$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa File: 8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa (raw, json) Hash identifier: McD2L1zUHX4CnRj235fsN+cZIoNoex7IVUn5qyacBXA= Subject key identifier: 77:10:59:D9:5A:D5:D1:9E:C8:0D:CC:0A:21:68:7B:09:17:7A:30:90 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC5535959204F3333695200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 132.145.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:53:59:59:20:4f:33:33:69:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=4dbaecff-0a74-421b-9df3-6771cb8d6304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:57:39:d3:4b:ea:b4:1d:2d:dd:25:e5:3c:64: 5e:a8:05:6b:9b:36:cf:37:9e:d4:5e:50:ba:ad:84: 9c:25:3e:58:51:c9:38:5f:62:fe:0a:ed:d6:81:2f: 83:6f:b0:49:4a:5e:9c:e2:43:a2:af:03:00:cc:94: 23:e2:54:6f:94:2d:df:17:7c:c7:89:a0:eb:3a:6a: 7a:8f:cd:7e:e1:4f:73:d1:bf:5f:93:7d:d9:26:a3: 50:8c:cf:47:da:85:ba:fe:78:bf:a6:7b:b1:84:61: 91:9a:1c:1b:e6:8b:97:f6:e0:d3:d1:75:fa:a7:46: 4f:5a:f8:bc:bd:9f:6e:e2:ce:37:5f:0a:20:13:95: e7:64:31:b7:e6:f7:77:e3:9f:1a:a7:e5:09:1e:54: 7a:00:e1:d8:f3:59:e9:f1:39:a5:e8:5a:f6:dd:7c: ab:bc:2d:54:31:8b:34:b5:46:ac:e4:38:71:0e:29: 58:35:d0:09:b0:0e:c3:47:01:8a:7f:95:d0:a3:6b: dc:3b:1a:f8:67:0a:62:fb:e6:e9:66:c6:90:9a:17: e1:0e:c0:73:43:47:8b:8f:46:56:51:09:46:79:5c: 07:c7:ba:f9:e1:94:2d:76:2d:5c:35:c7:df:a0:85: ec:b2:4a:5f:e1:6c:5e:ce:17:12:0e:16:19:2c:c6: d3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:10:59:D9:5A:D5:D1:9E:C8:0D:CC:0A:21:68:7B:09:17:7A:30:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:31:3c:8e:ab:e4:cb:03:10:69:48:79:62:54:c3:17:b0:2c: 6c:50:ca:59:25:18:33:d2:a2:f7:c3:93:eb:b0:b7:13:45:c6: 33:e4:19:79:31:86:23:42:31:b0:95:24:ee:a7:8a:34:7e:86: b9:e5:4a:13:cb:5e:36:32:dc:11:bb:cf:5f:7e:48:82:aa:8d: cc:94:f3:d9:08:81:6d:f8:bc:d8:ce:46:40:4e:18:76:dc:a1: 0a:ee:70:4a:ec:0c:73:27:35:03:58:b6:19:02:48:f9:8c:01: 25:49:12:b1:72:04:bc:20:b8:c3:5f:7f:08:64:59:6a:e4:23: 9c:8c:c1:9d:a1:00:00:a8:3a:00:31:09:65:f0:62:0f:f1:a0: d1:78:d2:b9:b3:64:ad:50:cd:9b:fe:33:40:c0:7d:a4:ce:e7: 92:50:f1:17:79:f2:f0:26:f1:7b:f8:1a:f8:c9:fc:d2:a1:2b: 89:e3:dc:c5:5d:f4:76:fe:ba:38:f0:fd:4a:88:8c:15:98:be: 69:31:cd:87:9a:63:57:5d:ee:5c:e5:50:be:95:09:de:cb:d5: a8:1a:29:33:2e:ff:92:b3:22:04:d2:70:43:30:b4:ce:10:fa: 8f:bd:d0:83:43:c6:b9:79:3c:68:e0:64:f7:b1:d4:db:d1:66: fe:99:83:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVNZWSBPMzNpUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk NGRiYWVjZmYtMGE3NC00MjFiLTlkZjMtNjc3MWNiOGQ2MzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVc500vqtB0t3SXlPGReqAVrmzbPN57UXlC6 rYScJT5YUck4X2L+Cu3WgS+Db7BJSl6c4kOirwMAzJQj4lRvlC3fF3zHiaDrOmp6 j81+4U9z0b9fk33ZJqNQjM9H2oW6/ni/pnuxhGGRmhwb5ouX9uDT0XX6p0ZPWvi8 vZ9u4s43XwogE5XnZDG35vd3458ap+UJHlR6AOHY81np8Tml6Fr23XyrvC1UMYs0 tUas5DhxDilYNdAJsA7DRwGKf5XQo2vcOxr4Zwpi++bpZsaQmhfhDsBzQ0eLj0ZW UQlGeVwHx7r54ZQtdi1cNcffoIXsskpf4WxezhcSDhYZLMbT5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcQWdla1dGeyA3MCiFoewkXejCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODU5NWY3ODQtZWYxNC0z YjBiLTg1YzAtZTRiMGRlYmI0OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChJFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMxPI6r5MsDEGlIeWJUwxewLGxQylklGDPSovfDk+uwtxNFxjPkGXkx hiNCMbCVJO6nijR+hrnlShPLXjYy3BG7z19+SIKqjcyU89kIgW34vNjORkBOGHbc oQrucErsDHMnNQNYthkCSPmMASVJErFyBLwguMNffwhkWWrkI5yMwZ2hAACoOgAx CWXwYg/xoNF40rmzZK1QzZv+M0DAfaTO55JQ8Rd58vAm8Xv4GvjJ/NKhK4nj3MVd 9Hb+ujjw/UqIjBWYvmkxzYeaY1dd7lzlUL6VCd7L1agaKTMu/5KzIgTScEMwtM4Q +o+90INDxrl5PGjgZPex1NvRZv6Zgyc= -----END CERTIFICATE-----Generated at Wed May 13 04:13:34 2026 by rpki-client