$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/221904ad-8787-373c-8707-a77e02529cb2.roa File: 221904ad-8787-373c-8707-a77e02529cb2.roa (raw, json) Hash identifier: sDNMKjkW0VbU+GAVlIuemYykrgZJZj5cq1GhrPGLKJg= Subject key identifier: 92:AC:59:E6:0E:02:8B:EF:D3:00:76:A7:94:6F:82:1C:D3:B8:FF:3B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC8305C73C9DD2336F3E92E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/221904ad-8787-373c-8707-a77e02529cb2.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 31898 IP address blocks: 147.224.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:5c:73:c9:dd:23:36:f3:e9:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=73273d38-21d9-4147-ac8b-6e84fae87f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:f8:41:17:b5:5e:aa:a3:a3:4e:65:00:7a: 70:46:1e:5b:94:3a:dc:0b:86:e7:67:4c:74:49:34: 57:2a:b8:53:f1:79:11:04:b6:52:ee:4d:08:4f:79: 89:c2:13:6c:41:d0:2d:dc:f3:13:fd:7b:a9:98:f1: c6:4f:81:12:d1:ba:c1:48:a9:cb:6d:e2:cd:2e:9f: a2:d3:f8:5b:5e:9a:bd:e9:7e:00:95:02:58:cd:b2: e5:3a:22:2a:b6:d5:b4:87:15:2b:61:86:b2:48:cb: 52:8e:3b:b4:68:35:a5:15:c8:ea:49:8f:1a:73:d6: e3:fb:1f:c3:7e:85:ac:26:be:5e:27:4d:a2:16:1d: 85:56:f6:bc:e2:fd:34:e4:5c:5d:3c:84:76:9b:c1: d1:cc:99:c8:9f:6c:41:62:42:61:db:9d:d6:b8:fb: 79:d0:68:40:c7:73:c5:00:12:43:61:7b:57:6c:bf: fe:70:44:5d:14:63:31:59:41:2c:c6:86:5f:f0:d9: cd:cf:cd:21:51:62:14:e6:c2:ec:6b:ed:58:c5:79: 84:e1:c6:ac:ce:e7:b2:99:f8:b6:85:15:f6:a9:4a: 29:ab:d8:11:79:98:d1:f0:d7:c4:5e:3f:dc:dc:4b: b6:00:aa:ab:f1:fe:04:e9:a4:19:5c:fd:89:9e:4f: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AC:59:E6:0E:02:8B:EF:D3:00:76:A7:94:6F:82:1C:D3:B8:FF:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/221904ad-8787-373c-8707-a77e02529cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.224.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:36:13:da:69:a2:b8:2b:4d:50:39:4c:5d:40:0e:60:fb:22: 4e:c1:ba:12:48:a9:22:61:34:00:a3:58:95:75:91:85:db:3e: 1b:87:dd:be:30:a3:e6:52:b8:93:e0:f8:2e:da:5c:82:e9:ae: bb:07:a9:a0:e0:92:07:c5:e0:6e:60:67:52:71:53:d2:69:db: dd:47:41:68:0c:ce:84:56:b1:fa:58:20:9d:d4:ef:b3:7b:8f: a9:b7:a8:28:bd:7a:c3:ee:a9:f8:81:7f:7b:77:e4:3f:94:32: eb:1a:16:c7:6b:50:b4:e0:67:ae:af:85:fd:6e:dc:7e:23:47: ab:e8:6b:11:f1:f6:9c:76:bc:68:4f:35:cc:a0:c2:13:df:0f: 82:da:42:66:10:c8:a3:78:c9:ae:09:4e:12:fd:22:9d:c4:18: 44:52:b5:c2:10:3c:b4:db:3a:15:ab:23:e3:95:ab:eb:83:e1: 31:ee:06:3d:20:71:a2:85:2f:65:e8:a9:cb:68:be:03:2f:4d: bb:cc:1e:68:a1:a4:40:30:8b:f4:d0:46:a8:5a:74:a7:40:da: 65:79:4c:91:87:bd:a0:d2:da:57:74:be:f4:04:46:fc:80:c7: c9:66:05:6e:70:fd:90:06:81:d6:0a:ad:96:6d:8d:32:cd:3b: 44:97:8e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMFxzyd0jNvPpLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk NzMyNzNkMzgtMjFkOS00MTQ3LWFjOGItNmU4NGZhZTg3ZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZD4QRe1Xqqjo05lAHpwRh5blDrcC4bnZ0x0 STRXKrhT8XkRBLZS7k0IT3mJwhNsQdAt3PMT/XupmPHGT4ES0brBSKnLbeLNLp+i 0/hbXpq96X4AlQJYzbLlOiIqttW0hxUrYYaySMtSjju0aDWlFcjqSY8ac9bj+x/D foWsJr5eJ02iFh2FVva84v005FxdPIR2m8HRzJnIn2xBYkJh253WuPt50GhAx3PF ABJDYXtXbL/+cERdFGMxWUEsxoZf8NnNz80hUWIU5sLsa+1YxXmE4caszueymfi2 hRX2qUopq9gReZjR8NfEXj/c3Eu2AKqr8f4E6aQZXP2Jnk8F4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKsWeYOAovv0wB2p5RvghzTuP87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjIxOTA0YWQtODc4Ny0z NzNjLTg3MDctYTc3ZTAyNTI5Y2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGk+CAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI42E9pporgrTVA5TF1ADmD7Ik7BuhJIqSJhNACjWJV1kYXbPhuH3b4w o+ZSuJPg+C7aXILprrsHqaDgkgfF4G5gZ1JxU9Jp291HQWgMzoRWsfpYIJ3U77N7 j6m3qCi9esPuqfiBf3t35D+UMusaFsdrULTgZ66vhf1u3H4jR6voaxHx9px2vGhP NcygwhPfD4LaQmYQyKN4ya4JThL9Ip3EGERStcIQPLTbOhWrI+OVq+uD4THuBj0g caKFL2XoqctovgMvTbvMHmihpEAwi/TQRqhadKdA2mV5TJGHvaDS2ld0vvQERvyA x8lmBW5w/ZAGgdYKrZZtjTLNO0SXjsM= -----END CERTIFICATE-----Generated at Wed May 13 11:48:45 2026 by rpki-client