$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924921be-6fc7-378c-bf9a-f678b9a5dd44.roa File: 924921be-6fc7-378c-bf9a-f678b9a5dd44.roa (raw, json) Hash identifier: Ih8X3GFVdX/qLyznjNwX86TEYgJtdXVqxU05g8/tleI= Subject key identifier: F7:FD:62:43:C6:B1:B1:AB:60:F7:D3:E6:B8:1F:AE:87:50:06:9A:0C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC8305C674BC487A0457698C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924921be-6fc7-378c-bf9a-f678b9a5dd44.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 31898 IP address blocks: 147.224.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:5c:67:4b:c4:87:a0:45:76:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=e6cdb3c9-b996-4392-9252-a4b15528e52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:4f:7d:2b:25:84:8b:ab:f9:d6:16:d9:8a: 89:df:ab:6d:70:fe:d9:2b:f6:98:52:96:2f:2b:53: 41:aa:bb:91:d0:80:d8:5b:24:8e:de:ea:39:63:1e: 42:9c:71:63:da:ac:88:64:37:c7:31:7a:99:4a:bf: 35:fe:67:69:80:45:ad:2c:0f:8e:50:6a:a9:e1:a6: a1:22:f5:31:14:96:99:a2:02:b8:6e:f2:4e:5f:e7: e7:6a:6d:c3:13:89:aa:f5:23:96:46:12:18:6b:04: 03:d4:a8:67:39:19:67:6f:4f:e6:f9:34:ed:20:3e: 88:98:7e:da:07:ac:b2:e4:af:0c:6a:c7:ce:25:64: 68:35:31:05:d5:25:7d:5a:63:e4:dd:56:8a:39:bb: ba:8f:b3:d7:21:92:50:70:a7:a5:0f:83:6e:02:ed: 08:14:f8:60:c9:b8:cf:5f:0e:18:6f:62:99:f2:d5: 5a:57:c5:e0:67:a7:83:8f:4e:c9:d0:2e:f6:d3:ad: b0:3f:fc:d1:af:92:9d:49:09:fe:6b:e8:ac:e1:a6: ca:e9:56:65:48:d1:22:7a:0e:c0:93:97:31:cc:5f: f6:9d:fe:78:df:57:40:02:a0:7a:87:bf:01:1d:57: a3:5b:9b:84:9d:9c:9d:25:8d:ad:26:ca:41:cd:25: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FD:62:43:C6:B1:B1:AB:60:F7:D3:E6:B8:1F:AE:87:50:06:9A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924921be-6fc7-378c-bf9a-f678b9a5dd44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.224.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:eb:08:ad:e2:78:1c:f1:57:18:1d:22:82:6a:dc:1d:e6:d1: 8e:63:1b:83:f8:25:3b:cf:81:26:1f:75:5a:0e:69:35:ae:b9: 9e:b9:9b:19:86:cd:2a:c9:06:7b:15:83:f7:98:09:40:d7:5b: c0:82:05:fc:94:d8:52:82:c4:1e:13:8f:c7:e7:d1:1f:5a:74: 90:76:57:f9:15:84:d4:7a:70:53:68:15:54:4a:0b:9d:e2:fa: eb:c3:03:0e:7a:11:b6:cd:79:ab:b7:c8:d7:4e:4d:a6:01:60: 72:f5:8f:1b:be:b4:da:3c:5e:cb:87:58:14:49:98:57:c5:1e: ec:d6:47:3e:64:ef:30:80:08:56:e3:e5:e6:39:e5:43:73:f9: e7:e5:a4:86:06:d1:13:a2:12:a9:a3:25:ce:10:97:72:37:9b: 57:f3:c9:fd:5f:6a:c1:e8:14:ea:7b:19:36:02:ef:04:d6:e1: 2b:7b:99:fa:18:9c:aa:b4:8f:1f:1e:86:5e:da:7f:b3:92:cf: 67:19:11:da:83:e1:c3:31:56:fb:b4:b9:55:02:17:28:e1:5b: d9:59:93:1d:0c:68:e7:ed:09:64:79:e5:e4:89:e0:c6:1d:ae: ee:50:33:cb:4e:58:2b:11:d5:68:cc:20:3e:80:70:2c:a6:af: 63:b6:86:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMFxnS8SHoEV2mMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk ZTZjZGIzYzktYjk5Ni00MzkyLTkyNTItYTRiMTU1MjhlNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDNPfSslhIur+dYW2YqJ36ttcP7ZK/aYUpYv K1NBqruR0IDYWySO3uo5Yx5CnHFj2qyIZDfHMXqZSr81/mdpgEWtLA+OUGqp4aah IvUxFJaZogK4bvJOX+fnam3DE4mq9SOWRhIYawQD1KhnORlnb0/m+TTtID6ImH7a B6yy5K8MasfOJWRoNTEF1SV9WmPk3VaKObu6j7PXIZJQcKelD4NuAu0IFPhgybjP Xw4Yb2KZ8tVaV8XgZ6eDj07J0C72062wP/zRr5KdSQn+a+is4abK6VZlSNEieg7A k5cxzF/2nf5431dAAqB6h78BHVejW5uEnZydJY2tJspBzSVguwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPf9YkPGsbGrYPfT5rgfrodQBpoMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTI0OTIxYmUtNmZjNy0z NzhjLWJmOWEtZjY3OGI5YTVkZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk+BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjrCK3ieBzxVxgdIoJq3B3m0Y5jG4P4JTvPgSYfdVoOaTWuuZ65mxmG zSrJBnsVg/eYCUDXW8CCBfyU2FKCxB4Tj8fn0R9adJB2V/kVhNR6cFNoFVRKC53i +uvDAw56EbbNeau3yNdOTaYBYHL1jxu+tNo8XsuHWBRJmFfFHuzWRz5k7zCACFbj 5eY55UNz+eflpIYG0ROiEqmjJc4Ql3I3m1fzyf1fasHoFOp7GTYC7wTW4St7mfoY nKq0jx8ehl7af7OSz2cZEdqD4cMxVvu0uVUCFyjhW9lZkx0MaOftCWR55eSJ4MYd ru5QM8tOWCsR1WjMID6AcCymr2O2hvI= -----END CERTIFICATE-----Generated at Wed May 13 13:09:36 2026 by rpki-client