$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa File: 0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa (raw, json) Hash identifier: Vw/dnFFnsehVdVe6gJpsRVkRtHTkIt5C026yAIGq9e8= Subject key identifier: C1:4D:37:77:FD:EF:A4:B2:AE:94:68:63:BF:08:54:7D:EF:CF:91:EA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8C2A984F95AFF881E724A000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 139.177.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:98:4f:95:af:f8:81:e7:24:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=07368b30-68d0-4e8e-a0b3-8b2998bc2f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:e6:49:ed:02:f7:8a:f4:26:b9:17:c9:b3: ba:c3:29:10:5d:23:f0:ea:10:88:d5:51:64:d0:95: e6:b1:d0:96:7e:98:4a:3c:c8:52:ae:a9:6d:5c:47: 7c:50:5c:d0:95:52:f9:19:ea:22:78:30:fa:1d:84: b3:ed:15:01:33:ac:99:c6:29:e0:c6:03:90:63:6a: 7c:5c:6d:3c:1d:39:31:60:a8:37:01:47:0c:a0:60: e0:fc:9a:06:c2:9a:a5:53:72:47:be:18:16:77:71: b8:5f:34:7d:84:47:f7:73:63:25:6f:0e:ab:9b:2c: 79:a0:88:e3:a4:36:b7:4e:ac:48:2e:14:a3:f2:22: c8:93:61:82:54:52:2a:a2:68:65:ac:a5:af:fa:3e: 13:e2:a0:a6:72:cb:80:40:32:b0:03:a9:89:42:ef: 58:78:95:15:13:ec:44:72:5d:81:b6:cd:1c:dd:19: b7:37:96:21:f2:e6:ea:2b:1f:4e:c8:d1:8b:38:ef: 53:4e:0a:78:3f:8f:a2:60:7e:2f:f1:d1:c9:55:1b: d9:ad:e0:ff:ab:01:43:ed:61:4e:31:c9:46:1f:77: 87:91:cd:f5:01:b3:aa:b7:b3:ed:3a:0c:40:07:2f: 95:65:80:d5:63:85:88:31:38:e4:a1:e2:24:24:6d: 93:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4D:37:77:FD:EF:A4:B2:AE:94:68:63:BF:08:54:7D:EF:CF:91:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 139.177.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:74:97:9a:ab:37:d6:95:c6:0d:fa:e5:8e:ea:02:9c:02:ac: 11:2e:c9:be:a5:c1:66:5f:81:f7:3a:f3:55:ba:0e:e6:66:5d: 1a:f4:bc:b7:cb:8b:cf:24:da:f7:97:6f:14:52:cd:30:d3:b6: 39:c6:ed:e5:d2:be:34:64:05:07:5b:80:ac:89:63:02:24:a9: 2b:a1:d0:f8:db:5a:80:82:eb:ad:5c:af:cb:5a:70:a4:f6:e8: ce:3e:e1:e6:83:e4:27:f4:9c:09:76:c6:e7:1e:0e:41:81:fd: 2f:f0:bc:2c:be:55:e0:fd:a0:7e:ca:2c:bc:ba:87:3b:8e:a6: c3:2b:b8:ba:f4:c3:59:0c:0f:44:29:57:50:1b:43:ad:4c:ed: ed:40:26:65:2a:9c:b9:25:96:a4:ff:36:cd:44:a0:f4:73:41: 8c:4c:5a:a9:56:1b:19:ee:29:28:f6:2d:60:31:54:01:06:0b: c4:4e:8e:51:f9:27:2e:9d:5a:1d:59:d9:82:fa:c8:a9:fa:b5: dd:07:ca:74:9a:3b:cc:09:23:67:f0:59:03:03:07:a9:22:17: d1:03:9d:8c:60:68:0d:38:f0:6a:dd:bc:86:a3:63:80:8e:fa: cb:77:0d:1f:a8:4c:21:7b:9a:d7:51:01:2a:d9:93:82:14:05: 31:6e:ed:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKphPla/4geckoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MDczNjhiMzAtNjhkMC00ZThlLWEwYjMtOGIyOTk4YmMyZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk3mSe0C94r0JrkXybO6wykQXSPw6hCI1VFk 0JXmsdCWfphKPMhSrqltXEd8UFzQlVL5GeoieDD6HYSz7RUBM6yZxingxgOQY2p8 XG08HTkxYKg3AUcMoGDg/JoGwpqlU3JHvhgWd3G4XzR9hEf3c2Mlbw6rmyx5oIjj pDa3TqxILhSj8iLIk2GCVFIqomhlrKWv+j4T4qCmcsuAQDKwA6mJQu9YeJUVE+xE cl2Bts0c3Rm3N5Yh8ubqKx9OyNGLOO9TTgp4P4+iYH4v8dHJVRvZreD/qwFD7WFO MclGH3eHkc31AbOqt7PtOgxABy+VZYDVY4WIMTjkoeIkJG2TkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFNN3f976SyrpRoY78IVH3vz5HqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGQ1Y2Q4YmYtYjljZS0z ZWY1LTk2MTEtYTZmY2NjN2RiNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi7FgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV0l5qrN9aVxg365Y7qApwCrBEuyb6lwWZfgfc681W6DuZmXRr0vLfL i88k2veXbxRSzTDTtjnG7eXSvjRkBQdbgKyJYwIkqSuh0PjbWoCC661cr8tacKT2 6M4+4eaD5Cf0nAl2xuceDkGB/S/wvCy+VeD9oH7KLLy6hzuOpsMruLr0w1kMD0Qp V1AbQ61M7e1AJmUqnLkllqT/Ns1EoPRzQYxMWqlWGxnuKSj2LWAxVAEGC8ROjlH5 Jy6dWh1Z2YL6yKn6td0HynSaO8wJI2fwWQMDB6kiF9EDnYxgaA048GrdvIajY4CO +st3DR+oTCF7mtdRASrZk4IUBTFu7XU= -----END CERTIFICATE-----Generated at Wed May 13 05:32:36 2026 by rpki-client