$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa File: 1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa (raw, json) Hash identifier: 3BjmiXCrYFHF9RabhiTDvaxzNULA6P9rPy5PoTSmUd0= Subject key identifier: BD:21:74:72:F5:7B:2B:88:68:B9:40:F5:9E:EE:05:99:3B:76:A8:B1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF554EDDF6D1925725A4A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 168.138.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:54:ed:df:6d:19:25:72:5a:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=17d92026-b16d-4bf0-ad34-caf0c36683fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9a:95:ef:93:b2:60:77:8c:30:24:eb:a5:76: 25:75:0a:bf:62:a4:45:1c:eb:ba:ae:a5:89:61:74: 67:97:12:be:3a:57:85:a4:9a:a6:e0:12:6b:0c:8a: b0:fa:04:27:a2:ac:b8:51:26:32:24:38:bd:da:7e: 27:4b:44:0e:e3:96:f5:ae:ac:0e:43:7c:3e:53:47: 2e:26:e2:2b:b9:34:02:a4:2b:b2:38:08:ae:06:e0: 7d:33:c6:95:07:b7:71:06:05:ae:ff:15:9a:ca:3d: 03:28:ad:04:9c:ee:a1:d4:86:79:ea:9e:bc:00:e3: e5:c9:70:44:96:95:84:42:77:be:4c:e0:2b:03:57: 69:ac:b3:2b:09:ce:33:52:00:da:18:e6:fb:1d:67: b0:51:eb:d1:31:41:f8:94:49:5e:40:71:cf:fb:f7: d5:2e:cc:ad:9e:65:dc:e5:d9:95:56:19:4f:9d:23: d9:93:ea:4d:64:d6:54:a9:87:71:76:75:3a:18:12: 64:fe:a5:a1:b5:4a:6d:38:02:73:a5:54:e9:83:43: f6:2d:eb:39:02:99:5d:fa:ff:b4:b4:d5:8a:b1:c1: 6a:ad:51:f0:05:dc:73:1d:19:46:2a:a1:4c:ed:cf: 8a:17:41:c2:75:ab:08:6b:e8:4e:43:37:86:b0:45: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:21:74:72:F5:7B:2B:88:68:B9:40:F5:9E:EE:05:99:3B:76:A8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b9:61:98:ba:8f:3c:2d:f7:8f:a2:f4:84:0f:69:a6:c1:2d: 7a:12:85:c3:48:16:91:c2:ba:fd:72:41:9c:c6:d1:4f:08:24: 5a:73:72:b4:32:d2:94:c7:c2:05:35:12:86:77:75:05:ee:de: 11:44:35:ee:34:96:37:e9:14:b0:44:95:b4:66:a1:15:3d:00: 2d:42:7d:f3:ea:59:c0:8d:69:72:ef:26:83:4b:60:c6:26:12: f6:3a:d1:87:b0:e3:99:cb:6a:01:2b:aa:f7:0a:7a:82:11:e1: a1:01:77:7d:cd:27:e5:d8:6a:88:69:f6:2e:76:a4:cf:63:b7: 54:49:82:81:a7:0d:a9:03:09:1b:f7:f5:64:44:0c:ea:15:04: 0d:8d:43:39:2a:8d:2e:5d:9e:fc:ba:9e:e8:70:07:78:01:15: 32:94:3e:0b:e3:4f:ae:7c:8a:47:90:0f:fc:69:5a:78:94:33: 35:12:72:ef:49:57:07:94:07:6f:ec:18:93:44:5f:01:47:73: 35:62:d3:7e:56:9f:c5:8a:a4:94:7e:af:f4:7c:6c:df:45:fa: a5:a2:68:15:22:51:a3:48:fb:11:d7:f5:51:5a:e6:83:8f:ab: 42:69:3a:3e:90:6c:ea:db:33:05:c6:1d:81:9f:d6:da:a4:8a: 3e:1d:98:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9VTt320ZJXJaSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MTdkOTIwMjYtYjE2ZC00YmYwLWFkMzQtY2FmMGMzNjY4M2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JqV75OyYHeMMCTrpXYldQq/YqRFHOu6rqWJ YXRnlxK+OleFpJqm4BJrDIqw+gQnoqy4USYyJDi92n4nS0QO45b1rqwOQ3w+U0cu JuIruTQCpCuyOAiuBuB9M8aVB7dxBgWu/xWayj0DKK0EnO6h1IZ56p68AOPlyXBE lpWEQne+TOArA1dprLMrCc4zUgDaGOb7HWewUevRMUH4lEleQHHP+/fVLsytnmXc 5dmVVhlPnSPZk+pNZNZUqYdxdnU6GBJk/qWhtUptOAJzpVTpg0P2Les5Apld+v+0 tNWKscFqrVHwBdxzHRlGKqFM7c+KF0HCdasIa+hOQzeGsEUU0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0hdHL1eyuIaLlA9Z7uBZk7dqixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWVjMjBlNzQtYThhZC0z ZmM5LTkxYTEtNTYyODg2ZTg3YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqIqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm5YZi6jzwt94+i9IQPaabBLXoShcNIFpHCuv1yQZzG0U8IJFpzcrQy 0pTHwgU1EoZ3dQXu3hFENe40ljfpFLBElbRmoRU9AC1CffPqWcCNaXLvJoNLYMYm EvY60Yew45nLagErqvcKeoIR4aEBd33NJ+XYaohp9i52pM9jt1RJgoGnDakDCRv3 9WREDOoVBA2NQzkqjS5dnvy6nuhwB3gBFTKUPgvjT658ikeQD/xpWniUMzUScu9J VweUB2/sGJNEXwFHczVi035Wn8WKpJR+r/R8bN9F+qWiaBUiUaNI+xHX9VFa5oOP q0JpOj6QbOrbMwXGHYGf1tqkij4dmM8= -----END CERTIFICATE-----Generated at Wed May 13 11:00:42 2026 by rpki-client