$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/309f7d80-d6dd-33b7-86a9-205b39986e85.roa File: 309f7d80-d6dd-33b7-86a9-205b39986e85.roa (raw, json) Hash identifier: Pg0BmhPZqaowOM9n0HEzCU/76l51IPyMGmN8tieM9+E= Subject key identifier: 1D:45:65:7D:98:9D:55:0D:B2:DA:6E:63:32:5B:FE:B1:86:5A:F6:94 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF55092BB0A72F86B14DB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/309f7d80-d6dd-33b7-86a9-205b39986e85.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 132.226.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:50:92:bb:0a:72:f8:6b:14:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=66d5ae52-f997-42b3-9204-4af8403151cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d6:9f:76:45:4f:3a:d3:ed:2e:10:d4:da:c5: 23:ae:c7:e1:2c:39:c9:45:b8:fd:28:a8:fd:e3:3e: d9:76:3c:12:47:22:dc:f5:7e:c1:68:bd:17:f5:da: dc:59:da:a9:3e:ab:9f:0c:73:a8:db:70:02:12:4f: 8e:78:62:6d:ee:d2:2f:c1:eb:ff:5c:4c:4b:39:14: 0e:72:0a:cd:c8:11:be:29:88:be:6b:f0:c5:f0:02: b4:eb:99:50:f4:91:6a:23:c5:60:e8:b2:a4:20:26: b2:c8:af:83:a3:0f:ca:3f:d5:56:70:a6:b1:71:81: 5e:de:da:48:f8:f4:0f:2d:67:2f:e3:27:f3:f3:19: 34:7f:04:ce:db:fc:7b:c1:fd:79:ba:b5:c2:ab:b2: 07:18:f2:ad:bb:b8:bc:87:7d:a9:a6:62:01:29:1a: 1d:0b:be:4f:94:17:bd:c3:68:34:73:e9:00:45:ec: f4:af:29:f9:40:de:70:ae:96:23:ad:46:29:4f:fd: 2e:2a:a7:c2:27:22:d5:73:92:17:84:6e:1b:94:d8: 90:eb:60:65:59:09:8c:c6:1e:70:9a:18:12:14:1a: a1:37:e3:a0:ab:f1:17:4a:48:49:18:16:c8:0e:14: 1c:23:1f:90:f4:52:ee:7a:7d:9b:85:11:4c:78:b3: 7f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:45:65:7D:98:9D:55:0D:B2:DA:6E:63:32:5B:FE:B1:86:5A:F6:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/309f7d80-d6dd-33b7-86a9-205b39986e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.226.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:16:95:a7:f2:a7:92:77:6d:8f:23:fc:b4:98:ac:09:2c:ad: 9f:9e:07:64:7b:a7:3d:a5:8a:b0:f1:15:b4:2d:a1:61:16:36: 75:4e:14:ee:62:5d:a1:99:f7:65:2b:4c:f3:8d:b7:9c:f5:04: 82:42:0d:17:63:34:3a:9e:20:d4:77:96:70:52:c5:66:76:1b: 5b:7d:7e:44:51:1c:17:f5:38:cf:a7:2e:51:d7:db:87:c4:23: 1c:b1:9e:d9:f1:69:6f:b3:41:76:be:d2:57:16:61:45:14:64: 31:18:a5:f5:68:b6:95:4a:ec:22:d3:ff:f9:9d:6c:e4:41:54: a9:48:05:c2:f7:07:50:d6:f5:a4:0a:da:8e:08:b8:0b:79:f5: d5:0b:00:d1:42:49:4f:26:63:09:37:0a:3e:6e:8b:69:41:d1: 2d:d2:e5:be:4f:df:c8:af:f0:24:e6:10:02:47:6e:eb:11:f9: 2c:b6:dc:00:ee:44:a1:7d:4e:fc:92:2d:71:d7:2c:93:e2:06: b9:50:17:b7:81:7c:24:ab:08:ee:f7:85:b1:8a:e4:e4:26:0c: 78:05:1a:5d:c6:34:c9:57:91:d9:f7:1e:be:38:f4:9f:5f:83: 84:76:4b:51:1b:3a:4a:d0:da:ab:3c:14:12:3f:0c:8d:b8:64: d9:4b:5f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9VCSuwpy+GsU24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NjZkNWFlNTItZjk5Ny00MmIzLTkyMDQtNGFmODQwMzE1MWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdafdkVPOtPtLhDU2sUjrsfhLDnJRbj9KKj9 4z7ZdjwSRyLc9X7BaL0X9drcWdqpPqufDHOo23ACEk+OeGJt7tIvwev/XExLORQO cgrNyBG+KYi+a/DF8AK065lQ9JFqI8Vg6LKkICayyK+Dow/KP9VWcKaxcYFe3tpI +PQPLWcv4yfz8xk0fwTO2/x7wf15urXCq7IHGPKtu7i8h32ppmIBKRodC75PlBe9 w2g0c+kARez0ryn5QN5wrpYjrUYpT/0uKqfCJyLVc5IXhG4blNiQ62BlWQmMxh5w mhgSFBqhN+Ogq/EXSkhJGBbIDhQcIx+Q9FLuen2bhRFMeLN/uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1FZX2YnVUNstpuYzJb/rGGWvaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzA5ZjdkODAtZDZkZC0z M2I3LTg2YTktMjA1YjM5OTg2ZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhOLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIWlafyp5J3bY8j/LSYrAksrZ+eB2R7pz2lirDxFbQtoWEWNnVOFO5i XaGZ92UrTPONt5z1BIJCDRdjNDqeINR3lnBSxWZ2G1t9fkRRHBf1OM+nLlHX24fE IxyxntnxaW+zQXa+0lcWYUUUZDEYpfVotpVK7CLT//mdbORBVKlIBcL3B1DW9aQK 2o4IuAt59dULANFCSU8mYwk3Cj5ui2lB0S3S5b5P38iv8CTmEAJHbusR+Sy23ADu RKF9TvySLXHXLJPiBrlQF7eBfCSrCO73hbGK5OQmDHgFGl3GNMlXkdn3Hr449J9f g4R2S1EbOkrQ2qs8FBI/DI24ZNlLX+g= -----END CERTIFICATE-----Generated at Wed May 13 11:24:58 2026 by rpki-client