$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9a997cf-02c9-3dd9-b283-8d3d0dbfc3a3.roa File: c9a997cf-02c9-3dd9-b283-8d3d0dbfc3a3.roa (raw, json) Hash identifier: 2Wkm7mEYvfh7s+DhnZOgUUjpkFLVJlyBnYC5VbX/CDU= Subject key identifier: 00:6D:0B:5F:6E:E6:3D:31:1B:09:41:2D:2B:49:66:E8:7E:81:39:E1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D34083ED162F4F0E5A9D7DCC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9a997cf-02c9-3dd9-b283-8d3d0dbfc3a3.roa Signing time: Tue 17 Mar 2026 23:20:13 +0000 ROA not before: Tue 17 Mar 2026 23:20:13 +0000 ROA not after: Mon 15 Jun 2026 23:20:13 +0000 asID: 31898 IP address blocks: 147.5.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:08:3e:d1:62:f4:f0:e5:a9:d7:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 17 23:20:13 2026 GMT Not After : Jun 15 23:20:13 2026 GMT Subject: CN=8f8d4800-4556-47b8-834c-895f012df6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:f9:e6:f4:d2:3d:33:ad:21:ef:d6:0e:7d: 6f:a9:a8:1c:66:8d:87:18:76:80:c9:cf:fa:4e:b6: c8:c6:cb:de:f0:17:ac:39:53:ad:ba:f9:dd:d5:c8: 4c:e8:5c:45:ac:4e:f4:0f:4b:fd:37:96:43:bc:73: 34:44:6b:9e:a0:46:db:55:7f:5a:2f:f5:9e:e6:cc: 61:88:5e:49:f2:97:71:b5:71:ce:2c:a5:07:2f:e4: 6e:6d:e2:e7:d1:fe:ab:3f:e0:bd:7c:f3:50:fe:e3: 2c:f1:2d:0e:fc:63:81:9d:34:e3:60:c0:37:1f:6c: 02:64:a6:09:a4:62:4e:d2:be:a3:f3:51:5a:d5:81: 48:1d:30:53:f2:1d:2d:8e:62:9a:a9:06:4c:d9:5d: 6a:dd:e3:2e:ac:42:be:a1:23:41:13:0f:77:3c:ac: 85:02:0e:53:b0:68:8f:09:44:2d:cc:68:fc:e5:98: db:36:13:e8:d9:9c:4f:2e:b8:f1:91:77:7b:fa:eb: be:ce:f3:10:71:12:5c:26:07:7c:1a:df:a5:63:c7: b7:8e:79:42:74:ab:cf:90:62:73:3b:a9:b6:c6:d2: 64:c4:c8:51:fb:35:c4:f9:07:cd:b0:03:22:be:2d: 32:93:4c:06:79:94:19:72:2d:e4:a4:fd:6d:07:a7: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6D:0B:5F:6E:E6:3D:31:1B:09:41:2D:2B:49:66:E8:7E:81:39:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9a997cf-02c9-3dd9-b283-8d3d0dbfc3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.5.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a6:fe:c0:dd:23:fd:16:6f:a1:f3:df:e1:96:f4:b3:4b:81: d8:69:1a:73:21:b5:93:55:3c:4e:07:3e:e6:67:8e:80:18:ed: e2:25:04:b3:52:fb:ff:63:80:5b:d8:34:35:a5:12:12:da:cb: 3a:07:5a:58:e3:d8:74:f1:65:f2:b5:11:8f:7e:45:b2:d3:b1: df:20:33:6e:5d:0b:ae:2e:fb:27:62:3a:ed:4a:15:91:22:66: 97:df:fb:02:8a:a4:82:da:cb:da:37:af:2d:23:af:31:ae:e4: 72:c6:11:10:78:0c:2f:e8:98:36:38:04:48:34:46:11:90:36: cc:42:ba:3b:29:ed:52:0e:56:e0:1b:e6:2b:67:f3:27:26:6d: e0:ec:5e:d3:f1:84:a6:5e:f3:98:41:0a:87:d7:e8:ff:b8:de: 8c:2f:9f:35:50:d3:67:bb:84:73:b7:3f:33:bf:04:36:f7:a9: 32:e2:2e:b6:80:9e:b6:ff:8d:2d:77:c6:86:d3:80:13:44:21: 39:ed:86:51:9a:cd:15:02:fe:be:e6:c8:99:4f:d1:95:72:08: af:6d:3e:0f:fd:2d:77:94:4b:43:31:f2:0b:cc:f0:92:93:85: 65:6e:97:43:d7:46:6b:03:0e:f4:03:6c:98:a4:fb:3e:20:b8: 19:cf:78:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00CD7RYvTw5anX3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMxNzIzMjAxM1oXDTI2MDYxNTIzMjAxM1owLzEtMCsGA1UEAxMk OGY4ZDQ4MDAtNDU1Ni00N2I4LTgzNGMtODk1ZjAxMmRmNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf355vTSPTOtIe/WDn1vqagcZo2HGHaAyc/6 TrbIxsve8BesOVOtuvnd1chM6FxFrE70D0v9N5ZDvHM0RGueoEbbVX9aL/We5sxh iF5J8pdxtXHOLKUHL+RubeLn0f6rP+C9fPNQ/uMs8S0O/GOBnTTjYMA3H2wCZKYJ pGJO0r6j81Fa1YFIHTBT8h0tjmKaqQZM2V1q3eMurEK+oSNBEw93PKyFAg5TsGiP CUQtzGj85ZjbNhPo2ZxPLrjxkXd7+uu+zvMQcRJcJgd8Gt+lY8e3jnlCdKvPkGJz O6m2xtJkxMhR+zXE+QfNsAMivi0yk0wGeZQZci3kpP1tB6ecUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABtC19u5j0xGwlBLStJZuh+gTnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzlhOTk3Y2YtMDJjOS0z ZGQ5LWIyODMtOGQzZDBkYmZjM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwUMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWm/sDdI/0Wb6Hz3+GW9LNLgdhpGnMhtZNVPE4HPuZnjoAY7eIlBLNS +/9jgFvYNDWlEhLayzoHWljj2HTxZfK1EY9+RbLTsd8gM25dC64u+ydiOu1KFZEi Zpff+wKKpILay9o3ry0jrzGu5HLGERB4DC/omDY4BEg0RhGQNsxCujsp7VIOVuAb 5itn8ycmbeDsXtPxhKZe85hBCofX6P+43owvnzVQ02e7hHO3PzO/BDb3qTLiLraA nrb/jS13xobTgBNEITnthlGazRUC/r7myJlP0ZVyCK9tPg/9LXeUS0Mx8gvM8JKT hWVul0PXRmsDDvQDbJik+z4guBnPeAA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:17:27 2026 by rpki-client