$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d810d5fd-eb55-3893-8279-e1c69a1b7a38.roa File: d810d5fd-eb55-3893-8279-e1c69a1b7a38.roa (raw, json) Hash identifier: ZiAyHY3/Ihdc2QEavDryxTEip6vuUDvsMh6iOidjZeQ= Subject key identifier: D2:AA:05:38:DD:56:43:94:7F:BD:BC:67:A3:A1:54:40:43:11:E4:B8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D91C020ABD3CC72D11ABE6C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d810d5fd-eb55-3893-8279-e1c69a1b7a38.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 31898 IP address blocks: 149.118.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:20:ab:d3:cc:72:d1:1a:be:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=f78f0acb-acb7-4370-881c-12b4cb188c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:ae:59:56:e8:cc:b1:1f:d8:41:0f:41:a5: fb:d1:2f:a8:92:28:82:40:43:fa:21:10:ca:8a:b5: 22:c7:62:75:bf:b5:18:c7:79:ff:a5:a4:f0:fa:4b: fd:0c:ed:9e:8f:c8:e9:e6:2a:9d:5b:f4:3f:93:ad: 76:38:2e:55:2c:66:3d:b1:8d:64:f8:ea:ed:1d:c8: 58:30:c1:76:ed:a9:88:3e:94:0e:69:80:d3:d4:11: f3:63:bb:97:7a:16:d2:c4:9a:f5:e3:a7:e8:69:0d: ef:76:63:0a:e2:81:e7:ae:df:82:6c:ab:1d:bc:f9: bf:f7:39:8e:28:3f:3a:36:06:4c:bc:d4:50:d9:d9: 42:1f:d1:68:f7:6a:f3:ee:8f:92:c2:48:a9:d8:44: 35:88:10:db:e2:54:22:b3:41:9b:e0:95:9a:6a:cb: bb:49:d5:5d:5f:b3:0a:ab:87:98:dd:7c:3b:cb:1b: b5:28:a4:dd:fd:9f:e6:a5:5c:96:e2:42:b0:81:ae: 71:88:81:69:f3:96:88:52:1a:7b:ed:7e:32:18:a0: 02:05:79:cb:86:7d:47:e9:7d:fd:e6:24:b1:ea:bf: 8a:11:bc:77:7e:53:98:0a:76:e5:28:2c:b4:da:d3: 76:d6:2b:2c:26:be:09:b5:28:d0:ce:1d:0b:2e:e5: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AA:05:38:DD:56:43:94:7F:BD:BC:67:A3:A1:54:40:43:11:E4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d810d5fd-eb55-3893-8279-e1c69a1b7a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:97:a4:83:2b:cc:44:29:72:27:f5:77:ce:fe:a1:e1:fa:f8: 75:45:6c:1f:33:6d:a6:f3:bb:95:d1:01:ba:bc:5b:96:4a:8e: 65:3e:f3:6c:ab:03:53:64:0c:14:43:7f:41:8d:50:f9:e0:64: 0f:cd:75:fb:2b:da:9d:7e:65:06:54:91:f2:f2:e0:9e:bf:03: a3:50:6b:91:01:6e:47:52:8d:0f:bc:ea:04:b7:06:f3:99:b4: 5b:ed:4d:5e:6f:ec:26:d6:4b:77:47:3a:32:6c:07:25:04:b9: 02:ad:74:01:59:63:21:a1:2b:96:64:41:16:23:5e:b8:d0:44: d9:26:b3:be:9c:d4:3e:11:10:cc:47:c3:9a:4d:67:ba:c1:f8: 63:a4:1c:42:6d:95:39:50:c3:c8:20:24:29:57:a9:6b:8c:25: fd:4d:0f:bc:7b:39:58:81:a9:27:3d:58:88:ed:70:90:9f:e2: cc:d4:97:17:cb:86:d5:3f:43:e2:8b:df:5c:79:ec:75:f7:ca: 4b:49:43:ba:79:08:6f:51:76:be:2a:7c:f9:1a:c2:2f:56:a6: d6:ec:5e:35:fa:04:f9:63:37:76:34:87:7a:db:a0:76:fa:63: 63:d9:86:47:55:66:7c:d5:c2:dd:50:bb:ec:5b:46:07:46:76: 6a:18:f9:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwCCr08xy0Rq+bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk Zjc4ZjBhY2ItYWNiNy00MzcwLTg4MWMtMTJiNGNiMTg4YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbauWVbozLEf2EEPQaX70S+okiiCQEP6IRDK irUix2J1v7UYx3n/paTw+kv9DO2ej8jp5iqdW/Q/k612OC5VLGY9sY1k+OrtHchY MMF27amIPpQOaYDT1BHzY7uXehbSxJr146foaQ3vdmMK4oHnrt+CbKsdvPm/9zmO KD86NgZMvNRQ2dlCH9Fo92rz7o+Swkip2EQ1iBDb4lQis0Gb4JWaasu7SdVdX7MK q4eY3Xw7yxu1KKTd/Z/mpVyW4kKwga5xiIFp85aIUhp77X4yGKACBXnLhn1H6X39 5iSx6r+KEbx3flOYCnblKCy02tN21issJr4JtSjQzh0LLuVDKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKqBTjdVkOUf728Z6OhVEBDEeS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDgxMGQ1ZmQtZWI1NS0z ODkzLTgyNzktZTFjNjlhMWI3YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlXaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSXpIMrzEQpcif1d87+oeH6+HVFbB8zbabzu5XRAbq8W5ZKjmU+82yr A1NkDBRDf0GNUPngZA/Ndfsr2p1+ZQZUkfLy4J6/A6NQa5EBbkdSjQ+86gS3BvOZ tFvtTV5v7CbWS3dHOjJsByUEuQKtdAFZYyGhK5ZkQRYjXrjQRNkms76c1D4REMxH w5pNZ7rB+GOkHEJtlTlQw8ggJClXqWuMJf1ND7x7OViBqSc9WIjtcJCf4szUlxfL htU/Q+KL31x57HX3yktJQ7p5CG9Rdr4qfPkawi9WptbsXjX6BPljN3Y0h3rboHb6 Y2PZhkdVZnzVwt1Qu+xbRgdGdmoY+QQ= -----END CERTIFICATE-----Generated at Wed May 13 05:39:32 2026 by rpki-client