$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa File: 431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa (raw, json) Hash identifier: z9aspDIH+MgwM9BiL59xiRcRZ2Ne9Pq7z3lk/3aw9Ic= Subject key identifier: 0C:15:27:B4:C5:48:55:81:01:B1:23:EC:73:89:6A:74:74:CF:8A:CE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D8FE703700CA53C2E100F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 164.152.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:e7:03:70:0c:a5:3c:2e:10:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=1ae57170-4edf-4ee8-a4ba-f8740301fbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:78:0d:28:c1:67:34:70:b6:27:b3:6c:0e:93: c1:22:7d:cd:15:52:10:99:96:97:4d:f1:be:1b:65: 33:f4:34:12:b2:d1:f2:9a:46:cb:ff:8a:62:d4:70: a8:de:f8:6b:cf:4e:16:f6:09:62:f8:b2:3f:fe:e7: 75:4f:37:3f:9a:02:00:18:5a:ac:fe:3f:b9:f0:39: 1c:45:41:0f:16:dc:c3:07:e8:43:e5:c1:f5:bf:41: 8c:ce:0f:05:0f:da:70:59:47:8a:11:ae:2c:f3:d5: 66:07:4d:5e:29:7f:20:d7:4f:4d:a5:67:9b:9b:fd: 48:50:42:36:fb:57:cc:b5:47:fb:bc:e4:bf:96:79: 19:af:0b:21:3b:c7:ce:35:06:58:d4:4b:78:d6:02: dc:58:37:3b:bf:33:a3:f6:2c:30:48:c5:32:c0:59: 0a:c9:25:5f:42:83:4c:81:e2:62:cf:c4:a5:9a:65: 38:f7:fe:14:b0:30:ee:9d:25:4b:fa:e3:9d:17:0f: fd:17:d5:4f:86:f1:c9:d3:a2:da:ff:27:18:b0:06: 3d:cb:29:e0:7f:b5:80:23:f7:0f:0d:9f:d0:ad:b2: e5:b9:c0:ef:0c:f6:6f:13:a1:37:1d:46:bd:c1:08: 53:ae:37:dc:83:72:13:e5:b9:16:97:b2:f9:f4:4c: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:15:27:B4:C5:48:55:81:01:B1:23:EC:73:89:6A:74:74:CF:8A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:30:df:51:ae:17:6e:14:b8:da:04:b0:c9:d1:69:49:55:7f: e2:78:e9:5e:fa:73:34:06:b2:68:87:59:c7:8b:2b:dd:e4:d4: 1b:e5:e1:ab:d2:78:eb:f4:c2:02:5b:d1:88:7c:92:16:35:c1: 4a:10:5a:00:0d:2e:10:d3:4a:d5:80:23:ca:18:c4:f2:2d:0b: 64:aa:93:1a:c9:38:07:c1:4b:1b:6e:3a:09:09:48:7b:88:d6: 44:50:ca:20:14:a4:94:51:67:cf:57:1e:4d:12:0d:e6:e2:61: 95:cb:3f:5a:fe:ac:69:58:50:34:c3:47:08:be:e0:77:fc:97: 38:9b:70:2a:62:a9:bf:fb:8c:78:ef:81:ba:34:78:81:6f:a4: 35:bb:fe:43:a0:4c:32:c8:ab:c1:15:d9:54:ff:1f:40:85:e9: 52:62:c3:cc:93:68:99:33:b2:06:25:bd:5a:f2:19:6e:ae:15: 3e:27:f4:df:88:ec:1e:50:60:0d:fa:b0:f2:4c:fe:09:9e:63: ec:46:29:68:ab:f1:f0:5e:56:cf:ae:d5:ba:35:1d:8e:74:00: b1:0d:5b:08:2e:16:b1:e1:00:36:9a:46:a2:53:c1:c3:d1:fd: 7c:53:3f:4b:14:9d:37:bc:d1:05:10:20:e4:93:e2:50:79:09: 6c:55:80:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj+cDcAylPC4QDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk MWFlNTcxNzAtNGVkZi00ZWU4LWE0YmEtZjg3NDAzMDFmYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HgNKMFnNHC2J7NsDpPBIn3NFVIQmZaXTfG+ G2Uz9DQSstHymkbL/4pi1HCo3vhrz04W9gli+LI//ud1Tzc/mgIAGFqs/j+58Dkc RUEPFtzDB+hD5cH1v0GMzg8FD9pwWUeKEa4s89VmB01eKX8g109NpWebm/1IUEI2 +1fMtUf7vOS/lnkZrwshO8fONQZY1Et41gLcWDc7vzOj9iwwSMUywFkKySVfQoNM geJiz8SlmmU49/4UsDDunSVL+uOdFw/9F9VPhvHJ06La/ycYsAY9yyngf7WAI/cP DZ/QrbLlucDvDPZvE6E3HUa9wQhTrjfcg3IT5bkWl7L59ExorQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwVJ7TFSFWBAbEj7HOJanR0z4rOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDMxMDUwYzItZTkyZS0z ZTRiLTg3NTItZjdlMWU3YTg0NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpJjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAw31GuF24UuNoEsMnRaUlVf+J46V76czQGsmiHWceLK93k1Bvl4avS eOv0wgJb0Yh8khY1wUoQWgANLhDTStWAI8oYxPItC2SqkxrJOAfBSxtuOgkJSHuI 1kRQyiAUpJRRZ89XHk0SDebiYZXLP1r+rGlYUDTDRwi+4Hf8lzibcCpiqb/7jHjv gbo0eIFvpDW7/kOgTDLIq8EV2VT/H0CF6VJiw8yTaJkzsgYlvVryGW6uFT4n9N+I 7B5QYA36sPJM/gmeY+xGKWir8fBeVs+u1bo1HY50ALENWwguFrHhADaaRqJTwcPR /XxTP0sUnTe80QUQIOST4lB5CWxVgIY= -----END CERTIFICATE-----Generated at Wed May 13 06:09:11 2026 by rpki-client