$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e9bbea3-fc0b-386c-bbfe-06002e4c2ea9.roa File: 5e9bbea3-fc0b-386c-bbfe-06002e4c2ea9.roa (raw, json) Hash identifier: 3G1it/5RRPFyXcVH9T5gjVLBviIp2qTSothc8hxsSwM= Subject key identifier: 92:BF:BC:85:79:06:57:83:E0:84:91:C7:02:1F:71:97:27:7A:E5:FD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF98EE2F59DB721CBFA2A00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e9bbea3-fc0b-386c-bbfe-06002e4c2ea9.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 136.248.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:8e:e2:f5:9d:b7:21:cb:fa:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=26eb6fa2-bf7f-4175-b209-14e8925ededc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c3:82:6a:ca:06:08:84:d5:22:97:17:52:51: ab:a8:5b:0c:0d:1c:cb:dc:8c:6a:55:2c:db:7d:9b: de:03:7a:81:64:af:bf:93:b2:02:aa:fb:df:91:37: b8:70:79:bf:35:5d:7c:6b:38:d6:03:92:5e:6d:2f: db:a9:74:01:62:1b:02:3d:6c:54:1d:da:11:35:02: 8f:4a:b8:af:3f:d5:08:c3:62:37:a3:39:08:fa:81: 9e:4d:61:e0:65:69:29:5b:7e:44:9b:71:7f:bb:eb: ed:2b:5e:c0:fa:45:95:d3:d6:4d:d7:7f:21:c9:0d: b2:bc:9b:91:21:a7:78:e2:bb:c4:79:27:d7:39:00: 92:72:4b:42:e3:bb:f6:c5:fe:74:22:e6:50:3d:d1: f8:0f:a2:1f:67:ac:9b:7a:cc:82:9e:a1:1d:5b:09: 06:db:bb:24:ad:6e:bf:d1:e3:75:71:d9:e5:07:68: 3b:07:24:04:d6:15:f2:23:52:dc:0b:d6:0d:98:d4: d5:c9:70:92:12:02:70:aa:75:3d:4c:77:b9:60:28: 4a:25:00:1c:6f:1b:f5:f2:5e:06:d3:76:72:1a:22: 89:89:d6:07:75:dc:2d:6a:e9:4c:ee:28:a2:ec:66: 75:3e:bd:da:07:c3:4f:d5:12:a3:51:d5:eb:44:65: a2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BF:BC:85:79:06:57:83:E0:84:91:C7:02:1F:71:97:27:7A:E5:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e9bbea3-fc0b-386c-bbfe-06002e4c2ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:53:70:99:fc:a5:c1:b6:cd:aa:e4:2c:1f:1d:a2:61:24:74: e3:8b:77:24:a1:c7:23:c9:e9:64:02:36:4c:2b:7d:c2:88:66: 33:46:b0:34:e5:c7:83:b4:78:69:18:be:de:ae:a6:99:f3:ab: 7d:31:00:f7:d5:f4:ca:e0:a2:94:e8:eb:a5:f1:d5:c1:45:f1: a2:fd:46:ff:2c:f7:63:cd:e9:58:88:e3:00:19:53:ab:9a:1d: 81:d5:02:d7:2a:35:81:86:18:11:59:f3:e6:e2:85:0d:5a:f4: 82:19:ce:62:95:ee:60:24:82:20:ba:33:9f:c0:9c:76:bb:e9: bc:9a:c2:bb:e0:01:bc:9f:0f:49:d2:5c:2c:57:c1:86:e6:68: a1:55:46:20:91:1e:c8:35:41:8b:a4:04:21:bc:88:d8:b2:de: 23:01:28:c2:97:10:a7:14:ae:81:51:98:1f:65:32:78:9c:af: ef:07:94:59:bf:3f:ae:19:f8:93:88:b6:ed:8a:f3:aa:36:a4: 60:01:df:a9:2f:11:da:2b:8e:da:73:b9:f3:6c:4d:07:47:5a: c4:09:e3:f7:4b:d2:bf:d6:4b:11:48:ba:ce:0a:80:f2:40:4d: 2a:68:94:c9:12:c4:21:c8:35:79:5a:6e:db:d2:0a:af:68:0d: 84:2b:7e:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Y7i9Z23Icv6KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MjZlYjZmYTItYmY3Zi00MTc1LWIyMDktMTRlODkyNWVkZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMOCasoGCITVIpcXUlGrqFsMDRzL3IxqVSzb fZveA3qBZK+/k7ICqvvfkTe4cHm/NV18azjWA5JebS/bqXQBYhsCPWxUHdoRNQKP SrivP9UIw2I3ozkI+oGeTWHgZWkpW35Em3F/u+vtK17A+kWV09ZN138hyQ2yvJuR Iad44rvEeSfXOQCScktC47v2xf50IuZQPdH4D6IfZ6ybesyCnqEdWwkG27skrW6/ 0eN1cdnlB2g7ByQE1hXyI1LcC9YNmNTVyXCSEgJwqnU9THe5YChKJQAcbxv18l4G 03ZyGiKJidYHddwtaulM7iii7GZ1Pr3aB8NP1RKjUdXrRGWi3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK/vIV5BleD4ISRxwIfcZcneuX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWU5YmJlYTMtZmMwYi0z ODZjLWJiZmUtMDYwMDJlNGMyZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiPjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRTcJn8pcG2zarkLB8domEkdOOLdyShxyPJ6WQCNkwrfcKIZjNGsDTl x4O0eGkYvt6uppnzq30xAPfV9MrgopTo66Xx1cFF8aL9Rv8s92PN6ViI4wAZU6ua HYHVAtcqNYGGGBFZ8+bihQ1a9IIZzmKV7mAkgiC6M5/AnHa76byawrvgAbyfD0nS XCxXwYbmaKFVRiCRHsg1QYukBCG8iNiy3iMBKMKXEKcUroFRmB9lMnicr+8HlFm/ P64Z+JOItu2K86o2pGAB36kvEdorjtpzufNsTQdHWsQJ4/dL0r/WSxFIus4KgPJA TSpolMkSxCHINXlabtvSCq9oDYQrfps= -----END CERTIFICATE-----Generated at Wed May 13 08:37:48 2026 by rpki-client