$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa File: 22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa (raw, json) Hash identifier: 4xt6Pn3rjqv/5BYo+D+dHkmxlxRCyVgpl5ytOiNIPRs= Subject key identifier: 29:28:06:CE:3A:6F:DD:E7:21:CF:E6:28:2B:1F:C6:16:7D:81:AB:9D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D8FF51A90DFF86E847AFD80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 167.126.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:f5:1a:90:df:f8:6e:84:7a:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=d2e2e982-5458-459d-803c-630c9263e732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:3a:0b:56:03:5f:80:82:bb:ce:56:93:c8: 2f:00:15:b8:52:f0:40:1c:27:9c:0b:ae:d2:55:4a: 2e:ae:6f:fa:3f:6a:7d:8d:b5:cd:ca:cc:1c:fe:be: fb:e5:90:a0:58:d5:d0:95:6b:a9:b9:e8:b9:40:17: 91:18:4b:0b:69:50:f8:b2:63:09:17:71:7f:b5:e6: 30:1a:87:22:87:c9:79:33:ae:a4:e8:26:45:19:10: 0c:f5:5e:04:f4:79:da:8e:aa:35:a0:64:a0:97:79: 0f:01:ac:99:7a:72:00:72:b6:e1:96:03:8b:a9:d5: 6f:d4:ff:6e:81:ca:b5:62:d7:d6:c2:29:32:04:51: 30:12:e3:07:92:49:c0:a9:b1:39:23:80:cd:9e:5b: f0:23:3a:d2:43:4a:ea:65:d2:d4:23:d0:9d:47:e1: 4d:5e:2a:c6:7d:2c:c5:cc:21:52:f8:b8:1f:23:76: 47:7f:1b:81:b9:89:cb:55:ed:c1:84:52:a6:44:e4: 8a:d7:3e:50:d3:99:2a:ca:ff:db:8c:4c:2a:06:48: c2:83:6f:4b:3b:90:01:85:e4:ef:13:32:be:51:18: 26:0f:62:f0:24:19:0c:63:83:62:28:66:3c:46:6f: 23:11:ca:65:78:53:86:ab:ec:c5:40:28:83:27:77: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:28:06:CE:3A:6F:DD:E7:21:CF:E6:28:2B:1F:C6:16:7D:81:AB:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 167.126.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:cb:80:8b:70:53:8c:82:c1:d5:0c:39:1f:ba:f1:2f:95:de: e9:16:bb:1e:e0:fb:b2:3a:7f:7f:f5:b7:2d:7f:6a:58:b3:e9: c5:28:4c:38:ce:51:56:66:cc:70:b8:49:45:c7:1f:a5:82:9d: f4:5c:9d:e7:17:ad:bb:3f:c4:5f:52:c8:9d:de:e6:ff:57:1c: 41:ff:d7:b2:83:e7:c7:22:63:bb:27:15:9b:3e:ad:2f:60:49: 7f:79:48:de:7c:c1:d5:d8:b8:d4:4b:5f:ce:74:c6:42:60:c8: 62:aa:0d:35:66:ef:c2:55:f9:80:e2:04:6c:37:1b:76:df:68: 04:5d:9c:cd:38:92:2c:c8:1b:1a:a9:7a:9d:29:95:71:6a:7c: e6:80:1c:8d:82:a4:50:c3:6d:29:04:71:b7:f7:9b:e2:bb:bb: 15:3c:15:69:4c:18:8c:27:49:3d:0d:23:92:80:2e:df:b1:1b: 17:25:04:83:84:f7:9e:cf:47:46:f1:2d:04:7b:fd:0c:0e:51: 7f:9d:0c:cb:ee:f3:35:29:e1:34:3b:95:15:47:9b:08:53:f5: fc:8f:b2:a7:1b:1d:cd:96:a4:b1:4b:94:6b:c0:08:69:43:b6: 8d:d5:7b:68:83:b3:82:95:0c:9d:b2:39:61:41:eb:26:c8:14: f9:05:96:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/UakN/4boR6/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk ZDJlMmU5ODItNTQ1OC00NTlkLTgwM2MtNjMwYzkyNjNlNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVk6C1YDX4CCu85Wk8gvABW4UvBAHCecC67S VUourm/6P2p9jbXNyswc/r775ZCgWNXQlWupuei5QBeRGEsLaVD4smMJF3F/teYw Gocih8l5M66k6CZFGRAM9V4E9Hnajqo1oGSgl3kPAayZenIAcrbhlgOLqdVv1P9u gcq1YtfWwikyBFEwEuMHkknAqbE5I4DNnlvwIzrSQ0rqZdLUI9CdR+FNXirGfSzF zCFS+LgfI3ZHfxuBuYnLVe3BhFKmROSK1z5Q05kqyv/bjEwqBkjCg29LO5ABheTv EzK+URgmD2LwJBkMY4NiKGY8Rm8jEcpleFOGq+zFQCiDJ3fRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkoBs46b93nIc/mKCsfxhZ9gaudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjJkZGEzYTMtMjdhYS0z MWM2LWE0NTgtY2Q2YWFlY2VhZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp34gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/LgItwU4yCwdUMOR+68S+V3ukWux7g+7I6f3/1ty1/aliz6cUoTDjO UVZmzHC4SUXHH6WCnfRcnecXrbs/xF9SyJ3e5v9XHEH/17KD58ciY7snFZs+rS9g SX95SN58wdXYuNRLX850xkJgyGKqDTVm78JV+YDiBGw3G3bfaARdnM04kizIGxqp ep0plXFqfOaAHI2CpFDDbSkEcbf3m+K7uxU8FWlMGIwnST0NI5KALt+xGxclBIOE 957PR0bxLQR7/QwOUX+dDMvu8zUp4TQ7lRVHmwhT9fyPsqcbHc2WpLFLlGvACGlD to3Ve2iDs4KVDJ2yOWFB6ybIFPkFlqI= -----END CERTIFICATE-----Generated at Wed May 13 06:14:30 2026 by rpki-client