$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/947d71a3-710b-3648-8596-79bc276c3c61.roa File: 947d71a3-710b-3648-8596-79bc276c3c61.roa (raw, json) Hash identifier: SnTgQFzMcKcH8CF5r1Q7a5p/Jy7HX5z0xPmAwGobmb4= Subject key identifier: 03:4A:7D:0D:27:48:F5:D2:E7:09:B7:DF:ED:C8:55:51:E4:0B:B8:1C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9FB56434D8AB5DFCB3A57DC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/947d71a3-710b-3648-8596-79bc276c3c61.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 216.146.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:64:34:d8:ab:5d:fc:b3:a5:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=3a5a2c28-3a2c-4dfc-9485-245e1030bc89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:dc:ed:98:dd:33:71:2e:0c:60:1d:ad:35: c8:53:55:70:ef:4c:9b:09:54:68:44:61:d0:ae:cd: 0e:6f:e1:16:bf:d1:28:07:c3:05:46:c6:e6:3e:81: 92:04:b4:9c:31:b6:11:40:14:a0:53:d7:1b:c5:94: f4:1f:60:82:98:fa:9c:fb:de:65:f8:ce:f2:52:a8: 07:73:6f:8a:0c:b7:e1:52:7e:ed:2f:78:c8:e0:50: d2:e5:b8:f6:a4:75:e2:be:52:e7:ee:a1:a9:42:61: 2a:9f:26:da:4c:67:64:cf:c2:3a:9e:ff:d9:fc:db: 3a:9b:0f:b9:49:d2:ca:73:a9:74:88:6e:ef:4c:c4: ee:ac:bc:f3:b6:57:af:c1:9a:cf:00:eb:b1:32:66: c1:f2:a7:62:a4:ec:c4:71:bf:60:9a:ac:db:65:f3: a7:2c:91:46:56:bb:76:07:9d:b9:b7:b3:cb:6d:25: 18:56:3f:9e:75:e7:06:d8:43:9b:bb:6a:56:6d:15: 4f:7a:84:a6:ce:e1:f9:71:1c:33:70:63:db:6c:9a: c4:81:09:d4:9a:f9:41:02:ba:fa:7f:37:08:9f:c5: 8a:e4:a9:95:69:09:ee:dc:31:0b:52:48:9e:41:d4: 44:6e:4f:3d:08:53:73:ba:3c:f0:a3:4e:86:e4:0e: 66:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4A:7D:0D:27:48:F5:D2:E7:09:B7:DF:ED:C8:55:51:E4:0B:B8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/947d71a3-710b-3648-8596-79bc276c3c61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 216.146.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:12:cd:1c:03:7f:7f:0c:93:a1:e2:55:08:5f:fc:82:c7:db: dc:f6:ad:77:b3:2b:3c:02:cb:ce:9f:91:19:c1:31:56:4b:76: fe:db:37:1b:2f:43:21:44:97:b5:e3:c9:b4:5f:74:10:b9:b5: 01:83:95:b5:18:a8:9c:3e:a6:7d:3c:11:b7:6c:21:be:df:3f: 09:c5:f1:50:e1:dd:d0:cd:db:61:cc:e0:44:f6:8a:9f:63:d2: a7:85:a5:13:cc:2c:f1:ea:7a:7b:36:98:75:25:e0:5f:0a:eb: e0:e3:47:7e:bd:51:3c:cc:ee:6c:e2:b8:38:41:45:42:ce:15: dc:8f:1c:6d:c2:dc:b1:76:98:6f:d9:e5:24:aa:40:34:69:6a: 27:4d:9b:82:8b:b0:ce:ac:39:07:3e:36:84:7f:29:b8:6d:a3: 70:95:be:87:0a:f0:57:ea:50:4d:28:f4:b6:6d:82:4c:12:43: 18:bc:7a:c7:95:d3:ff:84:f0:0c:50:bd:db:d1:78:b9:b3:38: 09:02:16:40:6d:8d:92:35:e7:2f:7d:36:c2:e5:54:5c:00:ee: 47:2c:b8:86:3a:3f:5c:41:c2:46:3b:82:14:e1:6b:fd:25:3c: 60:e4:79:48:92:8d:ef:b7:c8:eb:9e:0b:9d:0e:52:26:e7:91: 9a:64:56:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftWQ02Ktd/LOlfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk M2E1YTJjMjgtM2EyYy00ZGZjLTk0ODUtMjQ1ZTEwMzBiYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFjc7ZjdM3EuDGAdrTXIU1Vw70ybCVRoRGHQ rs0Ob+EWv9EoB8MFRsbmPoGSBLScMbYRQBSgU9cbxZT0H2CCmPqc+95l+M7yUqgH c2+KDLfhUn7tL3jI4FDS5bj2pHXivlLn7qGpQmEqnybaTGdkz8I6nv/Z/Ns6mw+5 SdLKc6l0iG7vTMTurLzztlevwZrPAOuxMmbB8qdipOzEcb9gmqzbZfOnLJFGVrt2 B525t7PLbSUYVj+edecG2EObu2pWbRVPeoSmzuH5cRwzcGPbbJrEgQnUmvlBArr6 fzcIn8WK5KmVaQnu3DELUkieQdREbk89CFNzujzwo06G5A5m4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANKfQ0nSPXS5wm33+3IVVHkC7gcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTQ3ZDcxYTMtNzEwYi0z NjQ4LTg1OTYtNzliYzI3NmMzYzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JIjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoSzRwDf38Mk6HiVQhf/ILH29z2rXezKzwCy86fkRnBMVZLdv7bNxsv QyFEl7XjybRfdBC5tQGDlbUYqJw+pn08EbdsIb7fPwnF8VDh3dDN22HM4ET2ip9j 0qeFpRPMLPHqens2mHUl4F8K6+DjR369UTzM7mziuDhBRULOFdyPHG3C3LF2mG/Z 5SSqQDRpaidNm4KLsM6sOQc+NoR/Kbhto3CVvocK8FfqUE0o9LZtgkwSQxi8eseV 0/+E8AxQvdvReLmzOAkCFkBtjZI15y99NsLlVFwA7kcsuIY6P1xBwkY7ghTha/0l PGDkeUiSje+3yOueC50OUibnkZpkVtw= -----END CERTIFICATE-----Generated at Wed May 13 09:38:04 2026 by rpki-client