$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea47cf13-e59d-317b-8a4a-079dc506f9f7.roa File: ea47cf13-e59d-317b-8a4a-079dc506f9f7.roa (raw, json) Hash identifier: Sv/Bpnxp66gYFJ0ZsAHNvPqA5nTxBMpJzfRFAZIQTj8= Subject key identifier: 1F:C4:69:F8:C4:BF:5B:93:C6:03:2C:D3:61:68:AA:82:10:27:FF:46 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D91C020CF980C3AF3BB45B300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea47cf13-e59d-317b-8a4a-079dc506f9f7.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 31898 IP address blocks: 149.118.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:20:cf:98:0c:3a:f3:bb:45:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=958d1669-bc61-4586-aae1-6163fb65e114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c2:4e:b0:3c:2a:eb:22:78:e7:55:c9:39:6a: e9:23:06:46:69:b9:22:78:b6:8c:14:7c:13:40:60: bf:80:cb:5f:36:e7:fd:64:81:a2:09:72:d4:01:7b: 46:2a:3d:7b:fa:77:19:b9:37:98:85:20:2f:f0:be: 64:4c:46:32:c8:30:19:44:09:49:0c:14:b1:46:22: b2:13:e3:13:d0:8a:eb:06:f9:fd:ab:75:f6:40:53: 0a:0d:7e:8e:b5:d9:3e:5f:1e:b9:ac:56:6a:61:9a: 22:73:bf:f3:39:17:db:b9:59:f7:ab:ae:41:a7:73: b4:a3:ff:78:80:7e:18:6b:d6:13:61:ac:37:52:af: a0:47:4e:a8:7e:f1:6d:0f:66:70:b4:28:e6:15:50: 26:84:87:82:88:29:d9:b3:e0:7a:fd:61:bc:80:85: c1:41:ff:f0:79:34:85:56:e7:39:e4:32:ee:02:f2: 8b:78:2d:0d:8a:d2:9e:61:ea:ee:af:88:a2:13:89: b2:80:3c:ea:86:5d:12:48:22:5a:4a:d7:38:ca:0e: 77:ca:b0:af:e0:8a:c4:8e:e5:d3:a7:9d:b2:bc:b2: 81:e4:e6:b8:8c:23:f4:ff:b8:db:9d:b0:a8:91:b7: 21:dd:e4:12:20:9c:36:4c:2b:84:c7:be:18:ef:1f: 0d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C4:69:F8:C4:BF:5B:93:C6:03:2C:D3:61:68:AA:82:10:27:FF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea47cf13-e59d-317b-8a4a-079dc506f9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:89:5b:99:77:d4:85:2a:64:0b:cc:26:fe:4d:2d:5e:02:15: 6a:fe:fa:55:a0:fb:48:3e:0a:df:f7:ab:23:b9:a2:e4:d4:86: e8:14:7e:45:7a:59:48:07:f4:6c:a8:d9:63:32:80:99:f5:d1: ad:d2:c5:66:1b:b7:75:13:68:43:59:db:87:34:39:72:53:f1: 78:27:3a:11:d2:05:55:aa:06:07:fc:cf:f4:2a:59:87:96:be: d9:50:29:33:b2:4c:e4:b8:72:96:1a:3f:26:53:34:87:b4:af: 03:1e:79:8e:2f:08:0a:41:2e:3d:32:fa:98:86:b2:40:e1:10: c1:19:89:23:22:11:6d:1a:dc:fb:8b:2f:36:6f:0f:41:b5:fa: 91:f0:b1:3b:bd:f1:02:bf:00:76:db:ac:2c:fc:b6:2e:17:eb: 7c:01:6c:4f:cf:fb:3e:e9:5d:fc:de:e2:57:6d:24:9f:c0:5f: 76:11:ab:7a:30:7e:05:81:a9:cd:f3:7a:4a:8e:01:4d:b7:f4: f5:53:d8:1c:a2:da:96:5e:5b:2f:3a:be:bb:0e:83:f3:91:55: 6c:2f:f8:a6:bc:81:ff:9e:15:19:48:5c:36:74:9d:93:b2:b1: 83:ac:82:54:97:ab:36:44:85:b9:37:72:5b:0f:e5:07:35:a6: 79:f5:3d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwCDPmAw687tFswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OTU4ZDE2NjktYmM2MS00NTg2LWFhZTEtNjE2M2ZiNjVlMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcJOsDwq6yJ451XJOWrpIwZGabkieLaMFHwT QGC/gMtfNuf9ZIGiCXLUAXtGKj17+ncZuTeYhSAv8L5kTEYyyDAZRAlJDBSxRiKy E+MT0IrrBvn9q3X2QFMKDX6Otdk+Xx65rFZqYZoic7/zORfbuVn3q65Bp3O0o/94 gH4Ya9YTYaw3Uq+gR06ofvFtD2ZwtCjmFVAmhIeCiCnZs+B6/WG8gIXBQf/weTSF Vuc55DLuAvKLeC0NitKeYerur4iiE4mygDzqhl0SSCJaStc4yg53yrCv4IrEjuXT p52yvLKB5Oa4jCP0/7jbnbCokbch3eQSIJw2TCuEx74Y7x8NcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/EafjEv1uTxgMs02FoqoIQJ/9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWE0N2NmMTMtZTU5ZC0z MTdiLThhNGEtMDc5ZGM1MDZmOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaJW5l31IUqZAvMJv5NLV4CFWr++lWg+0g+Ct/3qyO5ouTUhugUfkV6 WUgH9Gyo2WMygJn10a3SxWYbt3UTaENZ24c0OXJT8XgnOhHSBVWqBgf8z/QqWYeW vtlQKTOyTOS4cpYaPyZTNIe0rwMeeY4vCApBLj0y+piGskDhEMEZiSMiEW0a3PuL LzZvD0G1+pHwsTu98QK/AHbbrCz8ti4X63wBbE/P+z7pXfze4ldtJJ/AX3YRq3ow fgWBqc3zekqOAU239PVT2Byi2pZeWy86vrsOg/ORVWwv+Ka8gf+eFRlIXDZ0nZOy sYOsglSXqzZEhbk3clsP5Qc1pnn1PWo= -----END CERTIFICATE-----Generated at Wed May 13 03:34:50 2026 by rpki-client