$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a4c4e22-e2d6-3962-ad8b-e8dd2880a7a2.roa File: 3a4c4e22-e2d6-3962-ad8b-e8dd2880a7a2.roa (raw, json) Hash identifier: Vl7NvFgnxIyCFrzcigADj5wfTYBwUj2sFpoPXF03hT8= Subject key identifier: 09:1D:1E:58:05:37:6C:83:40:AF:96:E4:7A:1F:95:14:6D:EA:06:E8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF9845A03BF4C53FCE57C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a4c4e22-e2d6-3962-ad8b-e8dd2880a7a2.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 146.235.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:84:5a:03:bf:4c:53:fc:e5:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=18b65a59-fafb-4bb7-bb40-1ca8c1eda82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7b:77:9e:bb:14:c3:27:53:10:b0:47:60:85: 15:1b:f2:9c:59:c3:59:30:b7:79:7e:a1:3b:00:46: c1:3c:89:f6:26:d9:2a:49:21:17:5e:58:ea:17:a4: 29:be:a8:f3:05:f6:31:22:c4:41:89:c2:32:24:c4: a1:65:f5:3b:a7:ea:28:84:06:cb:40:99:c2:81:14: 6c:cf:a5:70:cb:3e:6c:55:20:75:ab:58:4c:b3:bd: 3c:4d:17:6c:18:c4:92:86:1d:be:f8:d9:1a:31:ae: c0:06:9d:01:93:4c:55:26:1b:09:1c:d3:ea:3c:d3: 82:1f:96:92:16:8d:37:d2:fb:6b:ba:aa:72:c2:3e: d9:5a:bc:13:45:3c:7e:8e:40:34:7b:0a:53:a9:9d: f4:ec:13:6e:74:4f:8e:b0:04:31:0a:e5:1d:95:88: c6:c3:2f:43:7e:89:46:e0:25:6c:0b:de:06:7a:3b: 19:f5:fb:48:03:be:26:58:5b:ea:42:f3:2d:16:a0: ab:a3:12:d0:c8:8d:32:80:8a:f1:c0:fc:37:ef:45: 63:b6:fb:ef:29:ed:3b:b7:78:cb:7d:af:0f:0b:76: 15:cb:20:c9:eb:f9:92:35:9f:6d:35:6b:e1:08:84: 3c:5c:1a:94:94:3f:69:91:ba:07:07:6e:fb:81:dd: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1D:1E:58:05:37:6C:83:40:AF:96:E4:7A:1F:95:14:6D:EA:06:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a4c4e22-e2d6-3962-ad8b-e8dd2880a7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 146.235.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6f:69:e9:35:76:8a:62:e7:9b:22:ac:86:52:b2:bd:9a:d2: 32:0f:0f:07:08:2d:c9:4f:0c:f9:47:49:98:08:37:28:ec:0d: 5e:43:80:4f:e7:4b:fe:47:77:13:85:99:f6:47:ed:70:0f:ab: fc:f3:c6:5e:13:c8:84:ac:96:e4:f7:01:ba:f2:5c:04:6f:d9: 8e:74:e1:dd:4b:d1:39:fa:ee:bc:29:50:37:41:08:0a:01:21: 92:12:dd:f3:51:68:6e:21:20:08:66:6b:38:1e:1e:eb:6b:1d: 06:7a:78:fe:79:43:05:4d:e7:23:f2:79:2e:3a:81:47:f1:e5: 5e:f3:8b:72:4a:d6:ea:d8:f8:c4:d9:ac:8c:f1:49:a9:25:52: a7:01:69:e3:5d:b8:ee:a4:a5:16:c2:87:95:f5:fe:40:32:e2: 21:f6:97:c4:8e:43:60:6b:7b:b2:3d:a5:5e:2e:4e:44:0f:6f: a1:e8:0b:a1:89:99:4a:2b:d1:56:54:e0:8e:17:1a:c8:78:c7: 71:e1:71:06:17:50:dc:20:8b:9c:00:6d:6f:9e:0d:93:6a:10: 1f:24:fe:d9:76:54:02:08:1e:0f:6e:2c:3e:d6:62:89:97:97: d7:fd:fd:54:11:90:28:de:8b:b4:db:cb:0d:6a:65:f5:58:b9: ef:fb:a4:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+YRaA79MU/zlfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MThiNjVhNTktZmFmYi00YmI3LWJiNDAtMWNhOGMxZWRhODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnt3nrsUwydTELBHYIUVG/KcWcNZMLd5fqE7 AEbBPIn2JtkqSSEXXljqF6QpvqjzBfYxIsRBicIyJMShZfU7p+oohAbLQJnCgRRs z6Vwyz5sVSB1q1hMs708TRdsGMSShh2++NkaMa7ABp0Bk0xVJhsJHNPqPNOCH5aS Fo030vtruqpywj7ZWrwTRTx+jkA0ewpTqZ307BNudE+OsAQxCuUdlYjGwy9DfolG 4CVsC94GejsZ9ftIA74mWFvqQvMtFqCroxLQyI0ygIrxwPw370VjtvvvKe07t3jL fa8PC3YVyyDJ6/mSNZ9tNWvhCIQ8XBqUlD9pkboHB277gd3lswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkdHlgFN2yDQK+W5HoflRRt6gboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2E0YzRlMjItZTJkNi0z OTYyLWFkOGItZThkZDI4ODBhN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkuvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERvaek1dopi55sirIZSsr2a0jIPDwcILclPDPlHSZgINyjsDV5DgE/n S/5HdxOFmfZH7XAPq/zzxl4TyISsluT3AbryXARv2Y504d1L0Tn67rwpUDdBCAoB IZIS3fNRaG4hIAhmazgeHutrHQZ6eP55QwVN5yPyeS46gUfx5V7zi3JK1urY+MTZ rIzxSaklUqcBaeNduO6kpRbCh5X1/kAy4iH2l8SOQ2Bre7I9pV4uTkQPb6HoC6GJ mUor0VZU4I4XGsh4x3HhcQYXUNwgi5wAbW+eDZNqEB8k/tl2VAIIHg9uLD7WYomX l9f9/VQRkCjei7Tbyw1qZfVYue/7pJI= -----END CERTIFICATE-----Generated at Tue May 12 21:55:37 2026 by rpki-client