$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4b1c70d-9ff6-3e66-8b6f-7cc8b43243f1.roa File: e4b1c70d-9ff6-3e66-8b6f-7cc8b43243f1.roa (raw, json) Hash identifier: Hb/jQB9GibIMpwfxopAjv8WuiWVc6vZLRAHOHQYHmZg= Subject key identifier: 97:2F:A8:91:22:F6:D6:3B:7E:88:08:31:72:A1:F9:6E:D2:3C:C4:03 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F130248D134A272A2B82FAFD8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4b1c70d-9ff6-3e66-8b6f-7cc8b43243f1.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 149.118.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:48:d1:34:a2:72:a2:b8:2f:af:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=2c14aa10-390f-4cde-9245-af006406a100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:ba:ed:23:23:91:e1:df:55:eb:a8:57:ec: fb:13:ce:5e:ad:41:9e:22:c4:41:a0:06:76:1f:bd: f5:f1:33:82:28:8d:88:ff:a1:c5:f8:28:38:cb:02: ea:d5:6f:55:6f:49:13:c2:34:0c:48:36:51:85:f2: af:5a:39:51:0f:7d:c9:b2:2f:20:4a:25:dc:4d:e2: 81:7a:99:fc:8d:e4:40:c8:ca:b2:d3:b7:07:e2:6c: c1:e9:b4:a5:f7:29:2c:bf:ce:da:c7:16:91:b3:51: 2d:d3:06:af:36:8e:59:b5:8a:61:5f:60:51:b5:71: 41:d8:6c:5d:e7:f3:3f:66:7d:1e:aa:0b:50:54:53: 5e:f5:a4:11:05:32:b4:63:ed:b0:e6:08:76:ca:0f: 0a:ad:e7:ba:25:da:9d:ef:48:5b:37:6c:6f:06:17: ad:14:f8:af:f9:7b:cd:79:3f:9e:11:79:23:5f:d0: 57:b9:5e:36:f6:60:9f:3f:b0:51:14:7b:02:29:6f: 2a:c2:08:30:83:4a:66:d7:be:87:48:73:cf:af:d6: 1b:74:91:6a:10:7e:2f:e7:be:6b:f0:b2:61:b6:60: 37:18:94:91:93:fb:30:f0:e0:12:f7:33:36:5c:c7: 0e:3d:2e:e6:21:f1:c3:d1:68:86:3c:45:e8:39:d4: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2F:A8:91:22:F6:D6:3B:7E:88:08:31:72:A1:F9:6E:D2:3C:C4:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4b1c70d-9ff6-3e66-8b6f-7cc8b43243f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:16:49:da:a6:1c:69:e4:51:2a:18:1d:be:18:12:09:68:e9: 04:70:6c:e4:d8:0a:20:4d:df:ab:82:db:08:12:16:dc:63:d6: 13:5f:10:72:ac:f6:e5:46:da:8b:5e:bf:f5:57:25:f0:3f:26: 1b:6c:ef:a5:0b:c6:c6:ab:ad:8e:4c:aa:e8:64:3a:ae:dc:7e: c8:c4:48:1a:a5:ed:a4:b8:6a:8c:bf:0c:27:1e:6f:23:b3:7e: 2f:79:38:68:b2:de:3b:16:42:39:e6:e7:51:26:78:ac:85:18: c7:6e:6c:37:dd:2d:a9:58:33:1c:f8:1a:52:dd:cd:2e:dc:0f: 6c:60:f5:4d:7f:c0:1b:2d:c7:f9:82:e0:46:07:26:5d:e0:3d: ed:2d:2b:2d:a1:86:34:1b:fd:c1:ee:53:46:78:53:29:89:0c: 58:b8:41:72:a9:db:cb:53:42:a4:a0:66:12:87:65:6a:cc:47: 34:5c:2b:ff:14:07:8d:d0:2f:20:e7:14:0e:14:ca:f2:66:b2: c8:11:51:dd:af:5a:03:a7:9b:e5:eb:75:fc:37:e0:b2:32:46: 97:ec:26:b0:ed:36:09:5f:3f:79:a2:7c:fb:5c:95:fe:14:43: 28:d7:af:83:ec:93:d7:3f:f5:af:83:f8:e5:0a:6f:2e:d3:4b: c3:9b:38:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkjRNKJyorgvr9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MmMxNGFhMTAtMzkwZi00Y2RlLTkyNDUtYWYwMDY0MDZhMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJW67SMjkeHfVeuoV+z7E85erUGeIsRBoAZ2 H7318TOCKI2I/6HF+Cg4ywLq1W9Vb0kTwjQMSDZRhfKvWjlRD33Jsi8gSiXcTeKB epn8jeRAyMqy07cH4mzB6bSl9yksv87axxaRs1Et0wavNo5ZtYphX2BRtXFB2Gxd 5/M/Zn0eqgtQVFNe9aQRBTK0Y+2w5gh2yg8Kree6Jdqd70hbN2xvBhetFPiv+XvN eT+eEXkjX9BXuV429mCfP7BRFHsCKW8qwggwg0pm176HSHPPr9YbdJFqEH4v575r 8LJhtmA3GJSRk/sw8OAS9zM2XMcOPS7mIfHD0WiGPEXoOdRLeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcvqJEi9tY7fogIMXKh+W7SPMQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTRiMWM3MGQtOWZmNi0z ZTY2LThiNmYtN2NjOGI0MzI0M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElXZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoWSdqmHGnkUSoYHb4YEglo6QRwbOTYCiBN36uC2wgSFtxj1hNfEHKs 9uVG2otev/VXJfA/Jhts76ULxsarrY5MquhkOq7cfsjESBql7aS4aoy/DCcebyOz fi95OGiy3jsWQjnm51EmeKyFGMdubDfdLalYMxz4GlLdzS7cD2xg9U1/wBstx/mC 4EYHJl3gPe0tKy2hhjQb/cHuU0Z4UymJDFi4QXKp28tTQqSgZhKHZWrMRzRcK/8U B43QLyDnFA4UyvJmssgRUd2vWgOnm+Xrdfw34LIyRpfsJrDtNglfP3mifPtclf4U QyjXr4Psk9c/9a+D+OUKby7TS8ObOM8= -----END CERTIFICATE-----Generated at Wed Sep 23 03:04:18 2026 by rpki-client