$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b8e25fc1-4199-3452-b901-838d7c9906e8.roa File: b8e25fc1-4199-3452-b901-838d7c9906e8.roa (raw, json) Hash identifier: hA9a8gM/LxSs23hMpAFcItjbh5gOsc9HvHA2plY1xNg= Subject key identifier: 04:C4:3A:B9:B6:61:DA:77:AB:79:0A:8B:B2:2E:CD:53:98:7B:8A:69 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF56DF1B28A912FE0AFF700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b8e25fc1-4199-3452-b901-838d7c9906e8.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 147.154.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:6d:f1:b2:8a:91:2f:e0:af:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=fa66c215-6532-4da7-8a92-d268adad354a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4c:37:1b:59:90:b8:b7:3f:b0:9c:c1:11:a7: a8:0d:c7:ff:1a:ad:58:98:d6:66:77:86:40:53:c1: bb:37:28:ae:55:53:08:bb:8a:70:58:85:e4:b4:f3: 62:95:a2:e4:5f:8a:c9:1e:5e:e0:e0:8c:ae:83:b9: 9f:0c:da:44:f5:c1:8d:1d:51:41:da:0f:f2:70:a9: d1:94:0e:80:71:d0:a8:8c:90:19:c6:cb:cf:e6:88: fb:c1:64:a1:b1:41:06:99:23:d3:66:e4:14:11:b4: eb:80:7d:d5:cf:24:16:3b:d8:09:71:94:78:0e:a4: 7c:f2:c2:70:dc:3f:76:58:d9:b4:b9:29:89:ca:96: 56:9c:c0:2a:09:e5:69:98:b2:66:b4:12:84:18:4e: 57:e1:fb:cf:11:f3:a0:63:a4:98:8f:a4:3e:c3:02: 1f:2d:a0:82:0e:94:21:92:82:21:e6:cf:cc:2d:65: e5:e3:26:e8:8c:96:5b:de:18:37:d4:b4:08:1f:46: 86:0f:a1:7a:ab:d0:bc:bf:b7:c0:57:bc:b1:fd:8d: 5b:f1:60:61:ed:cd:a3:ea:75:a1:bf:f8:5c:bf:17: 9b:5e:fb:67:4e:67:fd:8b:8e:d6:84:8a:b4:aa:4c: 83:7c:4c:f4:50:da:93:60:71:71:e4:02:00:f7:a5: c5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C4:3A:B9:B6:61:DA:77:AB:79:0A:8B:B2:2E:CD:53:98:7B:8A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b8e25fc1-4199-3452-b901-838d7c9906e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:94:7e:67:62:20:27:f5:82:05:3c:d4:79:8a:97:18:72:f1: 7e:3e:37:d7:f6:50:f0:d6:a9:56:91:75:c7:af:bf:6d:a1:0f: ee:ca:fc:ae:b3:06:fb:c1:6a:7e:45:04:4e:81:91:4c:5d:17: 51:7f:ad:55:f8:fe:99:d1:de:52:16:25:3f:8e:02:c6:c5:db: 5a:97:5c:5f:63:26:d0:30:ae:b5:62:78:99:60:d2:98:57:42: d1:a7:d0:69:76:93:8d:f5:f1:93:28:e9:18:91:2d:11:59:de: d7:76:e7:86:b5:37:25:6b:07:b0:f0:86:66:47:13:92:5b:9f: d6:26:d4:0d:13:ce:33:69:df:b0:e9:3d:ac:d8:a8:25:92:92: 54:dd:f2:7d:3a:4b:a7:8b:65:1f:e2:f0:c8:7e:28:3f:95:21: 6a:3e:07:45:fe:66:6b:e1:d5:47:22:df:63:f1:5e:4f:31:67: 5d:78:ba:3b:14:b9:46:43:35:87:1d:cb:d7:3d:e0:50:a7:02: cd:96:0a:31:d9:ce:ec:4d:76:1a:aa:b7:ab:e8:1d:e8:9d:6f: 18:0c:77:2d:4b:ff:00:59:9f:f0:ec:96:ca:14:a6:c1:85:22: 97:aa:22:75:3f:da:60:d4:11:d3:fc:53:3d:2d:cd:f2:2e:34: 7d:a6:76:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9W3xsoqRL+Cv9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZmE2NmMyMTUtNjUzMi00ZGE3LThhOTItZDI2OGFkYWQzNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEw3G1mQuLc/sJzBEaeoDcf/Gq1YmNZmd4ZA U8G7NyiuVVMIu4pwWIXktPNilaLkX4rJHl7g4Iyug7mfDNpE9cGNHVFB2g/ycKnR lA6AcdCojJAZxsvP5oj7wWShsUEGmSPTZuQUEbTrgH3VzyQWO9gJcZR4DqR88sJw 3D92WNm0uSmJypZWnMAqCeVpmLJmtBKEGE5X4fvPEfOgY6SYj6Q+wwIfLaCCDpQh koIh5s/MLWXl4ybojJZb3hg31LQIH0aGD6F6q9C8v7fAV7yx/Y1b8WBh7c2j6nWh v/hcvxebXvtnTmf9i47WhIq0qkyDfEz0UNqTYHFx5AIA96XF5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATEOrm2Ydp3q3kKi7IuzVOYe4ppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjhlMjVmYzEtNDE5OS0z NDUyLWI5MDEtODM4ZDdjOTkwNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5rgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSUfmdiICf1ggU81HmKlxhy8X4+N9f2UPDWqVaRdcevv22hD+7K/K6z BvvBan5FBE6BkUxdF1F/rVX4/pnR3lIWJT+OAsbF21qXXF9jJtAwrrVieJlg0phX QtGn0Gl2k4318ZMo6RiRLRFZ3td254a1NyVrB7DwhmZHE5Jbn9Ym1A0TzjNp37Dp PazYqCWSklTd8n06S6eLZR/i8Mh+KD+VIWo+B0X+Zmvh1Uci32PxXk8xZ114ujsU uUZDNYcdy9c94FCnAs2WCjHZzuxNdhqqt6voHeidbxgMdy1L/wBZn/DslsoUpsGF IpeqInU/2mDUEdP8Uz0tzfIuNH2mdms= -----END CERTIFICATE-----Generated at Wed May 13 10:18:34 2026 by rpki-client