$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/836b23df-a227-3f29-a41a-832a5422e532.roa File: 836b23df-a227-3f29-a41a-832a5422e532.roa (raw, json) Hash identifier: AGunKXXOLQbSPeKoy+glysVP0rxgt2iVpANopD9LcRo= Subject key identifier: 92:9F:0F:C5:20:A1:B0:42:A1:54:78:2C:F7:D9:06:0A:78:F3:D3:29 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8C2AAED89744B7B94CDD7300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/836b23df-a227-3f29-a41a-832a5422e532.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 168.129.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:ae:d8:97:44:b7:b9:4c:dd:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=e7150888-a683-4265-8b9a-7e75c6802a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e2:2a:de:9e:f7:7a:6e:1d:10:14:1f:b1:1b: 9f:64:9d:ab:8c:e6:55:e4:8d:d3:31:df:a4:96:99: 47:c8:ad:32:01:62:d0:a4:0d:59:c1:d5:b6:9f:9a: 3c:ba:9c:1a:11:18:e8:6a:27:50:4d:92:11:f4:7b: 67:e2:e5:7d:1a:27:b2:1e:ba:7d:37:72:5d:79:b9: f3:74:43:12:9d:4e:4f:71:c1:3b:c1:bb:17:eb:da: 10:0d:96:1b:7e:12:6e:e9:51:4c:ee:5c:ea:6c:38: 7e:2d:9e:4c:4f:b0:fb:fb:11:8d:22:fa:32:7a:ba: f0:3c:a3:e8:5c:55:2f:82:b2:7d:a1:7c:bd:84:a5: 0e:48:ff:1b:65:f5:cb:2d:3c:57:cb:d6:67:2f:36: 3a:97:3c:dd:93:c8:72:dc:0f:b1:a0:4b:24:a2:56: bb:c2:e9:08:27:c7:dc:ce:69:75:6d:d9:20:1b:6e: d6:29:fc:8f:5a:d3:14:6f:52:c1:38:76:c5:a1:83: 6d:3d:9c:f3:f9:b6:df:a1:91:41:02:07:bb:41:5b: b8:a7:c6:ab:dc:0f:ef:1b:4c:35:80:db:bf:a7:7b: 7a:6a:7b:d3:2d:b3:5f:9c:f3:ec:29:9e:ad:c4:9f: 61:a3:9a:45:ce:39:66:9a:c0:f0:a2:ac:c0:da:be: 72:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9F:0F:C5:20:A1:B0:42:A1:54:78:2C:F7:D9:06:0A:78:F3:D3:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/836b23df-a227-3f29-a41a-832a5422e532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:05:0a:6d:83:13:f2:f5:df:f3:54:b6:85:45:51:2d:02:47: a7:61:a6:75:c4:a7:bb:31:77:54:f1:55:db:f9:64:4e:1f:95: 9d:c5:4b:8c:0a:65:fe:62:a2:81:08:fa:1a:fe:86:f8:82:35: 84:29:fe:48:af:ae:5c:1d:53:f2:d4:36:fa:18:95:a9:ac:d6: 38:1e:69:ee:5f:94:76:28:60:a3:59:a8:be:81:fe:94:0d:a0: b2:10:b0:a0:47:09:22:51:18:68:38:4a:eb:78:9a:d4:c0:f7: a4:4c:e1:33:da:25:d4:77:8f:8d:0e:a6:52:2a:fb:97:20:c3: e9:e2:36:71:cd:0f:95:d6:9d:30:98:b6:1e:67:5e:f3:52:4b: dd:3b:83:72:0a:8a:29:98:8a:ce:7a:b2:b2:f9:ef:5b:a8:2c: ea:3d:df:8f:94:68:02:95:f6:5e:71:4b:e3:66:03:22:04:a5: 65:21:8d:06:59:17:04:3d:7a:15:3a:10:a6:6e:44:93:5b:57: 24:7f:58:6d:91:c7:3e:65:06:af:70:d5:ab:92:6c:28:67:59: 7d:f3:22:21:bb:95:50:f0:75:c7:b5:97:69:b3:d4:c8:b9:d5: 65:17:fe:b2:52:78:c3:58:e6:e6:8c:7b:c8:e6:d8:a5:93:e6: d7:cb:ce:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKq7Yl0S3uUzdcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk ZTcxNTA4ODgtYTY4My00MjY1LThiOWEtN2U3NWM2ODAyYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+Iq3p73em4dEBQfsRufZJ2rjOZV5I3TMd+k lplHyK0yAWLQpA1ZwdW2n5o8upwaERjoaidQTZIR9Htn4uV9GieyHrp9N3Jdebnz dEMSnU5PccE7wbsX69oQDZYbfhJu6VFM7lzqbDh+LZ5MT7D7+xGNIvoyerrwPKPo XFUvgrJ9oXy9hKUOSP8bZfXLLTxXy9ZnLzY6lzzdk8hy3A+xoEskola7wukIJ8fc zml1bdkgG27WKfyPWtMUb1LBOHbFoYNtPZzz+bbfoZFBAge7QVu4p8ar3A/vG0w1 gNu/p3t6anvTLbNfnPPsKZ6txJ9ho5pFzjlmmsDwoqzA2r5yYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKfD8UgobBCoVR4LPfZBgp489MpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODM2YjIzZGYtYTIyNy0z ZjI5LWE0MWEtODMyYTU0MjJlNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqIHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAFCm2DE/L13/NUtoVFUS0CR6dhpnXEp7sxd1TxVdv5ZE4flZ3FS4wK Zf5iooEI+hr+hviCNYQp/kivrlwdU/LUNvoYlams1jgeae5flHYoYKNZqL6B/pQN oLIQsKBHCSJRGGg4Sut4mtTA96RM4TPaJdR3j40OplIq+5cgw+niNnHND5XWnTCY th5nXvNSS907g3IKiimYis56srL571uoLOo934+UaAKV9l5xS+NmAyIEpWUhjQZZ FwQ9ehU6EKZuRJNbVyR/WG2Rxz5lBq9w1auSbChnWX3zIiG7lVDwdce1l2mz1Mi5 1WUX/rJSeMNY5uaMe8jm2KWT5tfLzmM= -----END CERTIFICATE-----Generated at Wed May 13 08:34:29 2026 by rpki-client