$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a2aeac3-f101-3886-a63b-ec98760a8647.roa File: 3a2aeac3-f101-3886-a63b-ec98760a8647.roa (raw, json) Hash identifier: o7GRa2G7HIWQWSjVzOJLRlqQhJJ8XnpIEj1ChCwV95U= Subject key identifier: DD:9C:BC:56:05:7F:EB:13:D4:CB:40:8E:09:7E:D9:07:40:69:D3:8A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DA610F18E334F0CD6D0D0C700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a2aeac3-f101-3886-a63b-ec98760a8647.roa Signing time: Mon 27 Apr 2026 19:39:54 +0000 ROA not before: Mon 27 Apr 2026 19:39:54 +0000 ROA not after: Sun 26 Jul 2026 19:39:54 +0000 asID: 31898 IP address blocks: 156.151.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:10:f1:8e:33:4f:0c:d6:d0:d0:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 27 19:39:54 2026 GMT Not After : Jul 26 19:39:54 2026 GMT Subject: CN=a2d48af0-a15a-4a89-a783-e884a51a7fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:6e:13:a3:2b:62:8c:ba:a0:85:de:82:24: 8c:7a:19:d6:5c:e7:cc:19:30:73:3c:2f:6f:01:b7: 21:56:04:9b:32:4e:2f:9e:91:22:c7:69:06:f6:27: a7:5b:68:1a:98:75:8e:07:c7:00:10:60:75:3d:bd: ad:62:22:d7:61:76:c2:e0:98:34:e3:8e:61:f3:df: a9:ff:5a:a0:15:01:72:c2:bc:2b:0e:3e:e0:2c:91: 08:56:85:14:30:a8:c1:23:44:99:bd:b4:4d:df:8d: 14:ab:0a:8f:dc:e0:66:f8:8e:a5:a2:63:ba:f8:39: 90:dc:62:c8:0b:e3:f0:c1:ce:85:4d:b2:d0:c2:23: 1b:9e:a6:7b:b2:ee:8a:76:b9:12:00:48:f9:e4:01: 16:97:f8:cd:61:7e:7b:02:46:88:aa:b8:a3:b0:85: 45:8a:c8:5a:50:c8:d4:b6:7c:46:1d:4e:4d:69:ca: fc:60:94:bb:09:55:a3:ff:ad:ac:8f:de:7e:f9:f3: e7:53:1f:d6:5b:f0:b8:31:50:05:6e:4b:e9:03:bb: 9a:7e:b4:84:88:7d:11:9e:b0:93:dc:ad:96:d5:05: 28:89:66:c6:32:70:68:89:73:7c:0c:65:5a:4b:ff: 03:19:78:77:a4:59:70:e4:1f:26:4a:50:d8:c7:a0: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9C:BC:56:05:7F:EB:13:D4:CB:40:8E:09:7E:D9:07:40:69:D3:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a2aeac3-f101-3886-a63b-ec98760a8647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 156.151.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:6c:18:1c:28:ad:a8:fd:e2:10:42:6e:ab:fa:2c:d3:4d:ee: 78:7e:23:7f:1d:69:22:30:a0:1e:cf:bf:19:0e:66:47:ac:74: 95:0a:89:0c:6b:29:92:f8:2c:ca:1e:d9:3a:52:06:78:3c:59: 4a:63:d4:76:68:01:43:f0:65:5b:b4:4d:37:df:7b:01:aa:62: 16:df:48:38:cd:95:ee:3e:b9:31:92:d5:34:e0:8b:00:3e:a6: ac:ef:00:8b:ed:e9:24:d9:3e:0b:25:8f:40:f7:f4:7f:72:fb: 06:9a:56:71:f0:68:d9:85:c5:e2:60:b2:30:c0:19:63:5a:5a: 68:5c:1d:b6:2a:22:d8:20:bf:78:43:87:ea:c7:9a:4b:55:12: 1a:5f:d9:c1:30:9e:3a:c1:da:8b:d5:53:12:27:99:dd:4d:77: ee:40:39:a3:de:e1:69:1d:91:23:29:d8:c5:ba:a1:1f:45:bf: 81:a2:97:b5:be:e3:df:24:f9:9b:d2:b5:7a:8c:66:28:9e:09: 01:4b:98:9c:1c:23:05:e5:4e:93:f0:29:46:90:ad:4f:15:e6: bc:9d:5c:08:77:6e:14:fe:e0:6a:79:b8:ce:71:b1:d2:1d:f5: 0c:fb:15:e0:fa:c6:6f:d4:c6:d5:a1:83:60:4e:5f:8e:70:3b: 22:f4:de:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2mEPGOM08M1tDQxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNzE5Mzk1NFoXDTI2MDcyNjE5Mzk1NFowLzEtMCsGA1UEAxMk YTJkNDhhZjAtYTE1YS00YTg5LWE3ODMtZTg4NGE1MWE3ZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqxuE6MrYoy6oIXegiSMehnWXOfMGTBzPC9v AbchVgSbMk4vnpEix2kG9ienW2gamHWOB8cAEGB1Pb2tYiLXYXbC4Jg0445h89+p /1qgFQFywrwrDj7gLJEIVoUUMKjBI0SZvbRN340UqwqP3OBm+I6lomO6+DmQ3GLI C+Pwwc6FTbLQwiMbnqZ7su6KdrkSAEj55AEWl/jNYX57AkaIqrijsIVFishaUMjU tnxGHU5Nacr8YJS7CVWj/62sj95++fPnUx/WW/C4MVAFbkvpA7uafrSEiH0RnrCT 3K2W1QUoiWbGMnBoiXN8DGVaS/8DGXh3pFlw5B8mSlDYx6CgIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2cvFYFf+sT1MtAjgl+2QdAadOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2EyYWVhYzMtZjEwMS0z ODg2LWE2M2ItZWM5ODc2MGE4NjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINsGBworaj94hBCbqv6LNNN7nh+I38daSIwoB7PvxkOZkesdJUKiQxr KZL4LMoe2TpSBng8WUpj1HZoAUPwZVu0TTffewGqYhbfSDjNle4+uTGS1TTgiwA+ pqzvAIvt6STZPgslj0D39H9y+waaVnHwaNmFxeJgsjDAGWNaWmhcHbYqItggv3hD h+rHmktVEhpf2cEwnjrB2ovVUxInmd1Nd+5AOaPe4WkdkSMp2MW6oR9Fv4Gil7W+ 498k+ZvStXqMZiieCQFLmJwcIwXlTpPwKUaQrU8V5rydXAh3bhT+4Gp5uM5xsdId 9Qz7FeD6xm/UxtWhg2BOX45wOyL03p0= -----END CERTIFICATE-----Generated at Wed May 13 12:41:50 2026 by rpki-client