloXDTI2MDYxNTIzMDAxNlowLzEtMCsGA1UEAxMk ODgxYTA4ZWQtMjBiYy00NjA4LWE2NzEtNDJiYzFlYmEwMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKx1xNV0MRPfPbKaTNBSM7p1ESBxThWaDI76 N4K4cYt5S8h+bDNlEhJDHDlW52cq4fWCJGjNpQ6rXAZRypKkl+gcoF2WwV1BPgqN Ebp7LOVe/10CskLTNex7zTrVXPo/VDvOSNzTtQJgKWvePSJKyoEDPQsGG34MfIfp Y9ivSZyva3/a7FcuiI6GhmX2NPRccp6bdGcXj9dIxbQDGGXG3klHNpokkJ9UtzRi 4ECYnILLJurYZKdK3Zj1k6ls7YEAQuDW83UG0slgcx50MgKDRpoAGNVAc5jBW9An tt0L9AkjfquT+G40d3O2oBxJfgVdSB02jEQpBSc98Puv3DXGSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFtKgg0Cx+5dz9SesYi57ZbeIIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDIyMTI1YjgtODU3NS0z OWFlLWEwMmItMGU4NGQ5OGQ1ZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXZSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGiBMYatP9dhRE+79rMStEHoO3MIRRBUzkZDwAyFm9ZRltiZ9+OVDat d6qvdRVmCbBUv/aDD1r2HHPAYzzyF4LiUNuDeWfuT6qgXOq9DCfIU/rtgy0BtUf2 XSGwPSh6v7NJreUIHNqzAiM01E2eUAgstVKQ8eAlcU3GRF2zc91EMkLMm6fg2BDm MS+41oEumSs0mURV6KSgWeSrwAQ/u/eIbm2qJuapuz5wyNyvi0yv7ZrCIbuyZE2G tD2UhLI/gItHjE6PLkHD4RcfTo4m3MnoyYBeeaCAoiToohCQafI8T47H2tFOV1gk DMD+bNRemj2y9T6isaKVjMtmCDjwt7g= -----END CERTIFICATE-----Generated at Thu Mar 26 10:42:09 2026 by rpki-client