$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa File: ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa (raw, json) Hash identifier: pSQqqOlnUSRYlZwL4jt3JhtjLVj+Q/0irAdw7BkTOK8= Subject key identifier: 94:42:B8:57:83:3F:26:10:46:F1:58:FC:3B:F8:C1:E3:EF:E3:C7:45 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A987367865F3C0CC66E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 68.233.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:98:73:67:86:5f:3c:0c:c6:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=ded22195-d746-433b-804c-6fb1b8617b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:25:dd:e1:1d:f2:9c:ef:71:9a:12:6d:88:76: 59:61:9a:c5:73:95:57:f5:ed:62:42:03:b0:24:ef: cb:03:85:22:6d:9d:21:72:87:cc:69:29:f6:70:83: a7:f6:df:86:9a:23:23:f1:5d:84:e9:ed:92:2e:6d: 85:66:ba:20:59:b3:22:f0:e6:f1:c8:84:7c:4e:2d: 63:6f:86:cb:b1:7d:31:63:51:ad:04:eb:05:82:36: 9e:e0:a8:45:9b:f6:1f:2c:a8:01:e7:a1:d4:9d:2f: 84:8d:3c:b3:fc:de:3f:f5:1f:5f:a6:2d:12:20:48: 90:0a:5f:58:ca:23:ad:2c:8e:3b:43:d2:5a:73:1f: bd:46:d7:d3:96:9b:fe:de:18:52:15:fd:37:a2:36: 4a:c5:e1:34:8e:8f:64:fe:7f:61:37:df:54:c5:a6: e4:81:71:61:c5:7f:0b:ac:61:33:f7:3b:98:1b:56: 2e:0b:19:3b:e3:fd:72:df:f0:8d:eb:2b:7d:aa:34: ad:5f:53:bf:70:3d:9e:3f:65:88:79:0d:18:f9:19: 83:27:d5:03:24:9d:10:27:61:7e:a8:82:a2:4c:7e: b2:0c:50:d3:52:da:72:64:80:34:78:f6:07:fd:db: 62:82:98:97:89:0d:e8:52:f9:9f:ff:15:6f:2e:37: 1f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:42:B8:57:83:3F:26:10:46:F1:58:FC:3B:F8:C1:E3:EF:E3:C7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 68.233.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:98:22:8d:8e:25:b2:1f:8f:a8:e7:66:ab:c0:3f:10:bb:43: aa:68:52:02:01:b9:7d:a2:9f:f3:2f:84:88:a1:fb:b2:12:e1: 17:24:d0:94:d9:00:2e:f9:4e:57:01:32:8d:f8:97:fd:16:fc: 70:91:c9:a6:60:0f:bb:1c:01:c8:b5:7f:df:fc:32:be:63:37: b9:e3:92:e8:a1:c2:ea:2a:99:3e:09:31:26:bd:4a:89:30:07: db:68:c9:2c:0a:5c:a5:11:14:88:eb:80:29:c5:42:e3:a4:82: 0a:0b:15:ec:0c:47:20:62:7a:8e:19:58:ce:2d:13:2b:7f:84: 9b:44:3f:84:d6:a6:be:de:57:2f:0b:4d:e3:56:c9:7d:b8:f7: 59:8d:94:8a:46:3a:f0:f4:53:1d:ce:e3:9e:5d:81:62:12:54: 9e:f8:8a:8a:f8:41:d9:a0:8d:b5:5f:67:88:de:d2:f7:02:46: 47:44:09:95:18:46:75:29:c7:17:ea:6a:36:62:9e:74:1a:6e: ad:9d:dd:44:fa:c1:e3:c7:14:0b:08:e6:bf:c6:a7:07:62:18: 98:36:f2:6a:14:7c:65:e1:39:ca:4b:a4:9a:a4:4a:06:6b:56: 20:b7:49:bb:23:c7:d8:71:e9:60:a8:32:b6:e0:1a:dc:f5:3c: d6:ef:22:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWphzZ4ZfPAzGboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZGVkMjIxOTUtZDc0Ni00MzNiLTgwNGMtNmZiMWI4NjE3YjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiXd4R3ynO9xmhJtiHZZYZrFc5VX9e1iQgOw JO/LA4UibZ0hcofMaSn2cIOn9t+GmiMj8V2E6e2SLm2FZrogWbMi8ObxyIR8Ti1j b4bLsX0xY1GtBOsFgjae4KhFm/YfLKgB56HUnS+EjTyz/N4/9R9fpi0SIEiQCl9Y yiOtLI47Q9Jacx+9RtfTlpv+3hhSFf03ojZKxeE0jo9k/n9hN99UxabkgXFhxX8L rGEz9zuYG1YuCxk74/1y3/CN6yt9qjStX1O/cD2eP2WIeQ0Y+RmDJ9UDJJ0QJ2F+ qIKiTH6yDFDTUtpyZIA0ePYH/dtigpiXiQ3oUvmf/xVvLjcfkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRCuFeDPyYQRvFY/Dv4wePv48dFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWE5M2I0YmUtZTgyYy0z ZGMwLTg2NTEtZjZlNWE1NjQyMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSYIo2OJbIfj6jnZqvAPxC7Q6poUgIBuX2in/MvhIih+7IS4Rck0JTZ AC75TlcBMo34l/0W/HCRyaZgD7scAci1f9/8Mr5jN7njkuihwuoqmT4JMSa9Sokw B9toySwKXKURFIjrgCnFQuOkggoLFewMRyBieo4ZWM4tEyt/hJtEP4TWpr7eVy8L TeNWyX2491mNlIpGOvD0Ux3O455dgWISVJ74ior4QdmgjbVfZ4je0vcCRkdECZUY RnUpxxfqajZinnQabq2d3UT6wePHFAsI5r/GpwdiGJg28moUfGXhOcpLpJqkSgZr ViC3Sbsjx9hx6WCoMrbgGtz1PNbvIj0= -----END CERTIFICATE-----Generated at Wed May 13 09:39:27 2026 by rpki-client