$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce01e685-97ad-3167-82e0-d4a26f182d86.roa File: ce01e685-97ad-3167-82e0-d4a26f182d86.roa (raw, json) Hash identifier: ZnIAuGB18ZR6DZly0ukzxXQzyfxVCWm4Nht3ptHhAFE= Subject key identifier: DC:22:7F:9B:1F:BD:64:40:E0:7B:15:3A:A2:DA:34:7C:93:1E:71:4D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF56C0B6E3291B820EB4500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce01e685-97ad-3167-82e0-d4a26f182d86.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 192.29.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:6c:0b:6e:32:91:b8:20:eb:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=38f56b02-0523-4777-ad15-2687c2058f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:91:de:d5:4c:79:cc:d8:93:df:eb:02:64: 99:d8:36:60:fd:21:b4:18:84:a2:c2:ae:78:0d:66: 67:43:40:b8:27:47:f9:65:ed:cb:09:08:3e:6e:f2: d2:0d:4e:4d:62:14:cc:10:65:75:4b:ef:8f:6c:0a: 1f:a1:65:bc:94:79:83:2b:24:1c:6d:c5:62:c1:95: 7a:08:98:b0:68:4a:f3:26:b5:fd:72:2e:db:6f:01: 68:77:a3:e6:4e:db:89:e6:a0:6e:a1:8f:7e:b9:1b: ac:6e:49:9d:51:00:6f:d7:8d:9a:b3:6e:21:bd:12: fe:48:b6:cf:d8:32:51:bf:77:6e:52:3a:c3:19:24: 2e:07:a2:f1:e5:c9:ec:8a:c4:b2:41:f2:33:46:8f: 15:41:89:de:34:fd:bb:01:2c:37:9e:1d:a6:b5:ec: b7:2d:e8:b1:c2:37:90:eb:01:3e:8c:5e:70:a7:94: 53:b4:33:b8:77:0b:2d:dd:61:4f:56:a1:c6:86:b0: 70:72:f1:52:ab:4b:1b:39:12:48:75:de:d0:c8:7f: 5c:ef:0c:3c:95:12:12:87:e0:2a:2a:f4:bb:c7:43: 30:e0:0d:e0:21:6b:cf:20:60:2f:53:fc:94:8b:c0: 90:09:9e:6b:53:c1:c3:ed:83:20:37:68:1d:e7:b2: a2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:22:7F:9B:1F:BD:64:40:E0:7B:15:3A:A2:DA:34:7C:93:1E:71:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce01e685-97ad-3167-82e0-d4a26f182d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c5:9d:47:14:1d:86:71:b8:33:b3:b1:70:2a:ec:61:b8:36: a7:8f:02:2d:8d:98:1a:6c:47:34:84:38:34:d8:98:17:5a:cf: e5:ee:f5:67:12:17:22:c8:50:35:22:3b:13:11:dc:c9:72:91: c2:ed:45:f3:17:5d:29:a2:4f:14:02:cc:f2:9f:d6:00:ba:4f: 23:40:ea:b2:9a:b1:fb:2c:b6:5a:97:9b:25:bd:ec:e9:c5:6a: a1:09:70:03:df:12:18:a8:b1:ec:5d:d0:40:79:d1:95:f6:6f: c2:f9:91:cb:bd:29:8c:b4:3f:56:43:05:83:50:d1:44:fc:a4: 16:ab:b4:57:1d:93:fc:43:af:8b:20:0f:67:d5:84:b8:78:47: e8:74:0f:0e:9a:b9:fb:86:95:09:06:e0:67:0d:03:31:47:83: b7:76:8c:1b:ba:d2:34:e2:e7:fe:f6:f9:cc:d0:89:9c:f0:4c: d4:42:35:db:2d:d2:b2:c9:18:1e:92:ae:87:cd:7b:57:ba:d4: 1c:c7:d7:8f:70:69:cf:20:de:20:f9:0f:97:68:8e:29:da:dc: b2:84:96:4a:0c:c7:77:3a:88:df:b5:8d:63:17:eb:46:45:60: 3a:93:95:8b:b5:af:c5:cd:9a:f4:0b:ce:04:a2:e4:40:46:c1: f9:84:8f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WwLbjKRuCDrRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzhmNTZiMDItMDUyMy00Nzc3LWFkMTUtMjY4N2MyMDU4ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE2R3tVMeczYk9/rAmSZ2DZg/SG0GISiwq54 DWZnQ0C4J0f5Ze3LCQg+bvLSDU5NYhTMEGV1S++PbAofoWW8lHmDKyQcbcViwZV6 CJiwaErzJrX9ci7bbwFod6PmTtuJ5qBuoY9+uRusbkmdUQBv142as24hvRL+SLbP 2DJRv3duUjrDGSQuB6Lx5cnsisSyQfIzRo8VQYneNP27ASw3nh2mtey3LeixwjeQ 6wE+jF5wp5RTtDO4dwst3WFPVqHGhrBwcvFSq0sbORJIdd7QyH9c7ww8lRISh+Aq KvS7x0Mw4A3gIWvPIGAvU/yUi8CQCZ5rU8HD7YMgN2gd57KigwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwif5sfvWRA4HsVOqLaNHyTHnFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2UwMWU2ODUtOTdhZC0z MTY3LTgyZTAtZDRhMjZmMTgyZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwB0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrFnUcUHYZxuDOzsXAq7GG4NqePAi2NmBpsRzSEODTYmBdaz+Xu9WcS FyLIUDUiOxMR3MlykcLtRfMXXSmiTxQCzPKf1gC6TyNA6rKasfsstlqXmyW97OnF aqEJcAPfEhiosexd0EB50ZX2b8L5kcu9KYy0P1ZDBYNQ0UT8pBartFcdk/xDr4sg D2fVhLh4R+h0Dw6aufuGlQkG4GcNAzFHg7d2jBu60jTi5/72+czQiZzwTNRCNdst 0rLJGB6SrofNe1e61BzH149wac8g3iD5D5dojina3LKElkoMx3c6iN+1jWMX60ZF YDqTlYu1r8XNmvQLzgSi5EBGwfmEjyQ= -----END CERTIFICATE-----Generated at Wed May 13 09:01:56 2026 by rpki-client