$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa File: 9f402ac2-805b-33f9-8973-e24027b97258.roa (raw, json) Hash identifier: diHqz+OZrsVzEJaNmhDADn+M/FPzckDo5gNGkdeVw/c= Subject key identifier: D3:1C:41:F5:96:27:D9:D2:14:CD:29:06:57:F6:55:C6:9E:AA:0D:E3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E502C0FFE5A3783514F7F20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 168.107.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2c:0f:fe:5a:37:83:51:4f:7f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=eb61a21c-2290-4dc6-a673-ed0701ea6466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e4:f0:cc:5c:0c:79:c6:dc:2a:bc:bc:df:05: c9:8c:18:4e:7e:46:a6:82:5a:30:d9:bb:78:1c:b8: 6c:6d:d4:be:78:b0:ea:38:36:20:77:4a:34:52:f3: c9:6e:f3:29:0c:df:7e:03:46:62:4d:9d:2a:79:cc: b8:f2:ea:e5:a4:d6:27:41:2e:2d:0f:0c:d0:66:08: 94:07:c3:b3:1a:96:09:e4:2f:fd:6c:57:c7:bc:0d: 16:86:ea:a4:e6:27:1c:8f:3f:88:5a:7b:b8:93:53: 16:32:31:74:a8:ad:7c:07:b3:99:b7:bd:66:ca:78: c7:5c:28:24:6c:7c:82:fa:b1:00:f3:fb:19:a2:9c: 80:13:8c:be:13:cc:8f:9a:e7:24:fa:92:97:78:eb: b1:d2:73:1a:0e:20:d7:5c:33:5b:8d:1f:89:83:63: e7:87:f1:61:20:64:3b:41:62:3a:b0:43:c6:7b:c6: 82:f3:82:b7:5f:f1:c7:80:d2:f1:92:8a:48:2e:d2: 4b:ee:e1:6f:90:e6:37:1d:7a:8f:c3:f7:7a:e8:d5: 5b:8f:ff:3a:be:f3:96:ed:72:68:7e:d8:29:60:70: 2b:41:ff:f2:e5:be:ac:e3:26:7c:45:2c:ba:a6:76: d5:1f:ac:57:4f:78:79:6d:2c:8a:72:fb:0d:dc:33: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1C:41:F5:96:27:D9:D2:14:CD:29:06:57:F6:55:C6:9E:AA:0D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ab:69:cd:3c:fc:e6:2e:77:69:dd:b3:8b:04:65:b1:97:e9: 16:1a:2f:e9:1f:e3:9d:eb:e5:c2:65:1d:c2:6b:c9:05:3b:ee: bb:1e:8b:29:50:1c:9b:2a:79:80:db:97:88:3c:10:32:74:e5: 6b:83:f1:bd:23:00:e5:07:16:47:f2:a7:ec:b7:26:67:85:5d: bf:c9:34:a0:23:78:4b:e1:49:f2:65:8c:05:ab:38:32:dc:6d: a8:ee:eb:7a:ba:08:4f:9f:fb:2a:01:66:66:e6:5f:86:35:5e: 05:ba:ea:fd:26:14:56:7b:a7:f7:d7:7e:04:e0:eb:fe:7c:96: fa:0b:44:ed:a3:c5:9b:8c:79:e7:c9:1c:f2:df:d4:49:4e:4d: da:7d:b7:47:3c:9d:25:80:6c:23:3b:5f:6f:29:ea:1d:1a:3c: eb:dd:04:cb:04:bf:4c:30:60:49:5a:d3:47:4e:1c:11:5d:24: 9d:f2:3b:f4:2c:24:ec:15:2a:14:60:20:6c:f0:ab:f4:38:8f: 2b:24:a5:27:53:7b:eb:cc:3f:26:78:20:65:69:ab:ed:54:d1: c5:17:02:c1:63:d1:0d:1d:da:e0:bc:df:c7:56:16:d6:68:53: 24:57:6f:67:52:76:fe:eb:e9:c7:bd:a4:77:84:0f:b9:dd:ef: 81:da:78:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCwP/lo3g1FPfyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZWI2MWEyMWMtMjI5MC00ZGM2LWE2NzMtZWQwNzAxZWE2NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeTwzFwMecbcKry83wXJjBhOfkamglow2bt4 HLhsbdS+eLDqODYgd0o0UvPJbvMpDN9+A0ZiTZ0qecy48urlpNYnQS4tDwzQZgiU B8OzGpYJ5C/9bFfHvA0Whuqk5iccjz+IWnu4k1MWMjF0qK18B7OZt71mynjHXCgk bHyC+rEA8/sZopyAE4y+E8yPmuck+pKXeOux0nMaDiDXXDNbjR+Jg2Pnh/FhIGQ7 QWI6sEPGe8aC84K3X/HHgNLxkopILtJL7uFvkOY3HXqPw/d66NVbj/86vvOW7XJo ftgpYHArQf/y5b6s4yZ8RSy6pnbVH6xXT3h5bSyKcvsN3DN94QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMcQfWWJ9nSFM0pBlf2Vcaeqg3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWY0MDJhYzItODA1Yi0z M2Y5LTg5NzMtZTI0MDI3Yjk3MjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqrac08/OYud2nds4sEZbGX6RYaL+kf453r5cJlHcJryQU77rseiylQ HJsqeYDbl4g8EDJ05WuD8b0jAOUHFkfyp+y3JmeFXb/JNKAjeEvhSfJljAWrODLc baju63q6CE+f+yoBZmbmX4Y1XgW66v0mFFZ7p/fXfgTg6/58lvoLRO2jxZuMeefJ HPLf1ElOTdp9t0c8nSWAbCM7X28p6h0aPOvdBMsEv0wwYEla00dOHBFdJJ3yO/Qs JOwVKhRgIGzwq/Q4jyskpSdTe+vMPyZ4IGVpq+1U0cUXAsFj0Q0d2uC838dWFtZo UyRXb2dSdv7r6ce9pHeED7nd74HaeL0= -----END CERTIFICATE-----Generated at Wed May 13 08:33:15 2026 by rpki-client