$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8eda097f-f38b-345e-bbce-36a5b9085e4b.roa File: 8eda097f-f38b-345e-bbce-36a5b9085e4b.roa (raw, json) Hash identifier: eDVZhY3In6FILxQoNKxKUb+Pdtt6jQx7Jd11uJyXm8g= Subject key identifier: DB:7A:8C:09:F9:96:5C:15:A8:5A:AA:78:28:0E:69:D2:2A:E1:D6:43 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF544707DC9F207AE02AEA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8eda097f-f38b-345e-bbce-36a5b9085e4b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 168.138.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:44:70:7d:c9:f2:07:ae:02:ae:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=c86c1d93-59bf-4e11-99be-0c6f7983e22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ee:4e:6b:93:b5:bd:f8:24:e6:e9:ce:c6:4a: 31:cf:53:ad:11:ee:67:a6:37:ea:32:fa:53:7b:c8: 42:a7:f5:63:5e:28:3b:6c:11:8a:02:d0:40:ff:f6: 4a:51:9d:b5:50:cd:b9:f7:af:a4:17:59:0a:e7:cd: be:5a:1c:50:76:43:9c:0a:5b:25:c8:88:97:cc:b7: a5:75:9a:8c:4e:3a:49:aa:26:64:e0:5c:06:12:fc: d5:c9:42:d8:74:f5:c7:00:fe:d2:b1:80:54:c4:a9: a5:15:d6:32:fb:6a:fb:bd:da:d6:a9:f3:fd:6c:9c: a5:2a:bb:06:20:da:94:32:45:8c:73:82:37:ec:90: a9:91:e4:14:49:c3:77:e8:bc:f7:9d:ed:56:7f:68: e5:17:94:9c:13:a8:97:b3:1e:ba:ba:13:8c:e4:f8: 6e:63:5a:53:51:14:5c:4e:c2:52:b3:bf:8a:19:84: 14:56:c2:6b:5e:4a:37:58:c3:24:b3:d7:8f:ff:85: 7d:9b:78:a4:16:e1:f4:76:f3:8e:7d:b4:ce:fe:5c: 9f:1f:25:f6:90:3b:d6:63:de:92:08:ca:7f:44:4c: 56:1e:5a:13:37:b4:fc:47:3b:1e:42:6b:2f:bf:0d: 31:8e:a6:b7:66:a1:42:ef:48:74:43:82:1e:f4:77: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7A:8C:09:F9:96:5C:15:A8:5A:AA:78:28:0E:69:D2:2A:E1:D6:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8eda097f-f38b-345e-bbce-36a5b9085e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4f:5d:a2:90:5c:84:3a:f8:18:1a:eb:fb:5a:eb:aa:d9:11: 26:d1:e3:4f:54:a5:29:2a:54:cd:ce:e5:9b:41:a8:ff:b1:f0: 43:ff:11:8d:4c:57:d2:4a:81:05:ee:7d:62:af:28:d5:c4:a5: 34:4c:c7:5a:d3:94:43:54:8c:af:63:fd:fb:7a:f9:9e:e8:b5: 5d:75:ee:ff:de:0a:b8:d8:e5:93:a4:71:ff:e3:43:e2:43:a9: 7e:fc:4a:1a:bc:05:67:ee:b0:d6:2b:30:52:7b:88:8e:ae:8a: 49:9b:67:f9:ce:d9:92:81:0e:80:7b:49:a1:6c:d8:9a:55:0e: 40:98:40:41:35:37:e7:31:97:b6:f1:09:4e:93:26:79:1e:67: d9:82:3d:f3:33:88:e2:b2:aa:ab:1e:43:b3:24:24:57:6c:cf: 13:e4:23:94:b5:8c:aa:8e:5b:46:8d:90:1d:1d:be:b4:90:04: cc:68:c0:fb:ae:66:f6:57:c5:e0:90:82:61:5a:0e:d0:be:ea: b8:ff:fb:0f:2c:c8:a5:38:8d:f9:16:8c:82:32:cd:b4:80:00: 90:ef:95:9d:39:9f:95:b2:0c:77:a5:5d:f1:05:25:42:02:ea: 65:29:20:13:47:57:7c:83:23:1e:f0:dd:63:9f:91:fd:0b:4c: 03:05:80:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9URwfcnyB64CrqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk Yzg2YzFkOTMtNTliZi00ZTExLTk5YmUtMGM2Zjc5ODNlMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+5Oa5O1vfgk5unOxkoxz1OtEe5npjfqMvpT e8hCp/VjXig7bBGKAtBA//ZKUZ21UM2596+kF1kK582+WhxQdkOcClslyIiXzLel dZqMTjpJqiZk4FwGEvzVyULYdPXHAP7SsYBUxKmlFdYy+2r7vdrWqfP9bJylKrsG INqUMkWMc4I37JCpkeQUScN36Lz3ne1Wf2jlF5ScE6iXsx66uhOM5PhuY1pTURRc TsJSs7+KGYQUVsJrXko3WMMks9eP/4V9m3ikFuH0dvOOfbTO/lyfHyX2kDvWY96S CMp/RExWHloTN7T8RzseQmsvvw0xjqa3ZqFC70h0Q4Ie9Hfj2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNt6jAn5llwVqFqqeCgOadIq4dZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGVkYTA5N2YtZjM4Yi0z NDVlLWJiY2UtMzZhNWI5MDg1ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqIqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJPXaKQXIQ6+Bga6/ta66rZESbR409UpSkqVM3O5ZtBqP+x8EP/EY1M V9JKgQXufWKvKNXEpTRMx1rTlENUjK9j/ft6+Z7otV117v/eCrjY5ZOkcf/jQ+JD qX78Shq8BWfusNYrMFJ7iI6uikmbZ/nO2ZKBDoB7SaFs2JpVDkCYQEE1N+cxl7bx CU6TJnkeZ9mCPfMziOKyqqseQ7MkJFdszxPkI5S1jKqOW0aNkB0dvrSQBMxowPuu ZvZXxeCQgmFaDtC+6rj/+w8syKU4jfkWjIIyzbSAAJDvlZ05n5WyDHelXfEFJUIC 6mUpIBNHV3yDIx7w3WOfkf0LTAMFgFI= -----END CERTIFICATE-----Generated at Wed May 13 08:36:55 2026 by rpki-client