$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0a098d0-0ad9-35ce-b4b1-230c3f41a1bf.roa File: c0a098d0-0ad9-35ce-b4b1-230c3f41a1bf.roa (raw, json) Hash identifier: h5e12cCrPbM4aSJNSQyuJtslMosQG0niF1jJRpPqXmA= Subject key identifier: 5A:03:07:1D:58:4D:C9:F2:6E:D1:58:06:2B:38:21:23:BA:78:6C:22 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC6CB01E6D52D2937E311B9C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0a098d0-0ad9-35ce-b4b1-230c3f41a1bf.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 164.152.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:01:e6:d5:2d:29:37:e3:11:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=dba1b7c3-a3e0-4fb9-8257-df9abb859c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2c:72:00:f1:d6:12:a8:76:44:e2:0d:08:f2: 19:e3:0b:b2:2e:0e:73:71:49:55:77:99:ba:a8:dc: ce:0c:6c:04:43:d9:0c:ef:7f:20:3e:bf:f5:99:bc: e5:05:6f:9a:21:98:97:3e:b2:f8:dd:e4:53:35:3c: 6b:0d:cf:ef:5f:66:5e:8d:79:8b:44:5a:78:45:77: 44:f2:9b:0a:82:61:5a:4f:e8:33:4d:65:03:df:ab: c2:76:c1:55:39:10:e9:c9:a8:8c:5e:37:d0:14:16: 62:48:a6:fa:e1:3f:38:36:1b:a2:16:10:27:ce:b8: f6:eb:81:d8:3d:90:9e:f3:9a:13:69:27:11:6c:97: 3d:84:ba:3e:23:0d:9f:57:b2:84:34:be:a4:f8:80: 04:ae:ff:6a:5d:8e:e8:cd:86:b7:7d:3a:66:94:a7: e4:a3:48:3d:08:47:76:b4:4e:cc:87:01:8c:77:08: cb:63:6a:24:c0:7a:6d:da:bc:cc:94:35:9f:ae:e7: d6:5a:27:39:a8:e2:a2:90:9f:80:08:22:83:d4:05: e2:14:77:f4:06:2d:7a:33:f0:d0:e9:74:aa:b8:52: 9c:1f:97:fa:14:ec:57:aa:b0:11:04:20:0b:c4:a4: 4d:3f:9d:61:9d:cb:32:2b:85:ed:8a:7f:53:62:89: 25:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:03:07:1D:58:4D:C9:F2:6E:D1:58:06:2B:38:21:23:BA:78:6C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0a098d0-0ad9-35ce-b4b1-230c3f41a1bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:39:57:12:b2:e9:55:73:39:41:cd:87:9f:22:bf:70:c9:1f: 59:ac:f1:d6:c3:74:9b:71:94:a4:40:2b:34:1d:8e:3b:98:77: 8e:46:bd:52:0e:49:7d:2b:54:b3:bc:bc:90:19:81:af:63:d1: 09:d6:6a:52:70:7f:b7:c8:17:37:74:fe:2b:df:9a:8d:8d:91: fe:3c:ae:6d:ff:d1:60:27:c6:f5:5f:55:df:db:f3:0e:22:35: cd:dc:24:c7:62:c7:9e:b0:60:d9:23:44:0c:93:4f:00:21:d4: f0:f8:0d:04:ac:86:ce:69:0e:e1:fa:56:c4:85:e8:8d:f9:2e: 92:d3:d6:8f:f8:29:f5:21:f2:f5:33:5b:26:f2:2b:2c:79:0f: 67:46:f1:2a:1b:a5:2c:58:b0:e2:44:00:bf:d1:f2:69:f0:5d: f5:f0:6e:79:04:83:43:75:44:d3:d0:43:13:4a:83:20:b1:51: 0b:a7:f0:21:21:c3:a6:94:f8:0f:33:78:e5:67:ad:19:e2:e9: c0:be:2a:31:34:7b:95:64:95:b7:b7:f7:26:0c:c0:e1:2f:10: 1d:9f:85:30:5f:41:30:bb:94:2a:b5:7d:47:a9:52:69:64:35: 55:80:49:07:9a:55:7b:57:52:8c:6f:e4:fa:63:77:67:16:2e: 7f:25:c8:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GywHm1S0pN+MRucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk ZGJhMWI3YzMtYTNlMC00ZmI5LTgyNTctZGY5YWJiODU5YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyxyAPHWEqh2ROINCPIZ4wuyLg5zcUlVd5m6 qNzODGwEQ9kM738gPr/1mbzlBW+aIZiXPrL43eRTNTxrDc/vX2ZejXmLRFp4RXdE 8psKgmFaT+gzTWUD36vCdsFVORDpyaiMXjfQFBZiSKb64T84NhuiFhAnzrj264HY PZCe85oTaScRbJc9hLo+Iw2fV7KENL6k+IAErv9qXY7ozYa3fTpmlKfko0g9CEd2 tE7MhwGMdwjLY2okwHpt2rzMlDWfrufWWic5qOKikJ+ACCKD1AXiFHf0Bi16M/DQ 6XSquFKcH5f6FOxXqrARBCALxKRNP51hncsyK4Xtin9TYokl8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoDBx1YTcnybtFYBis4ISO6eGwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzBhMDk4ZDAtMGFkOS0z NWNlLWI0YjEtMjMwYzNmNDFhMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpJhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg5VxKy6VVzOUHNh58iv3DJH1ms8dbDdJtxlKRAKzQdjjuYd45GvVIO SX0rVLO8vJAZga9j0QnWalJwf7fIFzd0/ivfmo2Nkf48rm3/0WAnxvVfVd/b8w4i Nc3cJMdix56wYNkjRAyTTwAh1PD4DQSshs5pDuH6VsSF6I35LpLT1o/4KfUh8vUz WybyKyx5D2dG8SobpSxYsOJEAL/R8mnwXfXwbnkEg0N1RNPQQxNKgyCxUQun8CEh w6aU+A8zeOVnrRni6cC+KjE0e5Vklbe39yYMwOEvEB2fhTBfQTC7lCq1fUepUmlk NVWASQeaVXtXUoxv5Ppjd2cWLn8lyJk= -----END CERTIFICATE-----Generated at Wed May 13 06:32:23 2026 by rpki-client