$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa File: f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa (raw, json) Hash identifier: I5CqAdwDO7aYuz4AYdiClQqDWI30/ExWlnOFvwcdCLs= Subject key identifier: A6:0B:5C:63:B0:A8:4B:11:5B:2F:FC:96:20:04:54:C5:F8:88:42:36 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC6CAF82BE524740CCE72BB40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 136.248.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:f8:2b:e5:24:74:0c:ce:72:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=3c149340-d511-4479-bfb5-24dc6045ef33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:4f:70:3e:f9:8d:dc:e3:ab:d0:ae:46:3c: 8d:f9:b1:bd:36:86:51:8e:e0:f2:51:d7:c7:17:dd: 52:9c:8b:24:3d:23:cd:c8:2d:25:be:1a:42:46:69: 76:8c:92:73:5c:a0:2e:2b:a5:9c:3b:99:82:da:92: ba:30:c6:9d:54:91:9c:56:1b:1c:00:79:87:0d:0d: d4:8d:f0:9e:bf:73:b8:e3:c3:b6:a5:09:1e:1e:86: 20:83:c7:4f:16:50:ab:ca:40:58:e5:1d:77:3f:f9: 25:07:78:6b:7b:59:6b:40:a2:6f:d9:c3:9f:17:9c: 05:2d:84:5c:d0:b2:79:c3:11:33:f1:fa:f5:d3:82: 4c:02:b4:9c:1a:e8:bf:78:f6:b1:8f:0c:5d:49:56: c7:42:1f:02:45:f5:53:29:a2:62:82:52:74:63:72: 71:80:f1:e2:46:e0:7c:6f:99:9a:8c:3a:84:f8:1c: f9:f6:07:0e:f9:f1:83:f0:c8:b7:d8:87:17:25:ac: fc:6c:2c:ed:9f:ab:10:bc:c0:df:bb:98:cb:a5:0a: 36:5a:26:fe:45:34:8c:55:66:42:44:ef:44:8b:63: 34:59:c2:59:47:72:b6:bb:04:5b:86:21:36:14:04: e6:59:3b:31:1d:08:61:d6:92:25:3d:93:45:4d:23: f4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0B:5C:63:B0:A8:4B:11:5B:2F:FC:96:20:04:54:C5:F8:88:42:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:f2:66:3f:c3:e3:ca:f0:cf:10:92:c8:87:44:ac:de:aa:e9: 60:46:67:ad:48:83:9d:20:a9:66:09:b8:9f:46:45:38:69:db: e6:82:a6:5f:95:88:c3:ce:05:f7:a0:bb:59:f2:59:83:f7:67: 2b:87:7c:a7:00:7e:4a:37:e5:84:79:c6:60:f8:a1:c2:35:3c: d2:a2:87:6d:5c:49:27:f3:23:3f:84:84:99:12:12:4c:92:b8: a4:19:f8:83:25:10:d0:05:77:d2:60:7b:26:8b:ed:75:85:a0: a2:b7:1c:c9:1e:da:57:56:3f:b3:f1:6a:72:31:e6:1a:07:5c: f7:3c:b2:b2:fc:b8:19:f7:c2:44:05:a7:14:57:41:17:29:49: d8:20:b0:dd:54:d6:cb:16:2b:b7:37:dc:4a:38:b4:d5:4f:9b: 0a:49:f1:d3:a3:45:58:87:29:69:c8:bc:61:00:10:c7:7c:ae: a0:7c:8b:9b:b7:34:83:95:97:91:6e:ae:04:9b:e5:85:34:df: 10:08:6c:a3:88:e1:ae:77:54:28:05:3f:5d:dc:14:f7:dc:b8: d0:bc:04:1d:ae:bf:f9:a7:4d:19:cb:3e:49:78:06:52:d6:ef: 8d:a2:bc:3b:86:39:cc:d3:35:1b:d1:e1:f5:42:96:94:ef:5f: b1:5d:88:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Gyvgr5SR0DM5yu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk M2MxNDkzNDAtZDUxMS00NDc5LWJmYjUtMjRkYzYwNDVlZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcxPcD75jdzjq9CuRjyN+bG9NoZRjuDyUdfH F91SnIskPSPNyC0lvhpCRml2jJJzXKAuK6WcO5mC2pK6MMadVJGcVhscAHmHDQ3U jfCev3O448O2pQkeHoYgg8dPFlCrykBY5R13P/klB3hre1lrQKJv2cOfF5wFLYRc 0LJ5wxEz8fr104JMArScGui/ePaxjwxdSVbHQh8CRfVTKaJiglJ0Y3JxgPHiRuB8 b5majDqE+Bz59gcO+fGD8Mi32IcXJaz8bCztn6sQvMDfu5jLpQo2Wib+RTSMVWZC RO9Ei2M0WcJZR3K2uwRbhiE2FATmWTsxHQhh1pIlPZNFTSP0ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYLXGOwqEsRWy/8liAEVMX4iEI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjA3MGM0ZTAtYmZmNy0z OGYzLWFhMGQtNGZiZDczMWM1NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiPj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnyZj/D48rwzxCSyIdErN6q6WBGZ61Ig50gqWYJuJ9GRThp2+aCpl+V iMPOBfegu1nyWYP3ZyuHfKcAfko35YR5xmD4ocI1PNKih21cSSfzIz+EhJkSEkyS uKQZ+IMlENAFd9JgeyaL7XWFoKK3HMke2ldWP7PxanIx5hoHXPc8srL8uBn3wkQF pxRXQRcpSdggsN1U1ssWK7c33Eo4tNVPmwpJ8dOjRViHKWnIvGEAEMd8rqB8i5u3 NIOVl5FurgSb5YU03xAIbKOI4a53VCgFP13cFPfcuNC8BB2uv/mnTRnLPkl4BlLW 742ivDuGOczTNRvR4fVClpTvX7FdiPU= -----END CERTIFICATE-----Generated at Wed May 13 07:29:32 2026 by rpki-client