$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4b1c70d-9ff6-3e66-8b6f-7cc8b43243f1.roa File: e4b1c70d-9ff6-3e66-8b6f-7cc8b43243f1.roa (raw, json) Hash identifier: 32PqTF3ntF217Nx5KRSKPJAyQSQ4BhoHcsgelFEgNbE= Subject key identifier: 60:74:28:17:68:21:AE:EB:89:42:AF:24:B4:29:5C:2D:AA:98:89:ED Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905AA5CC464F96B13F72FB40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4b1c70d-9ff6-3e66-8b6f-7cc8b43243f1.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 149.118.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:a5:cc:46:4f:96:b1:3f:72:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=c9efc5ed-5fcc-4fa4-98a4-6b394bd1a906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:e6:57:67:2f:86:6c:7e:2e:0d:db:db:f2: 98:12:c6:d3:1e:1d:07:d4:ce:03:24:53:2a:ac:6f: 23:d0:8b:f4:ab:56:d6:ed:78:aa:a9:51:96:a8:de: 09:25:d4:60:dc:16:cc:3c:e9:87:5d:e6:ed:7d:d7: 5b:7a:37:61:26:97:a1:0e:60:b1:ff:67:0b:19:9b: 5b:57:9f:4e:d2:e0:26:2d:98:67:b2:cd:a6:7b:2d: 0c:f4:5c:ad:b4:4c:a8:16:a5:8e:84:19:73:e7:21: 01:c5:b7:39:b7:27:fe:84:39:07:05:3c:76:e6:5d: 42:dc:bc:8a:c6:f8:c2:02:58:fb:53:68:ee:fb:68: 51:37:ad:af:6f:07:0d:a6:a6:52:89:96:f9:67:4b: f6:55:0e:e7:bd:aa:74:48:f4:9b:a9:de:6f:d8:9e: fb:f6:b9:fd:c6:d5:1e:b4:b1:d3:39:28:55:5c:81: b7:27:f0:21:fc:42:11:73:87:ba:1c:91:5e:44:80: 43:15:a6:42:43:a3:96:55:9c:68:1e:59:84:39:c6: 13:01:fd:b8:ec:69:1e:ba:50:f1:f4:72:81:ff:de: 1b:5f:d0:54:af:27:c8:bc:d4:9e:81:f3:6f:c6:76: f9:cc:87:2c:5e:92:8b:52:7c:ce:cc:3b:74:eb:a0: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:74:28:17:68:21:AE:EB:89:42:AF:24:B4:29:5C:2D:AA:98:89:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4b1c70d-9ff6-3e66-8b6f-7cc8b43243f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:33:f4:ea:a9:62:5e:cf:c9:23:86:0e:b1:f3:5e:bf:ad:99: 61:d4:22:e2:f9:12:e8:28:21:71:2e:02:e3:d4:e6:47:a2:39: ec:83:08:01:84:63:ee:75:9b:4f:bb:9e:af:3a:bb:c2:d8:7d: 3d:d3:7a:36:38:a8:84:67:8c:09:82:07:40:14:88:25:48:c3: 44:ee:5d:48:13:30:71:40:d9:7d:48:ac:9d:f1:5a:05:b4:b6: c6:e2:0a:6a:9a:05:96:34:08:60:1b:5e:d5:a8:5d:55:1a:76: 46:ba:bd:d1:b3:f8:b0:21:1e:a2:6d:13:fc:4a:0a:c6:a6:c9: 31:d0:97:ef:f9:f3:22:83:1f:49:24:4d:ab:b0:e4:dd:11:36: 7b:08:13:da:70:0f:d0:32:2c:44:22:1f:d5:6b:c7:94:16:4e: 43:2c:67:19:85:43:dc:d2:45:bf:e9:61:ad:7d:b7:19:7f:9a: b5:12:2d:9a:79:c6:ab:88:08:60:30:99:50:0c:05:6b:2f:e9: 7f:2d:fa:ed:c2:ff:e8:f0:c6:52:4a:84:7a:db:83:28:bf:5d: 6a:dd:3f:fd:2d:36:31:3f:1f:7f:cb:74:eb:48:80:fb:78:60: 43:71:38:53:14:3b:c9:7c:3c:42:33:95:46:dd:9b:99:84:b6: 0f:03:3d:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqXMRk+WsT9y+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk YzllZmM1ZWQtNWZjYy00ZmE0LTk4YTQtNmIzOTRiZDFhOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtujmV2cvhmx+Lg3b2/KYEsbTHh0H1M4DJFMq rG8j0Iv0q1bW7XiqqVGWqN4JJdRg3BbMPOmHXebtfddbejdhJpehDmCx/2cLGZtb V59O0uAmLZhnss2mey0M9FyttEyoFqWOhBlz5yEBxbc5tyf+hDkHBTx25l1C3LyK xvjCAlj7U2ju+2hRN62vbwcNpqZSiZb5Z0v2VQ7nvap0SPSbqd5v2J779rn9xtUe tLHTOShVXIG3J/Ah/EIRc4e6HJFeRIBDFaZCQ6OWVZxoHlmEOcYTAf247GkeulDx 9HKB/94bX9BUryfIvNSegfNvxnb5zIcsXpKLUnzOzDt066A4DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB0KBdoIa7riUKvJLQpXC2qmIntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTRiMWM3MGQtOWZmNi0z ZTY2LThiNmYtN2NjOGI0MzI0M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElXZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkz9OqpYl7PySOGDrHzXr+tmWHUIuL5EugoIXEuAuPU5keiOeyDCAGE Y+51m0+7nq86u8LYfT3TejY4qIRnjAmCB0AUiCVIw0TuXUgTMHFA2X1IrJ3xWgW0 tsbiCmqaBZY0CGAbXtWoXVUadka6vdGz+LAhHqJtE/xKCsamyTHQl+/58yKDH0kk Tauw5N0RNnsIE9pwD9AyLEQiH9Vrx5QWTkMsZxmFQ9zSRb/pYa19txl/mrUSLZp5 xquICGAwmVAMBWsv6X8t+u3C/+jwxlJKhHrbgyi/XWrdP/0tNjE/H3/LdOtIgPt4 YENxOFMUO8l8PEIzlUbdm5mEtg8DPUY= -----END CERTIFICATE-----Generated at Wed May 13 06:43:14 2026 by rpki-client