$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbf626ee-213b-3586-8c76-b7454bccd0d3.roa File: fbf626ee-213b-3586-8c76-b7454bccd0d3.roa (raw, json) Hash identifier: yF6z0xjDHZcg2kSplvDkGZdz53R48lDtdosEGcpFsqk= Subject key identifier: 16:96:C3:B1:48:63:1B:9E:B5:97:19:86:55:B0:B3:95:DE:45:88:DB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EF9E20761E082F6939BF5E800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbf626ee-213b-3586-8c76-b7454bccd0d3.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 54253 IP address blocks: 149.118.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:07:61:e0:82:f6:93:9b:f5:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=b8f904be-f564-4e4e-9a97-db6521e5512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:b5:d3:a0:e7:43:c9:67:62:ff:9e:7d:ab: 51:dc:82:27:05:c1:68:ea:86:33:cb:39:5f:3d:c3: 16:b7:fe:ec:c7:17:d2:42:2e:f8:bd:0e:9b:ff:f6: 39:63:af:47:ea:45:67:62:76:62:c1:f2:06:d2:7b: 13:eb:5c:a6:32:a4:bf:7b:ad:d6:d9:4b:a8:37:ce: b7:15:a3:ac:7d:ea:b0:88:d1:64:a0:c3:5d:b4:ab: 5c:19:bd:2d:83:6b:27:e2:77:35:b3:eb:9c:f7:86: 51:b8:88:2b:56:92:87:4d:96:dd:a3:40:9c:4a:13: 06:41:d4:99:0a:7a:e6:33:6f:f9:8d:57:c1:33:4d: 95:75:9e:e3:b7:d7:11:eb:f2:3c:5f:68:11:55:0f: 1a:14:1b:b5:72:6c:e1:c2:1f:13:2b:f9:e2:48:6f: 72:07:b0:a5:ab:64:9c:a4:4d:e5:e1:e8:02:17:96: 58:f3:eb:73:60:5b:cb:d8:13:d6:ba:23:f4:64:a8: a0:51:b8:1e:96:ff:f6:f5:9f:93:86:31:b4:c6:d7: 5d:50:5d:7d:d9:c5:23:55:c2:06:d1:97:0d:c7:fe: a9:63:53:12:12:97:47:97:31:05:67:1c:00:17:cd: b1:4d:51:76:39:4f:ba:5d:63:a0:16:2e:65:eb:3e: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:96:C3:B1:48:63:1B:9E:B5:97:19:86:55:B0:B3:95:DE:45:88:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbf626ee-213b-3586-8c76-b7454bccd0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:34:c5:5a:30:2b:ef:cc:f0:2c:d3:6a:c4:f8:3b:aa:f0:bc: c9:dc:e7:37:74:a8:f8:de:8e:24:3e:16:31:e4:09:e2:7d:f4: 85:a2:7c:4d:0f:30:5c:9f:95:46:82:43:3a:c8:b2:33:f5:0d: 54:99:00:e1:64:ce:41:6a:e6:ea:f8:26:23:90:8b:12:1b:8f: 30:c2:48:35:22:f0:df:d0:0f:41:ca:b6:d9:6c:00:47:05:ab: 0e:f7:50:30:d9:8a:29:e8:a1:fe:79:46:a0:92:ed:c4:55:92: 75:26:28:46:c8:98:3d:b7:c6:04:a3:11:d5:b3:5d:7b:ed:a2: f7:51:57:1c:d4:b6:71:0c:93:aa:c6:10:83:92:de:9e:6b:39: 9f:b3:b6:b5:82:76:38:a9:38:98:89:bd:df:33:4b:ef:a4:6b: 22:b6:b3:46:14:bb:e6:5d:ac:49:41:a4:50:23:6f:c5:01:f9: f6:4a:8f:68:ee:8c:6e:81:a9:74:cf:8b:dc:ef:75:8f:a8:38: 38:33:45:a4:e9:66:d0:e9:0b:21:31:18:7b:0e:9a:92:74:f3: 72:f0:73:f0:02:37:17:b7:b5:d1:56:56:50:00:13:23:e1:c6: 8d:96:7c:40:d9:f5:6c:df:79:c5:c3:44:2c:50:3d:cf:3a:d9: 3c:0b:c1:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754gdh4IL2k5v16AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk YjhmOTA0YmUtZjU2NC00ZTRlLTlhOTctZGI2NTIxZTU1MTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPS106DnQ8lnYv+efatR3IInBcFo6oYzyzlf PcMWt/7sxxfSQi74vQ6b//Y5Y69H6kVnYnZiwfIG0nsT61ymMqS/e63W2UuoN863 FaOsfeqwiNFkoMNdtKtcGb0tg2sn4nc1s+uc94ZRuIgrVpKHTZbdo0CcShMGQdSZ CnrmM2/5jVfBM02VdZ7jt9cR6/I8X2gRVQ8aFBu1cmzhwh8TK/niSG9yB7Clq2Sc pE3l4egCF5ZY8+tzYFvL2BPWuiP0ZKigUbgelv/29Z+ThjG0xtddUF192cUjVcIG 0ZcNx/6pY1MSEpdHlzEFZxwAF82xTVF2OU+6XWOgFi5l6z6e2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaWw7FIYxuetZcZhlWws5XeRYjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmJmNjI2ZWUtMjEzYi0z NTg2LThjNzYtYjc0NTRiY2NkMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlXYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo0xVowK+/M8CzTasT4O6rwvMnc5zd0qPjejiQ+FjHkCeJ99IWifE0P MFyflUaCQzrIsjP1DVSZAOFkzkFq5ur4JiOQixIbjzDCSDUi8N/QD0HKttlsAEcF qw73UDDZiinoof55RqCS7cRVknUmKEbImD23xgSjEdWzXXvtovdRVxzUtnEMk6rG EIOS3p5rOZ+ztrWCdjipOJiJvd8zS++kayK2s0YUu+ZdrElBpFAjb8UB+fZKj2ju jG6BqXTPi9zvdY+oODgzRaTpZtDpCyExGHsOmpJ083Lwc/ACNxe3tdFWVlAAEyPh xo2WfEDZ9WzfecXDRCxQPc862TwLwa8= -----END CERTIFICATE-----Generated at Thu Sep 24 03:22:04 2026 by rpki-client