$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24e28ffd-2f65-3ee6-a942-17cfe5f6b1b3.roa File: 24e28ffd-2f65-3ee6-a942-17cfe5f6b1b3.roa (raw, json) Hash identifier: Sc/BqHp0JUi+tqs3+5nU0VAeiwIiXbx4Was06ZpIsvI= Subject key identifier: 8B:77:08:20:2B:19:C7:F3:E0:80:A5:8E:69:75:B6:2D:87:D8:38:A4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8C2A96BDDC974A555DB92BC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24e28ffd-2f65-3ee6-a942-17cfe5f6b1b3.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 168.129.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:96:bd:dc:97:4a:55:5d:b9:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=8233af0e-e52e-40a9-b4a4-92d51d20f711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4a:d9:a0:f2:2b:63:b8:a0:3f:b5:e5:e0:1a: 13:4f:af:9f:90:e6:69:c3:aa:c5:ad:a3:86:0e:de: 6a:a9:0e:97:bc:31:87:76:3a:21:34:d4:05:16:f3: e6:2f:aa:39:d0:71:e5:f0:54:29:51:e3:83:8d:69: 81:7f:d9:34:f9:be:7e:f7:3d:da:7b:bf:72:6b:c3: 21:2b:ef:72:0e:73:d4:dc:37:92:13:b5:21:8f:93: 7e:e0:e0:42:e0:bf:67:1b:82:b7:f5:0a:dd:30:88: 8f:09:df:ef:4e:ae:09:93:1b:85:cd:6d:cf:61:ad: 83:a9:b5:45:86:be:be:e9:b1:a0:b6:31:57:b0:77: e0:12:8b:26:fb:97:18:b1:d2:f6:be:75:32:9f:47: 8e:82:1c:5a:fa:03:db:ca:8e:05:b3:a8:a8:1f:8f: 34:56:d3:a3:f0:4a:c8:25:a8:4d:3e:32:c9:a0:28: dc:18:7a:fe:c5:fc:85:8d:34:0b:94:fb:cb:58:39: 73:86:1a:37:c2:49:51:e6:00:01:b9:79:e2:4b:86: 84:77:b3:20:0e:4b:b8:7b:24:7e:01:a6:d0:6b:ef: 8e:69:fc:63:47:70:e7:a8:64:95:f7:14:de:0e:5d: 2b:bc:58:cc:12:59:3f:58:eb:91:02:9f:0c:b8:86: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:77:08:20:2B:19:C7:F3:E0:80:A5:8E:69:75:B6:2D:87:D8:38:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24e28ffd-2f65-3ee6-a942-17cfe5f6b1b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:55:d1:db:aa:12:c8:98:e2:1c:77:b5:0a:cd:d3:70:1a:da: 96:0d:0d:83:07:c3:1a:d3:84:33:3c:ab:28:e7:8a:59:3c:07: 50:5d:4c:84:53:03:1f:99:b8:61:ec:d6:70:5a:49:c9:7e:df: ed:c1:aa:9e:68:5d:72:87:4c:be:ad:65:fa:22:53:c1:b3:d0: 0b:87:d1:de:17:48:f7:95:d0:63:1d:2b:c5:9b:25:7b:dd:41: 7d:3d:f0:85:97:8f:f8:f3:f3:59:d0:d2:88:e9:4d:ac:b1:b0: 1c:c0:cb:d4:96:27:e8:27:91:0b:c9:29:2e:80:bc:da:49:ed: c3:87:1c:8c:f3:d3:b5:1c:a2:c0:c7:d9:ac:70:3b:8e:40:d1: 3e:45:ee:b0:9b:7b:19:e6:2b:63:81:2d:6e:a1:bf:a7:ae:90: d9:a3:3a:47:71:a7:f6:7d:9b:2d:74:ea:4a:cf:8a:f1:91:eb: 02:14:e3:1e:37:b8:cf:01:09:83:63:38:99:58:9a:20:a4:2e: 50:df:a2:81:1e:b5:83:8b:ab:97:5b:98:42:b5:ab:11:97:21: 7a:70:f3:1c:53:ff:8c:5b:8a:7d:0e:f0:63:db:f5:10:0a:1f: 72:42:8e:d3:3b:1f:64:88:c1:03:d9:a2:de:f6:7f:73:03:81: f3:0c:a5:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKpa93JdKVV25K8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk ODIzM2FmMGUtZTUyZS00MGE5LWI0YTQtOTJkNTFkMjBmNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgErZoPIrY7igP7Xl4BoTT6+fkOZpw6rFraOG Dt5qqQ6XvDGHdjohNNQFFvPmL6o50HHl8FQpUeODjWmBf9k0+b5+9z3ae79ya8Mh K+9yDnPU3DeSE7Uhj5N+4OBC4L9nG4K39QrdMIiPCd/vTq4JkxuFzW3PYa2DqbVF hr6+6bGgtjFXsHfgEosm+5cYsdL2vnUyn0eOghxa+gPbyo4Fs6ioH480VtOj8ErI JahNPjLJoCjcGHr+xfyFjTQLlPvLWDlzhho3wklR5gABuXniS4aEd7MgDku4eyR+ AabQa++OafxjR3DnqGSV9xTeDl0rvFjMElk/WOuRAp8MuIZMaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt3CCArGcfz4ICljml1ti2H2DikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjRlMjhmZmQtMmY2NS0z ZWU2LWE5NDItMTdjZmU1ZjZiMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqIGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFV0duqEsiY4hx3tQrN03Aa2pYNDYMHwxrThDM8qyjnilk8B1BdTIRT Ax+ZuGHs1nBaScl+3+3Bqp5oXXKHTL6tZfoiU8Gz0AuH0d4XSPeV0GMdK8WbJXvd QX098IWXj/jz81nQ0ojpTayxsBzAy9SWJ+gnkQvJKS6AvNpJ7cOHHIzz07UcosDH 2axwO45A0T5F7rCbexnmK2OBLW6hv6eukNmjOkdxp/Z9my106krPivGR6wIU4x43 uM8BCYNjOJlYmiCkLlDfooEetYOLq5dbmEK1qxGXIXpw8xxT/4xbin0O8GPb9RAK H3JCjtM7H2SIwQPZot72f3MDgfMMpVw= -----END CERTIFICATE-----Generated at Wed May 13 05:00:23 2026 by rpki-client