$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5993029d-62c3-33fc-ac77-5f35a7139b93.roa File: 5993029d-62c3-33fc-ac77-5f35a7139b93.roa (raw, json) Hash identifier: h0edE4NBwOY+yvrg9/qWWE4KIxqXyn6C2Znm36X22GI= Subject key identifier: 59:47:A1:B8:A6:A6:F8:AE:D7:43:A5:B4:60:63:8D:A8:40:12:67:35 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF9872967CDB9A934635500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5993029d-62c3-33fc-ac77-5f35a7139b93.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 136.248.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:87:29:67:cd:b9:a9:34:63:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b7c574ea-e253-4b2c-9dc1-386212c0c2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:96:b9:01:51:ca:60:09:cb:0b:38:c1:09:fc: 46:e6:b8:1b:93:ac:88:89:f5:b0:56:98:6a:58:5f: 8f:6a:48:cd:76:ef:40:a8:50:0d:db:82:72:39:96: 48:cd:cd:05:2c:32:87:f5:87:42:16:27:d9:c1:9e: 72:e8:02:7f:a8:61:d9:c3:9c:39:16:36:00:78:ac: fc:8e:4b:3e:4d:46:09:d7:2d:86:e0:61:95:a1:b8: 19:ee:9d:f2:41:76:c4:27:d5:d1:d7:dd:83:f0:46: 64:89:bd:73:73:65:28:bb:1c:8d:1a:b9:0c:a1:02: 82:36:cb:d1:1d:07:7d:78:24:6c:e3:f8:71:7a:aa: 15:db:6b:6d:df:69:6b:b5:4d:a4:57:59:69:77:06: 44:d0:25:fb:d1:6c:dc:59:5f:6a:c6:30:71:76:5b: 6b:a3:e2:bf:13:24:fe:54:ce:85:93:bb:ff:44:0e: 21:33:6b:6c:ae:3f:fc:65:d4:e6:77:d9:9d:9c:31: 31:55:90:b9:12:cc:7c:59:83:c9:e0:f7:ed:e2:19: 17:59:2e:71:86:0d:f1:8c:58:34:9a:92:ad:27:e5: d7:07:f4:8a:fe:df:51:db:b6:10:1d:db:d1:67:ac: 8b:2f:e9:f0:35:a0:54:3a:5c:97:9a:f1:4d:06:fc: e2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:47:A1:B8:A6:A6:F8:AE:D7:43:A5:B4:60:63:8D:A8:40:12:67:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5993029d-62c3-33fc-ac77-5f35a7139b93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9c:1b:d1:4e:2b:2d:b8:5d:ac:d0:45:b6:ac:6d:f9:34:7b: df:74:80:ba:82:14:5a:d3:75:72:a9:85:9e:81:5c:5d:51:64: 93:e2:8e:7c:22:e0:af:79:a1:f5:af:ab:43:6a:b5:f0:87:4b: f8:64:6d:4a:fa:62:f0:09:2d:db:d5:01:fb:8c:bd:76:1a:ec: d6:d9:d8:9f:48:2e:92:f1:34:98:fb:8f:91:d5:58:aa:4f:e4: cf:7f:51:70:a1:45:9e:ca:c2:30:97:06:38:5b:4d:87:56:cf: 0e:e1:be:56:23:e8:0b:02:12:96:d9:99:e7:7e:06:21:21:e8: b9:10:25:62:59:96:b6:55:77:59:fe:5a:c5:a2:cc:9b:46:8b: 28:61:5e:2b:bd:bb:9a:76:33:ba:3e:01:54:65:a8:60:06:4b: bf:5d:e3:ec:ac:6c:84:79:6f:ac:59:e6:92:09:40:04:99:39: 23:e2:2f:c3:bc:89:07:db:6f:7d:7b:fd:aa:59:32:30:de:d6: 36:4d:fc:ff:73:4d:8c:b9:2e:fa:d9:48:77:46:24:0a:ad:dc: 5a:98:da:30:65:ac:ca:c7:8c:1c:c7:8b:e2:40:73:9a:1a:57: c4:58:f5:4b:a4:ad:45:03:1a:c3:f0:33:80:13:7f:66:44:d7: fd:1d:2e:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+YcpZ825qTRjVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjdjNTc0ZWEtZTI1My00YjJjLTlkYzEtMzg2MjEyYzBjMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJa5AVHKYAnLCzjBCfxG5rgbk6yIifWwVphq WF+PakjNdu9AqFAN24JyOZZIzc0FLDKH9YdCFifZwZ5y6AJ/qGHZw5w5FjYAeKz8 jks+TUYJ1y2G4GGVobgZ7p3yQXbEJ9XR192D8EZkib1zc2UouxyNGrkMoQKCNsvR HQd9eCRs4/hxeqoV22tt32lrtU2kV1lpdwZE0CX70WzcWV9qxjBxdltro+K/EyT+ VM6Fk7v/RA4hM2tsrj/8ZdTmd9mdnDExVZC5Esx8WYPJ4Pft4hkXWS5xhg3xjFg0 mpKtJ+XXB/SK/t9R27YQHdvRZ6yLL+nwNaBUOlyXmvFNBvzicQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlHobimpviu10OltGBjjahAEmc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTk5MzAyOWQtNjJjMy0z M2ZjLWFjNzctNWYzNWE3MTM5YjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiPhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6cG9FOKy24XazQRbasbfk0e990gLqCFFrTdXKphZ6BXF1RZJPijnwi 4K95ofWvq0NqtfCHS/hkbUr6YvAJLdvVAfuMvXYa7NbZ2J9ILpLxNJj7j5HVWKpP 5M9/UXChRZ7KwjCXBjhbTYdWzw7hvlYj6AsCEpbZmed+BiEh6LkQJWJZlrZVd1n+ WsWizJtGiyhhXiu9u5p2M7o+AVRlqGAGS79d4+ysbIR5b6xZ5pIJQASZOSPiL8O8 iQfbb317/apZMjDe1jZN/P9zTYy5LvrZSHdGJAqt3FqY2jBlrMrHjBzHi+JAc5oa V8RY9UukrUUDGsPwM4ATf2ZE1/0dLt8= -----END CERTIFICATE-----Generated at Wed May 13 10:41:36 2026 by rpki-client