$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa File: 437dc54a-5df5-31db-a160-9f56a183b007.roa (raw, json) Hash identifier: 7eXxrCXDBgBE0w0sFSxpLUeBt0y9wG6dCluRZN0ohVA= Subject key identifier: 30:AA:AE:31:31:42:56:60:F7:43:FB:01:C2:6A:26:EE:B4:B5:8F:BF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF56C2F36624F15FB22E000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 146.235.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:6c:2f:36:62:4f:15:fb:22:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e04a6f99-13ee-4276-a5eb-b96ad2fa854e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:fc:6f:d4:be:a5:6b:6e:b8:6f:32:f3:14: b6:ea:69:17:77:46:25:53:95:a3:ef:1f:6a:5a:c1: e9:9a:50:35:c3:6d:c4:17:b4:68:33:02:d9:a4:74: 78:18:08:79:eb:f5:48:2c:5d:dd:e2:f5:b9:80:ed: 1d:d7:e9:cb:08:52:82:97:4f:de:e6:ef:49:9c:57: 00:f9:d7:07:4a:53:81:57:d5:b2:7c:13:19:e7:79: be:b0:2e:20:ea:80:5d:11:9a:18:86:39:ce:e1:9b: 26:81:fd:a5:e5:ea:ef:e6:de:9e:24:f7:4c:04:b3: d5:96:ef:64:c0:0b:aa:e6:3b:71:1e:f3:87:88:6e: fe:2c:6a:94:60:27:56:ae:7d:2b:a6:59:a4:ee:1e: 97:80:00:78:73:16:40:c0:b8:99:23:91:60:24:8a: a8:c0:4b:00:a2:5b:bc:c7:fa:5f:7a:1d:57:63:c0: 82:d7:8c:d6:9f:35:8c:f0:99:8d:77:7c:8a:05:b7: 2f:20:af:0b:de:b1:7f:ab:8a:43:73:5c:a8:97:8e: b4:fc:01:4c:92:8f:10:83:f0:75:eb:03:fb:34:d0: 38:93:94:01:68:f6:de:37:ec:ad:ed:d5:cb:c4:b9: 48:51:15:2f:6c:ef:a9:99:78:92:be:33:f8:eb:3d: 8e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AA:AE:31:31:42:56:60:F7:43:FB:01:C2:6A:26:EE:B4:B5:8F:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 146.235.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:da:9e:79:b3:eb:7c:05:61:02:96:e2:55:a1:f3:5b:29:f7: 7d:fb:5a:be:18:6d:05:18:51:c0:ae:fe:d9:ec:17:c3:67:52: ea:12:e6:85:06:c1:df:29:92:1c:e3:3f:7e:1a:e2:56:d4:5e: 94:b9:f8:18:c3:63:d7:f9:ad:a4:43:20:23:93:80:2e:09:ee: 6e:16:53:0e:ac:af:15:b5:74:04:c2:a7:fe:36:4c:86:cf:0c: 1e:fc:18:81:aa:72:c7:1d:0e:8a:96:1d:16:c7:65:11:d4:46: 67:7c:05:7f:b4:f7:17:b4:1b:29:f2:7f:ef:ed:d8:9a:b8:58: 57:38:5e:1b:18:f7:27:02:35:ea:56:4b:c1:43:60:27:cb:3e: c5:f1:f6:05:68:1f:b0:6c:62:94:a3:98:7c:32:1f:e3:61:ca: ab:ca:27:ad:80:f8:bb:aa:ea:ae:53:54:ae:d3:5a:62:c1:0d: 26:a9:10:5e:23:2c:97:74:f0:f3:0b:cc:77:a3:a2:c2:98:08: 38:18:a2:70:12:43:09:6f:c2:3f:79:3e:99:25:6c:cf:88:6b: 5c:ac:47:f8:c0:0b:da:38:c3:4b:c1:9d:37:a3:c9:2c:95:39: 91:06:05:55:b0:be:d5:73:6d:1a:9b:ef:3d:2c:bc:d6:f5:0b: 79:37:6b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WwvNmJPFfsi4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZTA0YTZmOTktMTNlZS00Mjc2LWE1ZWItYjk2YWQyZmE4NTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsn8b9S+pWtuuG8y8xS26mkXd0YlU5Wj7x9q WsHpmlA1w23EF7RoMwLZpHR4GAh56/VILF3d4vW5gO0d1+nLCFKCl0/e5u9JnFcA +dcHSlOBV9WyfBMZ53m+sC4g6oBdEZoYhjnO4Zsmgf2l5erv5t6eJPdMBLPVlu9k wAuq5jtxHvOHiG7+LGqUYCdWrn0rplmk7h6XgAB4cxZAwLiZI5FgJIqowEsAolu8 x/pfeh1XY8CC14zWnzWM8JmNd3yKBbcvIK8L3rF/q4pDc1yol460/AFMko8Qg/B1 6wP7NNA4k5QBaPbeN+yt7dXLxLlIURUvbO+pmXiSvjP46z2OKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCqrjExQlZg90P7AcJqJu60tY+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDM3ZGM1NGEtNWRmNS0z MWRiLWExNjAtOWY1NmExODNiMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkusYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTannmz63wFYQKW4lWh81sp9337Wr4YbQUYUcCu/tnsF8NnUuoS5oUG wd8pkhzjP34a4lbUXpS5+BjDY9f5raRDICOTgC4J7m4WUw6srxW1dATCp/42TIbP DB78GIGqcscdDoqWHRbHZRHURmd8BX+09xe0Gynyf+/t2Jq4WFc4XhsY9ycCNepW S8FDYCfLPsXx9gVoH7BsYpSjmHwyH+NhyqvKJ62A+Luq6q5TVK7TWmLBDSapEF4j LJd08PMLzHejosKYCDgYonASQwlvwj95PpklbM+Ia1ysR/jAC9o4w0vBnTejySyV OZEGBVWwvtVzbRqb7z0svNb1C3k3azo= -----END CERTIFICATE-----Generated at Wed May 13 11:58:04 2026 by rpki-client