$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1bdaa64e-b84c-349c-ad01-e3576cfc8d5b.roa File: 1bdaa64e-b84c-349c-ad01-e3576cfc8d5b.roa (raw, json) Hash identifier: P6qntoEFQ5P23s8tAK7sh6k4mfuOTsacBShKRq2JNjo= Subject key identifier: A7:3B:4C:89:C6:28:06:D2:77:5C:74:C2:27:06:1F:EA:1D:C1:4A:A8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E4FFAE8343FA1A24EA08C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1bdaa64e-b84c-349c-ad01-e3576cfc8d5b.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 142.0.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:4f:fa:e8:34:3f:a1:a2:4e:a0:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=916339c7-21a2-44c0-8059-a3b83dac01c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:9f:bf:b0:78:07:f0:51:f3:b1:26:76:34: c3:7d:e8:b2:41:8a:4a:e7:14:d1:e7:e7:d5:92:b4: c8:c4:cc:33:8c:94:33:1b:09:21:23:3c:86:c0:84: f6:a8:81:dd:07:28:6b:00:2b:5f:d4:f4:b7:85:f1: 40:59:25:f2:27:ec:2b:be:13:26:41:1b:03:d3:fe: 7e:70:9a:dd:89:23:ff:32:c8:05:f8:26:c5:15:0d: ca:2b:03:8d:e8:c0:47:97:3a:b2:9c:21:0a:ea:52: 89:60:9c:11:68:23:ee:c1:f5:76:1f:97:de:e8:e7: ac:c3:e3:04:5b:c1:ee:7d:e0:ec:1e:c4:d9:5c:01: 81:f5:da:59:0e:ba:75:29:6c:ed:38:9f:99:70:88: ef:37:5b:7c:4a:fc:a0:ef:9b:11:e3:26:4d:12:48: 61:d5:3a:23:dd:b7:3f:d4:b6:86:d8:9d:91:93:c6: d7:42:a8:c3:a9:41:a3:88:df:54:cc:8d:ac:79:9a: 54:7b:da:07:0d:d6:dc:9d:f5:92:a9:7a:f2:8c:08: 42:c3:12:64:2b:57:2e:8d:31:b4:3c:a2:1d:94:04: 28:04:da:6c:b5:ea:eb:22:80:4e:a2:d7:dc:a9:76: ce:35:27:29:7d:0e:91:63:1a:46:d0:53:84:43:09: 87:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3B:4C:89:C6:28:06:D2:77:5C:74:C2:27:06:1F:EA:1D:C1:4A:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1bdaa64e-b84c-349c-ad01-e3576cfc8d5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 142.0.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:94:33:00:ca:ab:1e:ea:a1:a9:4b:70:18:e8:c4:be:88:f1: 5e:16:8a:28:f1:36:71:d4:2a:ae:48:71:4e:2b:69:c9:af:1b: 3e:51:bd:10:93:ba:a7:a0:1b:c0:3a:bb:a5:6b:70:ad:e3:1a: 7b:b3:02:54:d6:20:e8:19:cc:3e:f5:2d:6b:b8:c0:10:39:e8: 8f:ba:2d:dc:24:74:5e:3e:69:7a:fe:b8:94:69:e3:1b:e9:58: 87:36:94:f2:af:a2:f1:57:86:72:71:b1:b0:c0:e3:99:c4:a8: 59:00:1a:fa:f7:b3:d6:6b:b6:03:48:47:e1:57:2b:9d:02:8b: e9:33:83:27:18:09:dc:2a:31:e1:5e:d9:38:d3:1e:2e:08:f5: 64:70:63:65:7e:cb:13:79:a4:c0:15:88:65:3f:fb:1c:80:8c: b9:57:0f:55:02:e7:f5:58:95:45:0a:57:61:97:01:40:49:37: 6f:1f:79:01:0f:de:b3:2f:21:cb:9b:bc:cc:12:8a:f7:0a:51: 1d:fa:6a:87:bc:2b:d6:69:66:54:88:1b:5c:9b:f0:2e:f7:b0: de:b2:e1:2c:b0:b3:aa:e4:86:c0:ed:b5:7e:8f:85:90:04:bb: 9c:1a:66:67:7e:84:f3:f9:73:56:62:26:f7:5c:45:de:8d:1d: f0:de:df:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eT/roND+hok6gjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk OTE2MzM5YzctMjFhMi00NGMwLTgwNTktYTNiODNkYWMwMWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY+fv7B4B/BR87EmdjTDfeiyQYpK5xTR5+fV krTIxMwzjJQzGwkhIzyGwIT2qIHdByhrACtf1PS3hfFAWSXyJ+wrvhMmQRsD0/5+ cJrdiSP/MsgF+CbFFQ3KKwON6MBHlzqynCEK6lKJYJwRaCPuwfV2H5fe6Oesw+ME W8HufeDsHsTZXAGB9dpZDrp1KWztOJ+ZcIjvN1t8Svyg75sR4yZNEkhh1Toj3bc/ 1LaG2J2Rk8bXQqjDqUGjiN9UzI2seZpUe9oHDdbcnfWSqXryjAhCwxJkK1cujTG0 PKIdlAQoBNpsterrIoBOotfcqXbONScpfQ6RYxpG0FOEQwmHtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKc7TInGKAbSd1x0wicGH+odwUqoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWJkYWE2NGUtYjg0Yy0z NDljLWFkMDEtZTM1NzZjZmM4ZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqUMwDKqx7qoalLcBjoxL6I8V4WiijxNnHUKq5IcU4racmvGz5RvRCT uqegG8A6u6VrcK3jGnuzAlTWIOgZzD71LWu4wBA56I+6LdwkdF4+aXr+uJRp4xvp WIc2lPKvovFXhnJxsbDA45nEqFkAGvr3s9ZrtgNIR+FXK50Ci+kzgycYCdwqMeFe 2TjTHi4I9WRwY2V+yxN5pMAViGU/+xyAjLlXD1UC5/VYlUUKV2GXAUBJN28feQEP 3rMvIcubvMwSivcKUR36aoe8K9ZpZlSIG1yb8C73sN6y4Syws6rkhsDttX6PhZAE u5waZmd+hPP5c1ZiJvdcRd6NHfDe380= -----END CERTIFICATE-----Generated at Wed May 13 01:43:01 2026 by rpki-client