$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa File: 65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa (raw, json) Hash identifier: +eTg9vaT8zxRKbI3ZW8Wn3MX/WIskSkavhq14QEE3eU= Subject key identifier: 07:54:96:1B:46:D4:68:C0:6C:01:D5:0B:A5:EB:99:E3:B1:77:B6:8E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF995D031ACB0FDB7CE3B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 132.145.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:95:d0:31:ac:b0:fd:b7:ce:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b48b4f28-62e1-4ed3-87c9-0ee5be13e815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:41:0c:53:27:b7:1e:00:ad:6f:3b:a8:0e:0a: 03:a1:80:5b:cb:8b:a2:75:5e:94:91:13:c9:46:26: 93:fd:f1:85:77:ca:32:d2:fa:ca:67:a6:26:c0:9e: 16:34:ce:02:12:d2:b4:8e:f4:dd:73:72:83:0f:24: 88:64:e8:81:be:78:7d:32:9d:42:71:b9:ff:ad:27: 09:f8:95:d5:1c:48:c7:3f:dd:96:20:f6:d7:47:57: e7:0c:61:21:ff:79:16:00:1a:a5:df:58:1a:56:4b: 47:f9:4f:40:d2:84:fc:86:65:65:8a:0a:90:70:44: e9:bf:4e:8d:fb:73:99:99:0c:50:6e:91:44:3b:45: d5:a2:80:4f:7f:0b:cb:96:19:41:6c:74:c6:d6:81: be:b6:52:70:91:13:8f:bc:89:a2:18:6f:a1:2e:7d: 6c:38:be:1b:d8:f3:5a:18:09:af:59:4d:cf:50:a7: fd:c5:f0:45:d1:7f:11:e7:6c:12:17:0e:46:61:ad: 7b:88:4c:79:8b:92:2c:a9:ac:90:29:4e:33:9e:5f: c6:84:b3:e3:94:0d:91:82:50:11:d5:d8:6f:ad:14: ce:c7:91:a7:58:49:1d:2f:3d:22:23:81:4e:12:60: e3:21:b6:cc:13:99:f9:a5:a2:94:ea:27:94:a4:2d: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:54:96:1B:46:D4:68:C0:6C:01:D5:0B:A5:EB:99:E3:B1:77:B6:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:73:6b:f7:dc:7a:7e:e0:72:82:b7:44:18:88:8f:6f:92:7f: d9:03:04:19:d5:7b:13:e4:df:74:5b:1c:1f:b6:10:6f:bc:49: 83:dc:10:67:5c:b1:b5:2f:b0:f4:2b:22:96:11:48:19:74:6a: 27:ef:fd:43:6c:be:98:82:89:38:ef:06:d7:95:79:d7:74:a0: a1:22:5c:0d:18:24:a6:02:81:a3:cc:73:e3:40:d2:43:c7:8b: cb:c7:30:0d:e9:ac:ad:57:09:3c:f1:05:ff:11:3a:e2:79:a2: 75:4f:32:5c:0f:ee:e3:36:f6:8a:07:d5:2f:dc:f6:78:b0:38: 06:ec:d1:a4:68:b5:11:37:1c:5b:61:1b:48:8b:90:f7:20:b4: 60:cc:f9:b4:49:86:d3:e4:ce:83:59:d9:32:6e:61:8f:45:37: ee:d6:8a:e3:f8:a5:2d:fa:af:68:8f:75:7a:be:d3:3a:b1:14: 8e:86:d7:bd:30:ce:7b:7d:73:83:74:90:22:f4:69:9b:a4:93: 8e:fd:d2:d4:0d:71:1d:30:4d:f5:e3:5d:c5:2c:13:8f:ab:f8: 85:e8:00:7d:ee:04:55:95:9b:fb:ef:9c:a4:8b:47:c8:a3:47: d2:68:54:0e:f6:26:0f:dc:7d:23:1a:8d:6b:26:36:bf:6b:b7: d2:37:72:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZXQMayw/bfOOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjQ4YjRmMjgtNjJlMS00ZWQzLTg3YzktMGVlNWJlMTNlODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60EMUye3HgCtbzuoDgoDoYBby4uidV6UkRPJ RiaT/fGFd8oy0vrKZ6YmwJ4WNM4CEtK0jvTdc3KDDySIZOiBvnh9Mp1Ccbn/rScJ +JXVHEjHP92WIPbXR1fnDGEh/3kWABql31gaVktH+U9A0oT8hmVligqQcETpv06N +3OZmQxQbpFEO0XVooBPfwvLlhlBbHTG1oG+tlJwkROPvImiGG+hLn1sOL4b2PNa GAmvWU3PUKf9xfBF0X8R52wSFw5GYa17iEx5i5IsqayQKU4znl/GhLPjlA2RglAR 1dhvrRTOx5GnWEkdLz0iI4FOEmDjIbbME5n5paKU6ieUpC1z/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdUlhtG1GjAbAHVC6XrmeOxd7aOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjVkNDYzNjQtZmJmMS0z YTY2LWEwZDAtOGNlZDllZmNiZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlza/fcen7gcoK3RBiIj2+Sf9kDBBnVexPk33RbHB+2EG+8SYPcEGdc sbUvsPQrIpYRSBl0aifv/UNsvpiCiTjvBteVedd0oKEiXA0YJKYCgaPMc+NA0kPH i8vHMA3prK1XCTzxBf8ROuJ5onVPMlwP7uM29ooH1S/c9niwOAbs0aRotRE3HFth G0iLkPcgtGDM+bRJhtPkzoNZ2TJuYY9FN+7WiuP4pS36r2iPdXq+0zqxFI6G170w znt9c4N0kCL0aZukk4790tQNcR0wTfXjXcUsE4+r+IXoAH3uBFWVm/vvnKSLR8ij R9JoVA72Jg/cfSMajWsmNr9rt9I3cm4= -----END CERTIFICATE-----Generated at Wed May 13 10:38:24 2026 by rpki-client