$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b5fb261-070a-3af2-aaa8-b8a27287959b.roa File: 3b5fb261-070a-3af2-aaa8-b8a27287959b.roa (raw, json) Hash identifier: 9YNHDr49ab5bK9Xs0DZlRM3Wwcvs5oT+3SWRIzU+21A= Subject key identifier: F1:27:8B:28:E9:B2:FB:BD:F8:22:87:7A:3A:0A:95:9E:4B:05:B7:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E50114E896CB677C4135708 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b5fb261-070a-3af2-aaa8-b8a27287959b.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 144.33.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:11:4e:89:6c:b6:77:c4:13:57:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=7e496935-c2ca-416f-b53e-4199b4f44368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:c3:0b:cb:84:92:73:01:e9:8b:c9:29:3c: 42:b3:82:f9:ca:ca:de:08:97:55:89:83:bb:fe:ae: 5b:d1:1b:8a:42:38:b8:9d:39:0e:2b:1b:ae:29:0b: 21:04:bf:49:1e:87:a3:af:e4:25:79:8b:05:bc:7f: ea:3a:16:25:95:c4:b2:84:bf:ba:18:a8:e3:b7:ef: 4e:b4:dc:4b:c5:34:b9:85:56:eb:1f:93:6a:f5:6f: 77:21:21:fe:2e:d1:ce:51:81:0a:1f:ba:18:9b:32: 39:d8:ec:f4:43:24:81:a1:58:7a:8b:fc:cc:e2:66: 4b:6c:5c:05:c2:6d:62:8b:e4:0c:97:ba:b8:63:3f: 57:87:14:c3:d1:e8:a4:cf:3c:28:2a:19:0b:c4:7d: df:43:20:ef:df:f6:4a:8e:2e:b0:94:88:11:ff:71: f9:71:eb:5f:4a:96:c5:ad:46:14:39:41:b7:4c:b2: b5:8e:d5:8e:b5:38:a7:63:22:2b:37:35:bd:2f:60: bd:0b:c8:22:81:25:55:b1:cd:63:a0:46:7a:78:96: 88:ae:57:97:89:e3:ef:d2:8a:47:c0:13:9c:3f:12: e5:33:18:a3:06:34:88:93:fb:35:56:5a:eb:a5:a1: 7c:1a:a3:6f:93:33:33:d1:6f:e1:5c:dd:86:00:36: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:27:8B:28:E9:B2:FB:BD:F8:22:87:7A:3A:0A:95:9E:4B:05:B7:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b5fb261-070a-3af2-aaa8-b8a27287959b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 144.33.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c6:08:92:ef:9b:32:92:eb:7b:3b:72:53:7f:3a:a9:e1:ea: 8e:88:e1:bd:16:86:e4:0f:6e:a6:ae:fa:a4:2b:88:96:6f:8c: 94:d5:0a:d7:77:fd:5e:b8:08:eb:f2:29:fb:87:13:2e:db:c2: 04:c1:cb:03:27:7b:88:de:03:df:5a:f6:3a:7d:e4:e7:e2:ce: 0b:e3:42:69:a4:97:94:15:30:fe:b8:67:92:4b:84:cf:fe:dd: a9:f9:a3:30:28:79:61:dc:5c:aa:7e:11:c3:80:f0:14:01:29: e6:ca:be:d2:f0:eb:90:1b:7a:31:91:77:89:82:46:87:d2:2a: ce:c4:75:60:31:a4:36:ad:68:32:4b:c3:ff:63:c7:98:f0:fd: bf:3a:7d:66:4c:17:62:62:01:ff:13:d6:c6:0b:9c:80:4f:ad: 8c:02:32:b1:8e:36:d5:b1:8a:b9:f2:13:f6:9d:af:e6:66:bd: ff:52:70:d4:33:9d:32:e5:e0:13:52:ca:ed:c5:4f:07:04:65: 09:28:21:ca:47:19:1b:c6:c2:a0:f9:74:5b:48:1e:25:4f:f9: 7a:1f:ca:ea:08:1c:91:fc:e7:4a:f0:7b:48:4d:52:2d:4d:37: 00:87:87:e5:cc:b2:3a:d8:cb:0e:ef:b8:66:9e:64:fb:2a:38: c4:5e:4e:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBFOiWy2d8QTVwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk N2U0OTY5MzUtYzJjYS00MTZmLWI1M2UtNDE5OWI0ZjQ0MzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyHDC8uEknMB6YvJKTxCs4L5ysreCJdViYO7 /q5b0RuKQji4nTkOKxuuKQshBL9JHoejr+QleYsFvH/qOhYllcSyhL+6GKjjt+9O tNxLxTS5hVbrH5Nq9W93ISH+LtHOUYEKH7oYmzI52Oz0QySBoVh6i/zM4mZLbFwF wm1ii+QMl7q4Yz9XhxTD0eikzzwoKhkLxH3fQyDv3/ZKji6wlIgR/3H5cetfSpbF rUYUOUG3TLK1jtWOtTinYyIrNzW9L2C9C8gigSVVsc1joEZ6eJaIrleXiePv0opH wBOcPxLlMxijBjSIk/s1VlrrpaF8GqNvkzMz0W/hXN2GADbp/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEniyjpsvu9+CKHejoKlZ5LBbd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2I1ZmIyNjEtMDcwYS0z YWYyLWFhYTgtYjhhMjcyODc5NTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCEtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrGCJLvmzKS63s7clN/Oqnh6o6I4b0WhuQPbqau+qQriJZvjJTVCtd3 /V64COvyKfuHEy7bwgTBywMne4jeA99a9jp95OfizgvjQmmkl5QVMP64Z5JLhM/+ 3an5ozAoeWHcXKp+EcOA8BQBKebKvtLw65AbejGRd4mCRofSKs7EdWAxpDataDJL w/9jx5jw/b86fWZMF2JiAf8T1sYLnIBPrYwCMrGONtWxirnyE/adr+Zmvf9ScNQz nTLl4BNSyu3FTwcEZQkoIcpHGRvGwqD5dFtIHiVP+XofyuoIHJH850rwe0hNUi1N NwCHh+XMsjrYyw7vuGaeZPsqOMReTvs= -----END CERTIFICATE-----Generated at Wed May 13 05:09:36 2026 by rpki-client