$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43c9d163-584e-332a-89e1-2f2991d177ed.roa File: 43c9d163-584e-332a-89e1-2f2991d177ed.roa (raw, json) Hash identifier: pJXYUpwVWv/GIBBG7wI0UXMz/uLyHm2+d7wBGJYSE3E= Subject key identifier: B0:A6:FE:C5:64:C3:16:3C:77:12:EC:E9:BC:3D:6D:9D:8D:5F:FB:4B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D8FF58FAA101F52D6944400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43c9d163-584e-332a-89e1-2f2991d177ed.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 168.107.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:f5:8f:aa:10:1f:52:d6:94:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=ae4f6ac9-6ed0-48b8-91a0-123bb0c2deb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:90:e5:3d:c9:32:e9:07:b9:7d:20:3d:1d: 40:09:93:59:fb:2f:b0:58:ff:6e:c7:22:f8:2e:05: b0:4e:b9:f5:bd:63:21:90:a4:9e:22:80:bb:61:75: ba:86:d0:91:67:a4:60:56:69:ac:e9:0b:3d:b1:38: 88:f1:7a:52:8a:7e:ae:37:5a:5d:fd:4a:2b:e9:b1: 2f:2d:f2:0a:f2:bf:3b:90:d2:c8:07:5c:16:b7:6c: 34:79:7f:19:2b:22:da:ea:94:d0:3f:51:38:35:49: 78:aa:1e:9e:89:21:fc:94:4b:4d:5d:e6:ad:4d:d8: 62:58:c9:e6:9f:a1:9a:7c:f1:65:3d:20:a2:77:31: c7:a6:2b:8d:cf:28:42:13:2e:11:b5:7d:75:39:ca: ce:4f:0e:55:d3:b2:76:f1:9e:b0:5d:bd:4f:85:0a: f1:ae:17:d6:d5:e9:49:1e:60:67:e9:a9:13:4d:82: 4c:58:1d:3b:19:57:f5:fb:4e:66:dc:2c:08:ed:ce: 1a:0c:90:50:07:3b:7b:8d:8d:ad:c6:d6:a2:09:b8: 7b:ae:66:45:da:db:77:f4:5d:12:96:0c:eb:96:c6: 45:0a:1c:e6:7b:29:dc:c3:04:fc:93:fc:89:ff:fb: 4c:35:cf:72:fa:f8:df:e2:ab:2f:63:6d:67:55:c3: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A6:FE:C5:64:C3:16:3C:77:12:EC:E9:BC:3D:6D:9D:8D:5F:FB:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43c9d163-584e-332a-89e1-2f2991d177ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a8:e8:0f:80:55:de:8d:7a:77:8f:5f:21:89:fb:af:9a:99: 01:d3:f9:84:c2:06:4e:27:b9:12:9a:1c:6a:78:97:e8:87:d3: a3:cd:70:87:02:06:db:3a:e8:29:68:98:8c:90:8b:8d:ee:fb: 66:bc:2a:e6:50:52:d9:ef:58:19:36:be:cf:bd:ec:27:d5:f3: cc:22:32:2f:07:8f:f3:45:d7:a5:0a:97:5f:ff:8a:ac:86:00: 4d:2b:c4:86:ac:83:14:69:e9:3f:74:62:73:ef:a7:9e:ef:3b: 81:19:82:18:8d:1b:a3:73:2b:00:49:f9:62:0b:e8:02:21:6f: 46:4a:ee:fa:ce:f7:f8:8f:a3:20:4a:ab:b2:0f:2d:4f:c7:89: 9b:6c:e6:68:05:18:2c:32:86:de:8a:d9:d8:13:bd:1c:27:97: 06:e5:a2:78:eb:27:f0:2c:56:35:f4:9e:b1:b0:7e:03:ac:6f: a8:dd:5e:00:30:b4:fe:c3:65:9c:88:65:05:af:17:04:b1:c2: 52:c4:ba:39:2f:e6:ec:cb:5a:a0:3c:8f:93:91:f6:8a:8b:79: 03:8c:6a:34:e2:b2:9c:4b:d3:f4:14:79:55:32:17:71:76:71: bb:02:42:6e:07:7d:94:7a:03:3c:5d:f4:22:65:53:ea:92:f4: 1d:81:b2:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/WPqhAfUtaURAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk YWU0ZjZhYzktNmVkMC00OGI4LTkxYTAtMTIzYmIwYzJkZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAqQ5T3JMukHuX0gPR1ACZNZ+y+wWP9uxyL4 LgWwTrn1vWMhkKSeIoC7YXW6htCRZ6RgVmms6Qs9sTiI8XpSin6uN1pd/Uor6bEv LfIK8r87kNLIB1wWt2w0eX8ZKyLa6pTQP1E4NUl4qh6eiSH8lEtNXeatTdhiWMnm n6GafPFlPSCidzHHpiuNzyhCEy4RtX11OcrOTw5V07J28Z6wXb1PhQrxrhfW1elJ HmBn6akTTYJMWB07GVf1+05m3CwI7c4aDJBQBzt7jY2txtaiCbh7rmZF2tt39F0S lgzrlsZFChzmeyncwwT8k/yJ//tMNc9y+vjf4qsvY21nVcNbFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCm/sVkwxY8dxLs6bw9bZ2NX/tLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDNjOWQxNjMtNTg0ZS0z MzJhLTg5ZTEtMmYyOTkxZDE3N2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqGtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACo6A+AVd6NenePXyGJ+6+amQHT+YTCBk4nuRKaHGp4l+iH06PNcIcC Bts66ClomIyQi43u+2a8KuZQUtnvWBk2vs+97CfV88wiMi8Hj/NF16UKl1//iqyG AE0rxIasgxRp6T90YnPvp57vO4EZghiNG6NzKwBJ+WIL6AIhb0ZK7vrO9/iPoyBK q7IPLU/HiZts5mgFGCwyht6K2dgTvRwnlwblonjrJ/AsVjX0nrGwfgOsb6jdXgAw tP7DZZyIZQWvFwSxwlLEujkv5uzLWqA8j5OR9oqLeQOMajTispxL0/QUeVUyF3F2 cbsCQm4HfZR6Azxd9CJlU+qS9B2Bsug= -----END CERTIFICATE-----Generated at Wed May 13 10:41:04 2026 by rpki-client