$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd95c950-07d2-3d55-bacb-5c65a55963e6.roa File: dd95c950-07d2-3d55-bacb-5c65a55963e6.roa (raw, json) Hash identifier: 8pt/w2vVQ0YzW9Hh3XU0hE2CXR7jzRR4tnGslTPRPVM= Subject key identifier: ED:55:61:12:FA:06:5F:DD:26:D1:1B:EC:8B:9E:7B:22:E5:EA:71:1A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8C2AAD535A82366DD0C4E680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd95c950-07d2-3d55-bacb-5c65a55963e6.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 168.129.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:ad:53:5a:82:36:6d:d0:c4:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=fe3b0a5a-7ae4-432a-8061-f99bf37365f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:4b:ca:18:de:be:57:44:fd:7b:98:91:d5: a4:c0:34:57:5a:81:82:26:91:d8:d1:88:66:54:fe: 12:84:2d:c6:9a:d8:d7:72:e8:2c:72:9f:e2:73:31: ab:a2:0e:00:32:a7:1f:b0:16:b6:74:c1:b2:85:08: 99:ec:e2:ae:37:f9:56:18:db:1e:dd:bc:4f:19:80: 65:56:a3:31:5f:ba:7c:79:b6:b8:6f:c7:86:6c:fb: f8:30:aa:22:9a:59:61:4e:14:88:b9:0b:61:49:5e: d9:39:b9:0a:fe:cf:26:49:a7:44:ee:37:c0:84:46: be:e6:9b:20:15:e4:25:03:e9:8d:b1:10:87:67:e3: 38:29:87:5f:0c:0a:61:f5:4b:41:33:7d:22:bd:52: a5:5c:bc:e2:4d:77:24:45:98:56:f6:35:db:33:c4: 1a:c6:fd:15:94:4c:29:9e:89:5e:03:18:08:af:51: 0e:7b:f6:6c:c6:31:87:c6:c2:bc:62:98:7a:4e:77: 1f:c4:e5:40:05:84:e1:ac:e4:2d:06:bd:58:22:89: e1:ed:05:d0:b8:9b:a4:65:18:ce:91:ad:e6:3a:1f: 34:f9:a2:c8:b6:e2:64:14:de:a1:23:ef:6d:e8:38: 4e:1e:00:47:08:47:1d:97:3f:fb:3e:c5:26:14:70: e6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:55:61:12:FA:06:5F:DD:26:D1:1B:EC:8B:9E:7B:22:E5:EA:71:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd95c950-07d2-3d55-bacb-5c65a55963e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:98:d4:de:e7:d0:69:8f:61:8f:39:00:e1:c9:2e:be:12:33: 97:c3:9c:49:b8:89:83:f9:36:29:3c:7e:58:f1:6a:02:d2:04: d1:b0:22:47:c4:61:65:ee:a7:a9:af:66:cd:b1:1a:8f:92:d3: be:b4:7d:e9:53:8b:34:4b:6c:41:31:5c:47:63:2c:28:ad:0a: bd:26:bf:f3:c7:03:18:b7:fe:13:9b:c3:18:5c:e1:ac:ab:7a: 44:6c:aa:7a:c8:0c:8a:26:4c:d1:b2:e6:4e:70:e3:24:01:80: ee:a9:17:87:57:07:f9:ec:36:5f:8b:b5:f8:04:ea:7a:d3:27: 9b:c4:51:9e:6b:42:1e:64:a2:ca:6b:02:e9:ef:fd:50:68:72: b1:e3:70:44:31:76:db:ea:25:2f:98:c3:d5:8c:1a:31:95:e5: f1:2e:0c:a0:85:6d:4f:a5:95:53:c6:69:78:f3:a7:11:71:75: ac:65:c8:60:2e:44:56:4e:6c:4f:63:e2:5e:69:8f:f3:9e:82: 07:6c:d3:57:bd:b5:a2:2c:19:b0:8b:8c:a1:55:98:91:18:4c: d4:85:48:f7:5c:f9:50:29:d4:e3:83:e2:76:1d:17:ec:bc:8e: 66:84:f7:fd:9e:fc:72:47:d1:56:0a:ae:48:33:45:d9:92:01: 12:cc:be:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKq1TWoI2bdDE5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk ZmUzYjBhNWEtN2FlNC00MzJhLTgwNjEtZjk5YmYzNzM2NWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwZLyhjevldE/XuYkdWkwDRXWoGCJpHY0Yhm VP4ShC3GmtjXcugscp/iczGrog4AMqcfsBa2dMGyhQiZ7OKuN/lWGNse3bxPGYBl VqMxX7p8eba4b8eGbPv4MKoimllhThSIuQthSV7ZObkK/s8mSadE7jfAhEa+5psg FeQlA+mNsRCHZ+M4KYdfDAph9UtBM30ivVKlXLziTXckRZhW9jXbM8Qaxv0VlEwp noleAxgIr1EOe/ZsxjGHxsK8Yph6TncfxOVABYThrOQtBr1YIonh7QXQuJukZRjO ka3mOh80+aLItuJkFN6hI+9t6DhOHgBHCEcdlz/7PsUmFHDmrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1VYRL6Bl/dJtEb7IueeyLl6nEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGQ5NWM5NTAtMDdkMi0z ZDU1LWJhY2ItNWM2NWE1NTk2M2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqIHmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyY1N7n0GmPYY85AOHJLr4SM5fDnEm4iYP5Nik8fljxagLSBNGwIkfE YWXup6mvZs2xGo+S0760felTizRLbEExXEdjLCitCr0mv/PHAxi3/hObwxhc4ayr ekRsqnrIDIomTNGy5k5w4yQBgO6pF4dXB/nsNl+LtfgE6nrTJ5vEUZ5rQh5kospr Aunv/VBocrHjcEQxdtvqJS+Yw9WMGjGV5fEuDKCFbU+llVPGaXjzpxFxdaxlyGAu RFZObE9j4l5pj/Oeggds01e9taIsGbCLjKFVmJEYTNSFSPdc+VAp1OOD4nYdF+y8 jmaE9/2e/HJH0VYKrkgzRdmSARLMvjo= -----END CERTIFICATE-----Generated at Wed May 13 06:42:03 2026 by rpki-client