$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a521d914-604a-32f4-82a5-6f40ff6835a1.roa File: a521d914-604a-32f4-82a5-6f40ff6835a1.roa (raw, json) Hash identifier: 0Fl/hmNJz1eZ12I82FYD5WsCAHPMHMp5/bufXLUEZVQ= Subject key identifier: 58:A3:AE:BD:88:66:EC:F5:C7:9F:93:64:38:1A:9F:85:7C:79:BF:DC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E500048962113470EC18CC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a521d914-604a-32f4-82a5-6f40ff6835a1.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 192.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:00:48:96:21:13:47:0e:c1:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=c7fd7f5a-b61b-4ad1-b79b-34067f664c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:80:b1:70:b8:05:d7:9d:c8:e8:5d:8a:97: 27:9c:6e:d6:a5:aa:46:45:bf:01:72:d2:af:9a:8d: 79:d3:9f:e6:ce:57:5a:a6:bd:ef:b7:8e:c3:64:1d: bb:d6:f2:ac:99:3d:71:ea:22:da:b5:7e:7b:2a:4e: fa:49:a8:5a:5b:b6:d7:ce:26:b2:9f:f1:27:fc:46: c4:80:eb:f7:f9:df:4c:7e:19:a1:a1:b7:42:ff:ce: 55:48:8f:26:76:36:e8:14:54:ed:62:d4:39:f3:6b: 73:64:7b:de:e5:04:7d:bb:f0:ae:03:ba:fd:45:44: f2:69:70:42:4b:fe:f6:5c:4f:4b:a6:68:ab:fe:4a: a1:b2:5f:a6:08:b3:5e:bb:fd:43:13:e1:1c:53:ea: ce:35:c9:c5:85:c3:ee:a5:83:fd:2e:25:ae:64:60: 33:b6:81:36:78:6e:7b:28:81:96:a0:8a:07:6b:99: e1:2b:ef:04:4f:ac:9a:4d:3d:9b:fc:f2:cc:f3:5d: 64:46:83:27:52:d5:14:7e:a1:2b:ce:12:98:8d:37: 86:1e:74:3d:59:ff:17:8c:f7:c2:e8:4a:37:cd:92: fb:df:d3:79:0d:b0:7f:9d:f1:84:8c:eb:a2:2a:36: cb:41:47:b3:92:55:0a:a9:a5:0c:9d:5d:ae:c7:81: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A3:AE:BD:88:66:EC:F5:C7:9F:93:64:38:1A:9F:85:7C:79:BF:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a521d914-604a-32f4-82a5-6f40ff6835a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c2:6c:e0:d8:ca:32:4d:5e:c3:ea:29:b0:65:5e:9e:7d:aa: fc:b0:9e:87:f9:7d:39:e0:67:2a:51:99:c1:d4:4f:a6:ef:3c: 9b:40:8b:ca:6e:f6:07:61:9e:33:14:2b:d9:45:6b:b8:11:84: af:d2:97:17:8c:b6:45:3e:24:ba:52:ab:cc:e0:67:c8:ec:1b: 7d:fc:e2:63:c4:34:28:12:70:35:a4:43:fd:ed:f0:d2:b6:e1: a4:e2:7e:6a:3e:46:af:24:0b:18:35:fa:70:44:d1:ff:5a:48: 1e:9a:d9:e8:bd:07:56:29:96:94:4e:ab:bb:53:63:90:da:b4: 87:65:5e:ff:88:52:cc:c6:67:ef:d3:e6:59:bd:e9:7d:13:e9: 8f:be:44:db:2b:54:37:9c:13:38:b9:e5:29:4d:f4:39:10:93: 80:89:96:d5:21:18:2e:55:6e:2d:b9:db:af:41:aa:d9:76:c4: 0c:ca:7c:92:0b:7b:d4:b1:85:99:b9:b8:9e:29:7a:4f:25:7e: ef:96:dc:78:c7:ff:4e:6c:94:85:ce:05:b4:ed:47:28:ab:b2: b9:fb:f6:ce:2f:ba:6e:b9:5d:7c:01:ec:c1:9c:11:e9:72:6c: cc:85:0a:40:c0:e2:46:d1:d8:9a:86:43:7c:8c:55:be:73:af: a6:eb:10:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUABIliETRw7BjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YzdmZDdmNWEtYjYxYi00YWQxLWI3OWItMzQwNjdmNjY0YzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lOAsXC4BdedyOhdipcnnG7WpapGRb8BctKv mo1505/mzldapr3vt47DZB271vKsmT1x6iLatX57Kk76SahaW7bXziayn/En/EbE gOv3+d9MfhmhobdC/85VSI8mdjboFFTtYtQ582tzZHve5QR9u/CuA7r9RUTyaXBC S/72XE9Lpmir/kqhsl+mCLNeu/1DE+EcU+rONcnFhcPupYP9LiWuZGAztoE2eG57 KIGWoIoHa5nhK+8ET6yaTT2b/PLM811kRoMnUtUUfqErzhKYjTeGHnQ9Wf8XjPfC 6Eo3zZL739N5DbB/nfGEjOuiKjbLQUezklUKqaUMnV2ux4HJiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFijrr2IZuz1x5+TZDgan4V8eb/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTUyMWQ5MTQtNjA0YS0z MmY0LTgyYTUtNmY0MGZmNjgzNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbCbODYyjJNXsPqKbBlXp59qvywnof5fTngZypRmcHUT6bvPJtAi8pu 9gdhnjMUK9lFa7gRhK/SlxeMtkU+JLpSq8zgZ8jsG3384mPENCgScDWkQ/3t8NK2 4aTifmo+Rq8kCxg1+nBE0f9aSB6a2ei9B1YplpROq7tTY5DatIdlXv+IUszGZ+/T 5lm96X0T6Y++RNsrVDecEzi55SlN9DkQk4CJltUhGC5Vbi25269Bqtl2xAzKfJIL e9SxhZm5uJ4pek8lfu+W3HjH/05slIXOBbTtRyirsrn79s4vum65XXwB7MGcEely bMyFCkDA4kbR2JqGQ3yMVb5zr6brEJ8= -----END CERTIFICATE-----Generated at Wed May 13 09:31:13 2026 by rpki-client