$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bdd446b-d8ca-3ac7-91b7-261492558eca.roa File: 3bdd446b-d8ca-3ac7-91b7-261492558eca.roa (raw, json) Hash identifier: 5QPg3GY+rj/7LUtly+9CZB0hQ+c27YtuJlTQDQjLj88= Subject key identifier: DD:A1:C8:93:96:0D:C6:0E:82:FA:6D:CB:58:3E:1D:DC:21:68:58:EA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8C2AADEEF35FE34E8B539D40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bdd446b-d8ca-3ac7-91b7-261492558eca.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 157.151.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:ad:ee:f3:5f:e3:4e:8b:53:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=2ffbe134-b19a-41de-9ad0-c0ce02f96685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:66:8e:27:5c:c0:4d:c0:62:c4:cd:50:99: 99:6f:1f:59:77:45:d0:e0:d9:93:ff:9f:ab:d3:65: 60:14:a0:8c:84:74:13:45:a6:4f:33:5e:c4:4d:02: 18:27:e7:93:be:7e:7b:fe:03:fb:74:5d:fe:97:90: ca:90:27:f0:e4:5e:7c:b3:1e:f7:c5:2b:e3:d0:a2: d0:13:72:dc:1f:9e:b8:28:63:4c:92:c8:e9:97:c1: 1d:98:08:ad:99:09:5d:cc:53:24:7b:a5:7f:28:51: a3:14:d0:10:c4:3a:28:55:be:23:52:e0:1d:4a:c1: 9f:5f:d5:58:ce:83:52:98:e5:68:db:e8:a7:70:80: 93:56:d7:f4:1f:92:10:2d:2d:67:04:7c:84:2f:6a: 69:86:ba:9a:21:c9:c9:11:b9:2c:64:a4:23:b4:1f: 8c:3a:8e:8a:c8:d1:30:73:14:14:0b:0c:6a:39:c8: 30:6a:d2:f8:be:2b:5d:ff:51:47:e3:13:11:b6:83: 2a:c5:99:01:bf:77:67:05:90:c7:4f:10:da:af:c9: 37:b2:ea:9b:ef:9c:8e:8b:1f:5b:48:32:d7:aa:e6: 7a:3a:5a:34:7f:f9:d3:09:c1:71:5b:68:f7:2b:8c: 31:1d:c1:6b:26:0d:e6:7b:57:dd:d9:a5:29:bb:8f: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A1:C8:93:96:0D:C6:0E:82:FA:6D:CB:58:3E:1D:DC:21:68:58:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bdd446b-d8ca-3ac7-91b7-261492558eca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:51:9d:a9:03:41:0b:43:14:16:93:f0:a8:af:d5:64:c1:d6: 57:9c:16:e5:74:30:d9:82:fa:46:c2:c6:5e:53:c2:fc:e8:31: 18:0c:ec:c2:21:c4:ac:05:07:96:27:d9:82:ed:62:81:1e:58: 6a:9a:71:87:5a:cd:b3:cd:be:d9:01:cc:ee:4a:80:49:60:2f: 8a:3e:73:be:ab:06:66:8d:51:99:da:11:b1:d2:04:7d:f2:f1: 12:bb:5d:fa:95:dc:02:ee:8b:8a:13:a9:e2:b5:8e:67:17:2f: 8e:74:4d:ef:dc:ce:80:0a:56:d8:14:5c:d4:c3:11:b7:84:d5: 0b:6a:96:2c:74:6e:b1:70:d3:97:7f:91:52:16:ee:7a:d5:b5: 0b:9e:7e:60:11:9d:ca:82:28:0b:d7:c2:4e:b0:fd:e9:a9:14: 57:40:be:a4:4b:c7:fa:4e:7f:23:26:f1:ab:cd:6a:d6:5a:13: e5:94:bd:10:8a:33:93:05:80:a7:b1:86:2a:9a:76:51:b3:55: cf:63:7c:b5:b7:fa:ed:38:e1:de:aa:dc:1b:03:1c:c1:67:fd: 3c:40:7e:4d:6b:f4:6d:70:b0:b7:53:32:1c:21:cd:43:d5:87: c6:ee:c2:34:f2:1a:37:91:18:95:20:53:8d:d8:f0:5a:62:d1: 98:d3:f2:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKq3u81/jTotTnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MmZmYmUxMzQtYjE5YS00MWRlLTlhZDAtYzBjZTAyZjk2Njg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVlmjidcwE3AYsTNUJmZbx9Zd0XQ4NmT/5+r 02VgFKCMhHQTRaZPM17ETQIYJ+eTvn57/gP7dF3+l5DKkCfw5F58sx73xSvj0KLQ E3LcH564KGNMksjpl8EdmAitmQldzFMke6V/KFGjFNAQxDooVb4jUuAdSsGfX9VY zoNSmOVo2+incICTVtf0H5IQLS1nBHyEL2pphrqaIcnJEbksZKQjtB+MOo6KyNEw cxQUCwxqOcgwatL4vitd/1FH4xMRtoMqxZkBv3dnBZDHTxDar8k3suqb75yOix9b SDLXquZ6Olo0f/nTCcFxW2j3K4wxHcFrJg3me1fd2aUpu4+OmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2hyJOWDcYOgvpty1g+HdwhaFjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2JkZDQ0NmItZDhjYS0z YWM3LTkxYjctMjYxNDkyNTU4ZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnZcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtRnakDQQtDFBaT8Kiv1WTB1lecFuV0MNmC+kbCxl5TwvzoMRgM7MIh xKwFB5Yn2YLtYoEeWGqacYdazbPNvtkBzO5KgElgL4o+c76rBmaNUZnaEbHSBH3y 8RK7XfqV3ALui4oTqeK1jmcXL450Te/czoAKVtgUXNTDEbeE1Qtqlix0brFw05d/ kVIW7nrVtQuefmARncqCKAvXwk6w/empFFdAvqRLx/pOfyMm8avNatZaE+WUvRCK M5MFgKexhiqadlGzVc9jfLW3+u044d6q3BsDHMFn/TxAfk1r9G1wsLdTMhwhzUPV h8buwjTyGjeRGJUgU43Y8Fpi0ZjT8sE= -----END CERTIFICATE-----Generated at Wed May 13 08:01:18 2026 by rpki-client