$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa File: c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa (raw, json) Hash identifier: Z1kc5L6pFehyjHAQZBEyL5FKKPw6jm4JWTniC6HIm+g= Subject key identifier: DC:E1:6D:38:8B:C8:BA:EA:3F:79:0E:EB:64:19:D6:56:5B:B7:9A:83 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC29AFEFC53160EEA7BE82900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 31898 IP address blocks: 192.153.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:fe:fc:53:16:0e:ea:7b:e8:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=1bea481d-3164-416e-a29b-b124edbcaee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a4:38:d5:08:f5:51:86:76:30:c6:89:a0:06: dc:29:3a:1b:9f:8e:61:3d:ee:8d:db:14:01:d9:27: b9:e3:2c:9b:4f:30:f0:e8:33:88:24:46:f0:47:4d: b5:d8:7d:08:f6:eb:c6:87:38:b7:b2:a5:cf:d4:cd: 3c:78:07:ca:16:56:36:10:82:49:f8:a1:c4:ab:3e: 52:1a:fe:79:d3:54:a4:39:c6:72:9a:d1:5a:a3:a3: dc:e0:a5:b8:f4:f3:11:57:b4:19:c8:2e:fa:7c:0f: b8:02:d7:d6:f3:1f:e4:1e:a1:02:29:83:ae:d1:36: a1:9b:fa:b6:65:67:64:9a:37:8f:b5:1d:d8:51:da: 85:ac:b4:47:ee:e2:71:04:c9:79:17:88:06:04:24: d5:70:34:fc:63:57:a0:4c:6f:6d:c0:0f:12:05:96: a8:75:32:48:e1:a8:1f:ce:35:fd:5c:75:c0:64:5a: 46:af:4d:37:f5:e0:10:1c:75:f9:cb:6d:e8:30:4e: cb:18:66:86:0d:72:5e:b1:2d:c5:e0:76:9f:a1:54: bc:3c:da:2b:04:18:ba:52:24:39:1d:cd:33:c3:9e: 2b:96:a5:2a:2a:a5:45:f3:50:8f:f5:4f:f2:98:1f: ad:4b:0f:1a:6c:a2:2d:df:0c:22:e1:f1:d1:9e:f6: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E1:6D:38:8B:C8:BA:EA:3F:79:0E:EB:64:19:D6:56:5B:B7:9A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.153.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e4:f1:32:1e:3d:bc:3c:b8:6e:e6:08:97:20:ce:35:93:7e: 9d:2f:34:c3:dd:be:07:b2:e2:85:48:b8:c5:ed:04:f3:e2:eb: 47:a9:9e:ab:eb:08:49:ea:ff:cf:b7:c8:40:12:34:84:cd:9f: 67:5e:10:1a:02:18:a5:29:6d:ca:b8:ca:b0:b6:50:48:d7:e5: 0d:a9:65:b3:c0:3c:ca:a0:60:81:f7:ff:1a:e7:a9:87:06:c1: 0a:57:26:90:78:96:f4:56:66:a5:35:8b:50:67:84:f7:6e:ff: 78:37:c4:e1:f2:99:be:d3:85:e7:12:7f:e2:7c:61:4f:75:24: 21:dc:3d:89:bd:79:20:d6:08:36:94:63:ac:e2:8f:d5:a5:89: 8e:18:49:6f:e0:09:2d:72:51:2b:a6:75:69:23:a0:66:de:bc: fa:bb:da:80:4a:9d:89:de:35:c7:87:8d:a2:8c:5e:46:23:7f: e8:a1:db:94:8b:b5:91:e6:96:6c:60:41:73:96:73:ee:8c:f3: 46:c6:61:8f:d1:35:64:12:9b:f4:c5:b7:48:45:d7:df:76:f0: cb:da:92:6a:8a:74:4a:97:d7:72:c5:8c:1d:8c:32:72:07:90: 57:ca:82:25:8c:55:54:8c:ed:20:b2:19:42:12:f1:ff:2a:4a: b8:e1:ca:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Cmv78UxYO6nvoKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk MWJlYTQ4MWQtMzE2NC00MTZlLWEyOWItYjEyNGVkYmNhZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Q41Qj1UYZ2MMaJoAbcKTobn45hPe6N2xQB 2Se54yybTzDw6DOIJEbwR0212H0I9uvGhzi3sqXP1M08eAfKFlY2EIJJ+KHEqz5S Gv5501SkOcZymtFao6Pc4KW49PMRV7QZyC76fA+4AtfW8x/kHqECKYOu0Tahm/q2 ZWdkmjePtR3YUdqFrLRH7uJxBMl5F4gGBCTVcDT8Y1egTG9twA8SBZaodTJI4agf zjX9XHXAZFpGr0039eAQHHX5y23oME7LGGaGDXJesS3F4HafoVS8PNorBBi6UiQ5 Hc0zw54rlqUqKqVF81CP9U/ymB+tSw8abKIt3wwi4fHRnvapQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzhbTiLyLrqP3kO62QZ1lZbt5qDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzQyODA0NWUtM2M3ZS0z MGJjLTgzZDAtNWEzNWNjYzIzNWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPk8TIePbw8uG7mCJcgzjWTfp0vNMPdvgey4oVIuMXtBPPi60epnqvr CEnq/8+3yEASNITNn2deEBoCGKUpbcq4yrC2UEjX5Q2pZbPAPMqgYIH3/xrnqYcG wQpXJpB4lvRWZqU1i1BnhPdu/3g3xOHymb7ThecSf+J8YU91JCHcPYm9eSDWCDaU Y6zij9WliY4YSW/gCS1yUSumdWkjoGbevPq72oBKnYneNceHjaKMXkYjf+ih25SL tZHmlmxgQXOWc+6M80bGYY/RNWQSm/TFt0hF19928MvakmqKdEqX13LFjB2MMnIH kFfKgiWMVVSM7SCyGUIS8f8qSrjhylQ= -----END CERTIFICATE-----Generated at Wed May 13 07:08:40 2026 by rpki-client