$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/890a6233-2962-38a6-8ced-95148f69bafd.roa File: 890a6233-2962-38a6-8ced-95148f69bafd.roa (raw, json) Hash identifier: hBcdK3NZs/OLCAq+0aGji3Mkg9GL8SaWYcDziVQlMhc= Subject key identifier: 8F:99:08:CF:66:97:94:77:0A:E2:AF:1F:D4:6C:1E:6D:6E:23:8F:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D34087695128E678B36897CA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/890a6233-2962-38a6-8ced-95148f69bafd.roa Signing time: Tue 17 Mar 2026 23:20:40 +0000 ROA not before: Tue 17 Mar 2026 23:20:40 +0000 ROA not after: Mon 15 Jun 2026 23:20:40 +0000 asID: 31898 IP address blocks: 147.5.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:08:76:95:12:8e:67:8b:36:89:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 17 23:20:40 2026 GMT Not After : Jun 15 23:20:40 2026 GMT Subject: CN=9f6d66a7-5a4a-441b-891b-711833175aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:9b:97:3f:45:47:44:89:aa:5d:b4:3f:e9: 55:95:23:4e:bd:0d:cc:92:b6:4f:bf:c2:b5:8f:90: 1e:71:b2:d1:0f:67:f2:38:31:40:df:24:c9:e1:15: 2f:82:c3:8f:b9:d4:d6:3d:e1:d0:14:30:93:98:d6: 2a:58:56:c5:3d:f6:e8:c9:d2:21:07:2f:cb:be:25: 31:a9:a3:62:fa:26:1b:7f:01:a2:6c:43:b1:a8:6b: 69:02:ec:f9:b6:f7:ab:47:85:43:18:03:c6:70:05: 4d:3c:fc:14:d6:b0:c6:cf:25:44:1d:49:af:44:2d: e8:e6:55:30:50:6f:74:03:95:26:0b:ce:b2:82:cc: 3d:04:2e:6b:61:0d:ac:2f:a3:49:bc:3f:4f:82:d1: a9:c3:35:95:1b:b6:fb:4b:e3:72:05:4e:f4:8a:86: ca:79:74:b0:1f:e2:39:1a:ab:df:fa:e9:c7:c1:60: c2:26:c0:19:55:c5:52:a5:9f:cb:44:85:6e:25:57: 66:45:8b:15:0d:f1:d6:d3:36:68:db:d0:5a:88:71: 02:3c:4b:c0:0a:29:51:4a:20:77:65:32:00:d7:16: 2b:72:f7:29:2f:9d:49:ff:f6:e8:24:60:99:07:7f: 57:57:71:47:dc:87:35:27:64:4f:c7:d1:11:c5:f5: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:99:08:CF:66:97:94:77:0A:E2:AF:1F:D4:6C:1E:6D:6E:23:8F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/890a6233-2962-38a6-8ced-95148f69bafd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.5.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e3:8f:44:dc:a4:26:54:d1:83:30:ca:51:c9:1d:cb:03:54: 55:b6:f5:93:b9:19:b2:c9:e6:11:22:5b:ae:e8:c3:5c:13:92: 3e:12:07:63:96:1e:98:6c:da:79:f8:12:cc:fc:45:d9:6e:00: 1f:80:59:f2:bb:52:01:8c:56:67:58:ae:58:c6:cf:c0:af:08: fe:81:b9:19:9c:45:19:5f:7c:f3:ae:9a:d8:a8:45:19:51:60: 91:d7:26:b4:f1:77:8e:be:a2:f1:17:d1:84:dd:47:25:a7:90: 43:ec:6a:e1:4b:00:c0:05:2b:2f:80:07:39:fa:2d:36:b0:5a: 1e:0a:d0:9a:6c:27:78:6f:4b:c0:c0:98:f7:fa:18:c2:91:2b: 2b:a6:45:27:1b:6b:f7:2b:5a:97:4d:60:7e:ba:06:86:aa:40: ac:cf:53:b1:1b:f9:05:af:36:dc:72:4f:99:5e:4d:b2:f9:7b: 6c:f5:7f:09:3e:f3:78:a1:72:68:e4:c1:89:91:6a:fa:3e:52: 3a:ea:c3:6f:77:f3:ed:5f:ae:51:c1:52:2c:3f:b3:c3:de:f3: a3:2f:15:65:a7:b7:07:4d:c1:2c:70:58:da:69:a0:47:93:8d: 5c:a8:68:ba:79:14:e2:5b:b3:5d:16:c0:0c:29:db:9e:4f:66: b7:fa:ef:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00CHaVEo5nizaJfKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMxNzIzMjA0MFoXDTI2MDYxNTIzMjA0MFowLzEtMCsGA1UEAxMk OWY2ZDY2YTctNWE0YS00NDFiLTg5MWItNzExODMzMTc1YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ublz9FR0SJql20P+lVlSNOvQ3MkrZPv8K1 j5AecbLRD2fyODFA3yTJ4RUvgsOPudTWPeHQFDCTmNYqWFbFPfboydIhBy/LviUx qaNi+iYbfwGibEOxqGtpAuz5tverR4VDGAPGcAVNPPwU1rDGzyVEHUmvRC3o5lUw UG90A5UmC86ygsw9BC5rYQ2sL6NJvD9PgtGpwzWVG7b7S+NyBU70iobKeXSwH+I5 Gqvf+unHwWDCJsAZVcVSpZ/LRIVuJVdmRYsVDfHW0zZo29BaiHECPEvACilRSiB3 ZTIA1xYrcvcpL51J//boJGCZB39XV3FH3Ic1J2RPx9ERxfXdZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+ZCM9ml5R3CuKvH9RsHm1uI49/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODkwYTYyMzMtMjk2Mi0z OGE2LThjZWQtOTUxNDhmNjliYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3jj0TcpCZU0YMwylHJHcsDVFW29ZO5GbLJ5hEiW67ow1wTkj4SB2OW Hphs2nn4Esz8RdluAB+AWfK7UgGMVmdYrljGz8CvCP6BuRmcRRlffPOumtioRRlR YJHXJrTxd46+ovEX0YTdRyWnkEPsauFLAMAFKy+ABzn6LTawWh4K0JpsJ3hvS8DA mPf6GMKRKyumRScba/crWpdNYH66BoaqQKzPU7Eb+QWvNtxyT5leTbL5e2z1fwk+ 83ihcmjkwYmRavo+Ujrqw2938+1frlHBUiw/s8Pe86MvFWWntwdNwSxwWNppoEeT jVyoaLp5FOJbs10WwAwp255PZrf67xY= -----END CERTIFICATE-----Generated at Thu Mar 26 08:06:00 2026 by rpki-client