$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/499f2b42-a1a5-34e9-89bc-e271cbd2e61b.roa File: 499f2b42-a1a5-34e9-89bc-e271cbd2e61b.roa (raw, json) Hash identifier: pDm1HvhEWeCxIyUpJ446tDN8veG+1a5ehjvsSZnwYDc= Subject key identifier: 6A:33:91:CC:C9:22:84:3C:CE:59:A3:F0:D7:74:01:29:9A:EE:FC:15 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC5569D43A9AC59D3C514E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/499f2b42-a1a5-34e9-89bc-e271cbd2e61b.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 131.186.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:56:9d:43:a9:ac:59:d3:c5:14:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=0ae0f66b-9835-4cf6-92e6-03f35c6eede5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b7:f0:12:10:27:97:4a:1c:d6:85:66:33:2e: 6f:ec:82:ce:72:64:03:d4:95:68:ae:2a:a0:33:c3: 18:65:a9:29:de:d0:92:f1:0f:95:4b:98:fc:65:a2: 63:2f:bd:f4:7d:fb:67:31:cc:24:4c:39:90:6b:06: c5:68:ac:8b:be:62:0d:23:d6:a7:fa:08:6b:89:2d: e6:64:e7:e8:70:4c:3f:8b:d7:6f:d6:9e:cb:4b:cb: 50:8b:97:89:bb:58:10:b0:07:2a:ea:3b:de:16:e7: 40:b7:68:83:e2:b4:7c:67:df:21:35:44:7a:59:9f: 0e:8a:df:78:40:d3:6d:c3:5a:8c:3d:39:89:21:98: 44:84:11:82:5f:56:55:f8:82:e4:fd:ba:ee:c0:a9: 4e:e0:a5:5b:97:a3:84:6e:40:cd:52:47:d0:15:57: 7d:ad:38:69:00:fd:8f:80:18:20:f2:40:6c:60:7a: b1:5d:9f:b2:bd:c8:19:c2:dd:9f:6d:86:5b:8d:5a: 1d:d8:66:af:a5:64:01:5c:e1:67:94:f6:cb:8c:e9: 07:b5:9a:51:eb:10:f0:0f:c9:62:01:24:f9:6d:51: 59:0d:0e:70:15:c9:93:b2:80:e9:bb:54:11:d6:57: 0a:3b:27:4c:e5:01:db:5d:e6:30:cb:ba:1a:79:09: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:33:91:CC:C9:22:84:3C:CE:59:A3:F0:D7:74:01:29:9A:EE:FC:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/499f2b42-a1a5-34e9-89bc-e271cbd2e61b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:24:3a:fc:ea:0c:3f:a2:d9:79:f1:7e:37:1e:9e:e4:31:81: fb:0e:8d:cd:e6:01:a1:4e:2d:52:25:95:8c:7d:2a:92:cf:26: f9:df:9b:37:2a:ec:47:27:84:c6:13:57:cf:d1:6d:ba:25:e1: c8:f3:98:0b:9a:a6:09:ca:9f:fc:c9:b7:cd:ce:56:38:8a:57: b5:65:91:09:e3:af:fb:21:11:a7:88:28:98:de:17:f2:dc:11: 91:f3:7f:98:d2:94:b1:e4:62:e3:46:b6:be:b0:db:bd:a7:ac: 3b:5c:4d:9e:b4:70:03:43:f3:6c:e8:9c:e9:e4:3c:72:a1:51: c1:64:0a:e6:54:54:8c:9b:ff:e0:f9:cf:43:cd:d6:b1:a8:64: e2:43:17:d0:33:bb:20:8f:af:c5:0d:08:64:4d:db:53:bb:ef: 87:94:d2:ff:73:69:26:02:12:2c:13:ee:66:82:bb:3b:42:56: 35:7b:b6:dd:00:ab:02:93:5d:43:1c:70:20:99:aa:cb:b3:99: 95:71:75:ed:5b:ef:b4:6d:7d:83:c9:d9:75:22:ff:6b:9a:68: 96:4f:3a:76:61:59:be:0b:23:8e:59:16:7b:4d:d1:5f:61:67: 20:ef:81:49:5d:2d:10:d9:ac:d5:e5:1d:7c:e5:b4:9d:96:1a: 3c:3f:86:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVadQ6msWdPFFOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MGFlMGY2NmItOTgzNS00Y2Y2LTkyZTYtMDNmMzVjNmVlZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7fwEhAnl0oc1oVmMy5v7ILOcmQD1JVoriqg M8MYZakp3tCS8Q+VS5j8ZaJjL730fftnMcwkTDmQawbFaKyLvmINI9an+ghriS3m ZOfocEw/i9dv1p7LS8tQi5eJu1gQsAcq6jveFudAt2iD4rR8Z98hNUR6WZ8Oit94 QNNtw1qMPTmJIZhEhBGCX1ZV+ILk/bruwKlO4KVbl6OEbkDNUkfQFVd9rThpAP2P gBgg8kBsYHqxXZ+yvcgZwt2fbYZbjVod2GavpWQBXOFnlPbLjOkHtZpR6xDwD8li AST5bVFZDQ5wFcmTsoDpu1QR1lcKOydM5QHbXeYwy7oaeQmO2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGozkczJIoQ8zlmj8Nd0ASma7vwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDk5ZjJiNDItYTFhNS0z NGU5LTg5YmMtZTI3MWNiZDJlNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEg7oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8kOvzqDD+i2XnxfjcenuQxgfsOjc3mAaFOLVIllYx9KpLPJvnfmzcq 7EcnhMYTV8/Rbbol4cjzmAuapgnKn/zJt83OVjiKV7VlkQnjr/shEaeIKJjeF/Lc EZHzf5jSlLHkYuNGtr6w272nrDtcTZ60cAND82zonOnkPHKhUcFkCuZUVIyb/+D5 z0PN1rGoZOJDF9AzuyCPr8UNCGRN21O774eU0v9zaSYCEiwT7maCuztCVjV7tt0A qwKTXUMccCCZqsuzmZVxde1b77RtfYPJ2XUi/2uaaJZPOnZhWb4LI45ZFntN0V9h ZyDvgUldLRDZrNXlHXzltJ2WGjw/his= -----END CERTIFICATE-----Generated at Wed May 13 05:33:30 2026 by rpki-client