$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c8c361b-4bcb-3ad8-803d-0f424114f044.roa File: 3c8c361b-4bcb-3ad8-803d-0f424114f044.roa (raw, json) Hash identifier: qjqlS93wYytLEu82KbuP1GlA4+ygxY0TNkp6EAAjKZM= Subject key identifier: 0E:8F:60:06:0C:B2:F5:C9:83:62:62:4D:1E:64:90:F4:D7:E0:29:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF56FC8374968D7B0E38020 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c8c361b-4bcb-3ad8-803d-0f424114f044.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 146.235.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:6f:c8:37:49:68:d7:b0:e3:80:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9b683d54-1a73-4bd2-9e50-c00113ad9d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f6:6f:31:bd:40:62:36:7a:fc:3e:84:12:cd: ab:ec:f7:4c:32:63:0d:7a:ec:96:b5:0f:ab:36:6f: ba:c0:da:d8:38:d4:d6:6c:57:fc:48:6b:2f:d1:a2: 5d:12:91:a8:dd:68:b0:5a:27:9e:f4:3e:3a:e6:70: 36:4f:de:e8:05:cf:18:70:09:11:d7:8f:f3:3b:e8: 52:64:ca:dc:27:4c:c2:84:87:dd:0b:3c:a8:8c:88: 04:f4:99:5b:c4:f8:56:a8:dd:de:30:43:2b:0c:97: 24:41:3d:54:3b:08:8c:03:ba:e0:73:d2:60:01:33: 48:77:7e:75:8e:c4:04:29:68:58:d1:5a:22:29:ee: 26:b2:3f:3e:e4:f9:e2:62:8b:9a:e4:23:d2:32:8a: 47:d7:f7:3a:c9:dd:00:ed:e0:ac:a5:9d:fb:e9:a8: 4c:03:c9:3b:ff:4e:cd:83:5f:d4:b0:c4:eb:60:96: fc:50:5e:c4:4a:3a:c4:09:c9:70:1d:23:47:f2:aa: 1e:1b:79:7b:f0:7a:13:8c:16:53:6f:7e:03:c6:b1: be:56:01:4e:a2:ab:73:64:5c:da:a1:a2:c2:6c:59: 86:ce:5d:e2:55:80:89:09:05:03:cb:bc:20:25:d9: 21:f3:9a:a1:73:0a:2f:a4:b3:c7:27:72:39:01:ba: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8F:60:06:0C:B2:F5:C9:83:62:62:4D:1E:64:90:F4:D7:E0:29:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c8c361b-4bcb-3ad8-803d-0f424114f044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 146.235.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6a:f4:d2:93:1d:e5:a0:c1:c7:d7:d0:2a:56:af:92:66:a5: ba:4b:5d:ba:f3:6a:41:19:16:64:dc:9a:13:ba:61:31:b0:30: c8:f9:c6:f2:b8:b5:3d:6a:b4:0b:3d:74:60:44:16:ff:43:4d: 2b:47:58:f7:09:38:f6:9f:e2:87:96:81:56:13:27:bb:cc:37: 08:e4:a5:8e:d6:35:73:ca:81:4f:75:d8:6a:ea:d6:e2:74:75: a2:be:0b:30:a5:ac:74:f6:64:6e:58:bd:d5:1a:d8:cf:2b:81: c7:ec:54:83:21:ff:d3:9a:d0:aa:e8:97:71:9c:d2:f9:f0:bb: e1:38:56:6a:ff:5e:4d:c6:db:a0:56:d0:5d:a3:a8:e3:0e:8a: 20:3f:9a:74:e0:30:4b:92:4e:c0:0b:bb:39:9a:4d:f4:47:fd: af:a2:18:19:15:ce:8a:5f:51:18:bb:db:21:e6:a9:94:79:a4: c0:c8:22:78:98:47:51:cf:12:94:31:15:19:c0:a8:f2:03:f5: 1d:92:aa:ab:7b:fc:c3:d5:bf:23:0b:87:b0:7c:99:6d:17:ab: 46:1b:50:ee:df:9c:b2:db:ad:5e:ee:a7:dd:24:27:04:cb:cd: ba:ca:6c:7d:79:c8:4e:a1:46:ae:86:f9:c3:c6:ea:cb:fa:a1: 87:5a:1f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9W/IN0lo17DjgCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWI2ODNkNTQtMWE3My00YmQyLTllNTAtYzAwMTEzYWQ5ZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPZvMb1AYjZ6/D6EEs2r7PdMMmMNeuyWtQ+r Nm+6wNrYONTWbFf8SGsv0aJdEpGo3WiwWiee9D465nA2T97oBc8YcAkR14/zO+hS ZMrcJ0zChIfdCzyojIgE9JlbxPhWqN3eMEMrDJckQT1UOwiMA7rgc9JgATNId351 jsQEKWhY0VoiKe4msj8+5PniYoua5CPSMopH1/c6yd0A7eCspZ376ahMA8k7/07N g1/UsMTrYJb8UF7ESjrECclwHSNH8qoeG3l78HoTjBZTb34DxrG+VgFOoqtzZFza oaLCbFmGzl3iVYCJCQUDy7wgJdkh85qhcwovpLPHJ3I5AbrHhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6PYAYMsvXJg2JiTR5kkPTX4ClYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2M4YzM2MWItNGJjYi0z YWQ4LTgwM2QtMGY0MjQxMTRmMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkusgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5q9NKTHeWgwcfX0CpWr5JmpbpLXbrzakEZFmTcmhO6YTGwMMj5xvK4 tT1qtAs9dGBEFv9DTStHWPcJOPaf4oeWgVYTJ7vMNwjkpY7WNXPKgU912Grq1uJ0 daK+CzClrHT2ZG5YvdUa2M8rgcfsVIMh/9Oa0Krol3Gc0vnwu+E4Vmr/Xk3G26BW 0F2jqOMOiiA/mnTgMEuSTsALuzmaTfRH/a+iGBkVzopfURi72yHmqZR5pMDIIniY R1HPEpQxFRnAqPID9R2Sqqt7/MPVvyMLh7B8mW0Xq0YbUO7fnLLbrV7up90kJwTL zbrKbH15yE6hRq6G+cPG6sv6oYdaH9o= -----END CERTIFICATE-----Generated at Wed May 13 08:08:20 2026 by rpki-client