$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a99cf58b-8fe6-3a42-9f22-5d2ba9f0ba07.roa File: a99cf58b-8fe6-3a42-9f22-5d2ba9f0ba07.roa (raw, json) Hash identifier: s4l3nwz+sDrsohMz/Y9h9o3IYs47RiwVkCdk9hwqvuY= Subject key identifier: 34:5E:20:43:0D:C9:7D:CF:98:CD:EE:47:15:8D:91:F4:6E:0D:EE:74 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A9F295A1C3292F47A8E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a99cf58b-8fe6-3a42-9f22-5d2ba9f0ba07.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 132.226.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9f:29:5a:1c:32:92:f4:7a:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=b81598d2-9a87-4a93-aa4a-f95aa5adddbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:d7:bf:29:d4:5f:32:b7:59:0e:f2:28:fe: 0c:e8:a2:fb:a9:ff:94:94:77:e6:67:9a:de:85:a6: a1:16:88:60:ee:91:b4:4e:33:4a:b2:ad:68:ba:ae: 1f:80:06:7f:0c:2c:7f:7c:88:d2:c6:03:4a:56:c8: 60:fc:31:b4:90:c8:99:64:f9:1d:fe:6c:3d:e8:fb: 62:6d:9f:22:ee:80:f7:c8:d9:4d:e8:b0:aa:cc:50: 7a:32:21:da:e8:b2:23:c9:4d:9c:e2:3a:4f:c0:ce: 17:72:09:0f:2a:2d:02:94:79:1c:01:55:35:22:a3: 89:06:04:e5:91:7e:36:cf:07:e5:ec:27:e8:aa:14: dd:0e:de:d9:85:32:dd:24:95:7d:c6:02:60:f5:2c: f3:12:df:45:b5:d7:95:58:09:ce:df:3d:6d:ce:89: 3c:4d:da:dc:50:50:20:11:d1:99:8c:1c:f7:70:8e: 52:8c:4c:b1:19:8e:45:55:fb:34:96:a2:e9:29:e7: e4:2b:4f:ee:ed:53:ca:bf:65:7b:cb:bf:4f:e3:ef: fb:15:78:f7:fd:0d:ae:6c:fd:27:57:1c:ef:76:ec: f8:60:6e:99:16:c0:c4:f6:e0:5b:d2:70:ac:dd:25: 08:54:1c:d8:09:ea:35:b3:ff:91:86:0d:5b:b4:4c: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5E:20:43:0D:C9:7D:CF:98:CD:EE:47:15:8D:91:F4:6E:0D:EE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a99cf58b-8fe6-3a42-9f22-5d2ba9f0ba07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.226.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e4:3a:3d:67:09:6c:87:04:f4:0a:ab:e0:26:6e:e8:a8:14: 64:48:43:76:36:bc:fb:7d:eb:15:bb:f8:8e:38:f0:82:af:9a: c1:f5:67:2c:5a:58:ac:32:5c:72:e1:8c:2a:56:0a:1f:28:71: 38:32:55:57:2e:c2:15:11:8f:ff:96:09:82:b0:0b:4e:b4:de: 52:63:27:87:ed:bc:4f:ec:68:19:a5:de:fe:a8:47:d6:90:cb: da:17:dd:5b:a4:fa:51:d2:ef:08:d8:64:b7:42:51:96:02:59: 99:99:f5:93:70:ef:aa:db:29:7f:65:b8:36:f4:95:ba:76:4b: 0a:de:aa:cb:a9:ea:9a:3e:b0:3c:9c:15:5e:f4:6a:15:36:16: 79:e3:63:94:30:77:e0:29:0d:90:d2:2d:42:79:c6:60:e3:03: 1a:bb:12:cf:1f:f4:b0:87:eb:17:4b:15:13:bc:c9:68:f4:dc: ec:e7:43:ad:b1:20:df:3d:70:34:81:c5:af:9b:d2:ee:42:61: 42:c9:ff:6f:c8:e1:7d:7e:f8:2a:c8:29:f2:54:38:53:63:21: 77:35:e1:0c:24:12:f1:ad:84:9c:ce:73:b5:8c:30:99:b4:cc: 64:cd:c7:98:4a:a6:3b:ab:0e:78:56:fe:fd:fe:6c:d4:b5:b7: b4:9b:d9:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWp8pWhwykvR6jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk YjgxNTk4ZDItOWE4Ny00YTkzLWFhNGEtZjk1YWE1YWRkZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsLXvynUXzK3WQ7yKP4M6KL7qf+UlHfmZ5re haahFohg7pG0TjNKsq1ouq4fgAZ/DCx/fIjSxgNKVshg/DG0kMiZZPkd/mw96Pti bZ8i7oD3yNlN6LCqzFB6MiHa6LIjyU2c4jpPwM4XcgkPKi0ClHkcAVU1IqOJBgTl kX42zwfl7CfoqhTdDt7ZhTLdJJV9xgJg9SzzEt9FtdeVWAnO3z1tzok8TdrcUFAg EdGZjBz3cI5SjEyxGY5FVfs0lqLpKefkK0/u7VPKv2V7y79P4+/7FXj3/Q2ubP0n Vxzvduz4YG6ZFsDE9uBb0nCs3SUIVBzYCeo1s/+Rhg1btExQsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDReIEMNyX3PmM3uRxWNkfRuDe50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTk5Y2Y1OGItOGZlNi0z YTQyLTlmMjItNWQyYmE5ZjBiYTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhOIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzkOj1nCWyHBPQKq+AmbuioFGRIQ3Y2vPt96xW7+I448IKvmsH1Zyxa WKwyXHLhjCpWCh8ocTgyVVcuwhURj/+WCYKwC0603lJjJ4ftvE/saBml3v6oR9aQ y9oX3Vuk+lHS7wjYZLdCUZYCWZmZ9ZNw76rbKX9luDb0lbp2Swreqsup6po+sDyc FV70ahU2FnnjY5Qwd+ApDZDSLUJ5xmDjAxq7Es8f9LCH6xdLFRO8yWj03OznQ62x IN89cDSBxa+b0u5CYULJ/2/I4X1++CrIKfJUOFNjIXc14QwkEvGthJzOc7WMMJm0 zGTNx5hKpjurDnhW/v3+bNS1t7Sb2Vs= -----END CERTIFICATE-----Generated at Wed May 13 05:52:36 2026 by rpki-client