$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/55a24569-124a-3fe2-9189-dc3d8ac17018.roa File: 55a24569-124a-3fe2-9189-dc3d8ac17018.roa (raw, json) Hash identifier: gYA70nQEO9iX/nsy/U+sDO8FfkYeH+Ox7unXU8litb8= Subject key identifier: C4:BD:8A:6C:BE:FC:40:CA:BB:F9:60:D1:C1:E5:99:AA:77:6B:85:0F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF99F500ED5A1271B647600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/55a24569-124a-3fe2-9189-dc3d8ac17018.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 168.138.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:9f:50:0e:d5:a1:27:1b:64:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=48e77c73-c586-4a2d-8f3e-f02d6450b25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:56:1d:96:7f:b3:a2:5f:5f:ce:75:06:aa:a6: 14:3f:ee:1c:a1:06:06:25:21:17:72:3c:5b:c7:02: 5a:af:80:b5:7b:66:8b:df:eb:01:c9:51:85:aa:6c: e3:cd:ad:bc:d8:87:a0:34:8c:59:8f:af:46:ad:07: c4:f2:22:26:08:8b:76:f6:0e:a6:47:77:4d:05:16: cd:48:59:45:d5:c2:71:6f:f7:9e:40:04:d9:0c:31: fc:f0:af:07:28:e1:44:bd:a7:cf:fe:fb:35:74:ce: 37:94:7b:5d:4a:38:7b:7d:52:b7:a8:0d:29:eb:18: ba:b3:25:a5:dc:1e:90:21:f5:e2:b6:c0:ac:28:63: f4:61:5b:b0:e4:ba:06:08:60:b2:b8:d7:51:94:39: 51:ab:50:47:ec:01:8e:d1:ff:f1:5d:2c:e1:46:81: fc:9b:11:9b:54:4a:02:b6:16:7e:2a:26:11:94:57: a7:b3:54:09:62:12:2f:c4:2d:de:59:75:cb:ee:25: c5:40:53:7e:e9:f0:85:10:bb:f9:ec:58:8b:e6:50: 45:51:62:6d:47:54:90:7f:4b:1e:49:91:2d:c0:60: cf:f3:99:9c:94:77:4e:be:7c:d1:b8:0f:08:78:a5: 6c:c2:fe:78:ad:1b:be:06:2b:a6:e0:5c:a7:e9:64: d9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BD:8A:6C:BE:FC:40:CA:BB:F9:60:D1:C1:E5:99:AA:77:6B:85:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/55a24569-124a-3fe2-9189-dc3d8ac17018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:6b:2a:0a:5f:a6:f2:37:1d:78:18:d1:3f:5e:32:ff:21:27: 85:26:ec:4b:a0:b1:01:ab:29:a2:32:7d:b0:4d:87:f2:10:f3: 5f:e2:c1:3b:1e:66:1c:06:17:f2:d8:ee:bc:4d:ce:35:d9:68: 42:89:32:5e:91:bc:db:76:0b:ff:cd:bf:d5:80:a2:43:60:c2: 32:04:87:24:43:f8:b6:71:00:7f:ca:71:82:b7:19:a2:d8:e4: 8e:ec:44:96:ba:b9:7c:28:94:3e:86:47:c2:96:59:07:4e:19: 49:9f:a9:f3:c4:53:24:99:ae:5b:d4:97:c3:d2:f2:db:5c:2d: 57:e6:4d:7e:2a:e8:c3:97:fa:95:0c:12:97:26:44:09:51:41: 50:0c:2e:92:3e:15:18:43:b8:e0:81:1b:98:38:29:0d:66:0c: b6:57:20:e5:7b:1a:74:ed:6b:52:a2:d1:4c:55:ce:86:7d:a8: c0:10:c2:0e:0b:a1:4e:3c:46:4e:7a:02:c9:c1:82:be:02:4a: 0f:72:fd:41:6f:e2:c1:5e:01:97:fb:07:3a:c6:b2:07:65:4e: 82:46:e6:a2:51:b8:25:0d:61:da:12:c4:cd:46:7a:c6:79:cd: e2:7e:ca:af:44:eb:29:2a:0f:9f:52:37:0a:46:2b:b5:50:9b: c8:f5:c9:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Z9QDtWhJxtkdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NDhlNzdjNzMtYzU4Ni00YTJkLThmM2UtZjAyZDY0NTBiMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFYdln+zol9fznUGqqYUP+4coQYGJSEXcjxb xwJar4C1e2aL3+sByVGFqmzjza282IegNIxZj69GrQfE8iImCIt29g6mR3dNBRbN SFlF1cJxb/eeQATZDDH88K8HKOFEvafP/vs1dM43lHtdSjh7fVK3qA0p6xi6syWl 3B6QIfXitsCsKGP0YVuw5LoGCGCyuNdRlDlRq1BH7AGO0f/xXSzhRoH8mxGbVEoC thZ+KiYRlFens1QJYhIvxC3eWXXL7iXFQFN+6fCFELv57FiL5lBFUWJtR1SQf0se SZEtwGDP85mclHdOvnzRuA8IeKVswv54rRu+Bium4Fyn6WTZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS9imy+/EDKu/lg0cHlmap3a4UPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTVhMjQ1NjktMTI0YS0z ZmUyLTkxODktZGMzZDhhYzE3MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5rKgpfpvI3HXgY0T9eMv8hJ4Um7EugsQGrKaIyfbBNh/IQ81/iwTse ZhwGF/LY7rxNzjXZaEKJMl6RvNt2C//Nv9WAokNgwjIEhyRD+LZxAH/KcYK3GaLY 5I7sRJa6uXwolD6GR8KWWQdOGUmfqfPEUySZrlvUl8PS8ttcLVfmTX4q6MOX+pUM EpcmRAlRQVAMLpI+FRhDuOCBG5g4KQ1mDLZXIOV7GnTta1Ki0UxVzoZ9qMAQwg4L oU48Rk56AsnBgr4CSg9y/UFv4sFeAZf7BzrGsgdlToJG5qJRuCUNYdoSxM1GesZ5 zeJ+yq9E6ykqD59SNwpGK7VQm8j1yf8= -----END CERTIFICATE-----Generated at Wed May 13 11:54:53 2026 by rpki-client