$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8b9269c-db50-3610-836d-3e8d4894532a.roa File: a8b9269c-db50-3610-836d-3e8d4894532a.roa (raw, json) Hash identifier: pgZlgcZLN/f8JBcKR6r+BjaoCy7I1FrUTYZp9fIQaLk= Subject key identifier: A5:D8:F8:8D:06:A6:82:FF:66:C7:65:EC:60:D0:84:F8:CD:AE:03:26 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF99E0BE42D41DCA4AF6180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8b9269c-db50-3610-836d-3e8d4894532a.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 147.154.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:9e:0b:e4:2d:41:dc:a4:af:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e6a8dcb4-df76-46f3-be2e-8ee1d929257b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:9b:d5:0a:b5:82:06:98:a9:84:bd:79:ab: 71:48:9a:aa:ef:1d:7f:3d:cb:d0:ef:fa:83:99:5f: 80:d7:da:9f:c6:ea:9e:23:a1:0c:d8:43:5f:38:b3: 12:ff:2a:aa:66:8e:b5:33:09:a7:ae:25:6a:ef:1d: 00:a6:68:df:83:6d:14:a6:12:d4:d5:cd:9f:fc:50: 4c:64:60:f5:9e:58:de:c7:5b:80:82:72:31:72:83: 0d:a2:71:a8:b1:53:2f:20:1e:88:ac:c3:f6:5f:bd: f9:3b:5c:7f:03:e8:9c:5a:de:ed:58:0a:51:38:81: 5a:3d:35:46:3a:90:ff:89:45:79:4c:dc:2c:8e:84: 03:c1:4d:3b:70:da:36:26:5f:76:01:88:06:03:ad: b4:89:15:fb:d1:d1:3b:9b:5f:cb:40:7c:ff:3f:f3: 7a:44:8b:1c:09:4d:d8:97:0c:f2:a3:f1:41:be:3f: e8:ee:e7:e6:9f:2c:f1:38:d5:66:c8:d0:d2:9c:cb: 83:91:3e:28:00:5b:91:1d:0e:b0:95:af:2e:66:86: 27:ec:33:d5:94:cc:ee:be:ec:04:51:8c:7f:89:94: 39:48:dd:b1:6a:bb:28:3c:ff:21:2d:cd:50:3c:09: e3:03:30:c2:05:98:a9:75:3d:83:85:42:34:75:d2: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D8:F8:8D:06:A6:82:FF:66:C7:65:EC:60:D0:84:F8:CD:AE:03:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8b9269c-db50-3610-836d-3e8d4894532a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:31:e1:27:c5:43:38:e1:06:d1:80:83:ef:b1:3d:13:c6:9e: 76:8c:12:66:c8:f6:94:3a:65:c7:d6:a3:7c:ad:1a:6d:0e:ca: 0d:d2:59:ab:b6:04:f2:00:c8:8b:d8:b0:20:39:e8:cb:41:ba: 24:0d:9c:72:1f:4f:06:34:72:cf:d1:22:5d:38:70:49:ba:c7: e8:63:29:46:55:98:93:0e:a6:76:6d:3b:25:32:59:af:dd:35: b2:7c:e3:b9:83:dc:7a:80:0f:ed:c5:05:6c:d2:83:2a:b7:ae: 1f:51:f8:7f:85:96:63:cb:89:d9:92:cf:c2:cf:76:8c:5d:2c: da:b5:33:37:e2:f0:71:5d:8e:f1:a6:1c:7e:13:6a:6b:99:08: 86:e2:bd:80:40:ae:4d:5a:bd:b2:a0:f4:45:dd:81:03:ad:80: a8:32:5e:01:f8:e8:12:b1:90:b2:2e:3e:04:a4:de:bb:7f:80: 40:6e:a2:d2:da:a2:95:c4:3a:78:89:ef:a7:a0:87:d9:54:29: 02:73:40:6d:4e:c5:b9:93:5d:a7:30:19:61:72:3e:1e:05:20: f2:ea:ce:07:25:39:d5:fa:5e:14:54:1d:4a:85:c0:e8:00:64: 31:e2:aa:27:ae:ea:a7:34:42:7b:c5:36:b3:45:67:15:cc:36: 2b:73:90:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Z4L5C1B3KSvYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZTZhOGRjYjQtZGY3Ni00NmYzLWJlMmUtOGVlMWQ5MjkyNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXyb1Qq1ggaYqYS9eatxSJqq7x1/PcvQ7/qD mV+A19qfxuqeI6EM2ENfOLMS/yqqZo61MwmnriVq7x0Apmjfg20UphLU1c2f/FBM ZGD1nljex1uAgnIxcoMNonGosVMvIB6IrMP2X735O1x/A+icWt7tWApROIFaPTVG OpD/iUV5TNwsjoQDwU07cNo2Jl92AYgGA620iRX70dE7m1/LQHz/P/N6RIscCU3Y lwzyo/FBvj/o7ufmnyzxONVmyNDSnMuDkT4oAFuRHQ6wla8uZoYn7DPVlMzuvuwE UYx/iZQ5SN2xarsoPP8hLc1QPAnjAzDCBZipdT2DhUI0ddLg/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXY+I0GpoL/Zsdl7GDQhPjNrgMmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYThiOTI2OWMtZGI1MC0z NjEwLTgzNmQtM2U4ZDQ4OTQ1MzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5rwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIx4SfFQzjhBtGAg++xPRPGnnaMEmbI9pQ6ZcfWo3ytGm0Oyg3SWau2 BPIAyIvYsCA56MtBuiQNnHIfTwY0cs/RIl04cEm6x+hjKUZVmJMOpnZtOyUyWa/d NbJ847mD3HqAD+3FBWzSgyq3rh9R+H+FlmPLidmSz8LPdoxdLNq1Mzfi8HFdjvGm HH4TamuZCIbivYBArk1avbKg9EXdgQOtgKgyXgH46BKxkLIuPgSk3rt/gEBuotLa opXEOniJ76egh9lUKQJzQG1OxbmTXacwGWFyPh4FIPLqzgclOdX6XhRUHUqFwOgA ZDHiqieu6qc0QnvFNrNFZxXMNitzkEM= -----END CERTIFICATE-----Generated at Wed May 13 09:22:09 2026 by rpki-client