$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32d50036-aa2a-34ef-af8f-d53e45d9ed88.roa File: 32d50036-aa2a-34ef-af8f-d53e45d9ed88.roa (raw, json) Hash identifier: Uj9mlLFiX6WBI7Qk/nj7nyueRiiUp4GE8ouL8blJogM= Subject key identifier: 8D:B2:C6:67:46:C9:E3:4E:29:69:0C:41:78:AA:29:2B:11:AE:D1:95 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DA6100FFD0F7C0CF7BBCF4B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32d50036-aa2a-34ef-af8f-d53e45d9ed88.roa Signing time: Mon 27 Apr 2026 19:38:07 +0000 ROA not before: Mon 27 Apr 2026 19:38:07 +0000 ROA not after: Sun 26 Jul 2026 19:38:07 +0000 asID: 31898 IP address blocks: 156.151.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:10:0f:fd:0f:7c:0c:f7:bb:cf:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 27 19:38:07 2026 GMT Not After : Jul 26 19:38:07 2026 GMT Subject: CN=e89a9a7d-a919-4a7d-aee2-327f6afb0566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e4:70:65:48:aa:45:e8:dc:94:88:fc:f9:2d: 9e:1f:03:5f:48:80:3e:e3:70:0c:d0:ae:82:80:06: e6:82:34:c2:10:86:9c:03:a9:5d:71:c1:f5:87:38: ab:52:3b:70:9e:9c:1b:ce:95:7f:c5:bb:c5:9c:9b: 83:51:e4:63:08:ca:df:61:e1:05:95:c8:c4:4e:57: 1e:7d:ff:c6:80:71:d3:10:5c:48:0c:1a:be:c3:ac: ba:8a:d8:73:02:fb:ce:6c:70:ef:1f:77:10:ff:f9: fd:4b:25:c3:ae:f8:19:fe:4f:db:45:fd:cf:ad:dd: 59:2d:bd:21:95:e7:30:82:50:4d:db:ed:d6:c0:bd: fa:a8:d4:c3:e5:8e:1e:06:4b:0b:b3:1c:f1:81:6f: b2:d5:d7:1e:bc:a3:b3:e3:e2:17:60:ce:41:99:a4: 7e:93:98:86:25:a8:a0:3b:51:12:b3:93:42:f2:cc: 02:c4:0c:92:2d:41:39:a6:aa:7d:d2:e9:31:25:f4: 06:b2:aa:ce:60:cf:b2:97:56:57:9f:30:bc:92:d5: ec:02:92:fb:1f:f3:fc:87:e8:24:52:e5:f1:01:95: 77:1d:96:a4:d6:04:3a:0d:9c:e8:11:c5:ee:bf:1d: f8:ee:a2:a4:ed:f2:56:ca:ef:15:db:40:e6:cb:83: 94:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B2:C6:67:46:C9:E3:4E:29:69:0C:41:78:AA:29:2B:11:AE:D1:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32d50036-aa2a-34ef-af8f-d53e45d9ed88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 156.151.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:40:be:d9:c6:1d:d9:d6:2a:1a:b5:0f:f9:d8:f1:38:85:c4: c5:34:2f:b2:12:51:41:f5:2f:d3:17:13:f2:f8:18:9a:9e:7c: 5c:76:b1:ca:a9:1b:dd:33:1b:77:f4:8b:a9:c5:37:91:24:a5: c2:b3:d1:dc:13:56:ac:23:19:ff:0e:7b:58:88:c6:a3:94:7e: 90:68:5f:b1:c8:2c:5f:91:44:75:35:a7:cb:89:94:97:66:8a: 15:f8:11:a8:ab:60:86:7a:3c:ea:16:70:0a:88:ed:21:78:61: e3:0b:6b:4c:35:ca:ba:6a:34:86:6d:9a:5e:49:c7:bb:a5:97: c9:f3:49:50:a7:58:e9:6b:7d:6f:2d:13:fd:f8:de:b5:6b:06: dc:c4:5f:9c:ac:80:7b:a9:44:84:a1:e0:71:62:9c:4c:5c:0e: f2:79:6b:28:b9:fd:fd:e0:26:a3:20:58:9d:db:3c:55:2e:05: c2:99:66:9f:7e:02:66:41:45:08:f3:17:e7:ab:4d:d8:7c:0d: 40:96:4c:ff:db:55:33:28:fc:e9:f9:98:4c:a1:82:a9:ed:ef: 95:eb:6e:a3:4a:65:bd:bb:0a:98:48:5f:0c:15:13:07:a2:8b: e3:0b:98:8c:8a:25:2e:ac:12:fa:46:09:16:8e:1a:6b:cf:c7: 3a:29:ce:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2mEA/9D3wM97vPS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNzE5MzgwN1oXDTI2MDcyNjE5MzgwN1owLzEtMCsGA1UEAxMk ZTg5YTlhN2QtYTkxOS00YTdkLWFlZTItMzI3ZjZhZmIwNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeRwZUiqRejclIj8+S2eHwNfSIA+43AM0K6C gAbmgjTCEIacA6ldccH1hzirUjtwnpwbzpV/xbvFnJuDUeRjCMrfYeEFlcjETlce ff/GgHHTEFxIDBq+w6y6ithzAvvObHDvH3cQ//n9SyXDrvgZ/k/bRf3Prd1ZLb0h lecwglBN2+3WwL36qNTD5Y4eBksLsxzxgW+y1dcevKOz4+IXYM5BmaR+k5iGJaig O1ESs5NC8swCxAySLUE5pqp90ukxJfQGsqrOYM+yl1ZXnzC8ktXsApL7H/P8h+gk UuXxAZV3HZak1gQ6DZzoEcXuvx347qKk7fJWyu8V20Dmy4OUowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2yxmdGyeNOKWkMQXiqKSsRrtGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzJkNTAwMzYtYWEyYS0z NGVmLWFmOGYtZDUzZTQ1ZDllZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9AvtnGHdnWKhq1D/nY8TiFxMU0L7ISUUH1L9MXE/L4GJqefFx2scqp G90zG3f0i6nFN5EkpcKz0dwTVqwjGf8Oe1iIxqOUfpBoX7HILF+RRHU1p8uJlJdm ihX4EairYIZ6POoWcAqI7SF4YeMLa0w1yrpqNIZtml5Jx7ull8nzSVCnWOlrfW8t E/343rVrBtzEX5ysgHupRISh4HFinExcDvJ5ayi5/f3gJqMgWJ3bPFUuBcKZZp9+ AmZBRQjzF+erTdh8DUCWTP/bVTMo/On5mEyhgqnt75XrbqNKZb27CphIXwwVEwei i+MLmIyKJS6sEvpGCRaOGmvPxzopzmE= -----END CERTIFICATE-----Generated at Tue May 12 21:48:07 2026 by rpki-client