$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f17cf544-e67f-346a-b231-ab3fa04a7998.roa File: f17cf544-e67f-346a-b231-ab3fa04a7998.roa (raw, json) Hash identifier: a3C2T1T0xKG/AcVlh6k9mcA23YQX06bed4Ih10d4ZwY= Subject key identifier: B2:3C:31:35:BA:CF:99:15:51:19:D6:7B:1C:9D:38:8B:39:EA:A9:19 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E500D244177A7A1D6C0B980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f17cf544-e67f-346a-b231-ab3fa04a7998.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 132.226.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0d:24:41:77:a7:a1:d6:c0:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=67e8a10e-e495-4f7a-92d6-cbaaf31efd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:c5:10:cd:96:67:d0:1b:93:4f:9f:ff:0a: 41:d7:ae:c7:38:6a:e5:7e:37:04:6f:1b:cc:37:cb: a3:65:80:aa:94:b7:00:b6:29:ad:96:48:ac:30:c1: 9e:7f:25:d0:cb:bc:15:6c:54:59:6c:5b:ea:24:78: 9d:12:5e:2c:a0:1b:b2:2c:a0:a2:25:ac:f3:cd:42: 72:1a:75:f3:c1:96:5a:35:19:53:40:4f:5b:5f:6b: b9:82:21:96:65:ff:8f:f9:e0:e7:7e:6c:04:10:bf: aa:fd:73:68:70:02:79:c0:87:d3:be:5b:18:e5:48: 41:30:91:cc:36:1d:88:50:89:3b:66:cb:e0:c6:39: 2b:f6:d1:cb:f0:42:0e:cb:86:6a:17:1a:fa:20:09: 22:45:b3:f8:e5:71:40:63:71:b0:26:29:f9:cd:91: d4:bc:2a:28:3d:8d:f4:87:00:ff:27:a3:16:e4:ea: a6:c2:e4:b8:90:ff:1a:d6:fe:69:4c:69:ca:84:31: 93:48:23:d3:25:6d:ce:8a:d4:f7:e7:64:82:b6:73: 26:be:49:23:4b:8a:a4:83:30:c4:c6:3f:45:b5:44: 59:33:32:df:76:bd:cc:cf:ac:80:4b:a2:a5:bd:5e: bd:4f:b4:43:b3:ca:62:68:a3:b9:03:bd:b3:89:a1: 46:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3C:31:35:BA:CF:99:15:51:19:D6:7B:1C:9D:38:8B:39:EA:A9:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f17cf544-e67f-346a-b231-ab3fa04a7998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.226.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5b:20:d2:be:c4:f8:0c:f1:1a:68:b1:8b:ed:aa:22:92:3d: 75:3d:c8:d2:fe:c6:4e:39:26:6c:46:be:a3:08:0b:35:1e:da: 00:da:63:18:75:fa:ea:9e:9b:c5:59:aa:33:91:28:aa:e6:17: 02:8a:f2:5c:c0:3a:59:b5:1b:fd:c0:47:c6:04:37:f8:23:b2: 34:a5:52:ad:95:0a:93:e1:dd:58:4e:7a:29:80:a5:f3:ea:d4: 26:e4:20:69:41:84:47:a2:ce:ac:45:39:c5:b1:68:fd:02:68: 65:0e:c1:60:fa:c7:f2:02:ef:ef:f4:a5:3a:3e:bb:74:68:a3: f0:97:1a:d6:e5:64:44:06:f2:48:fe:e9:4f:d8:72:2c:0a:4f: e9:82:6d:4d:68:3d:f8:22:3e:6c:92:dc:07:d9:51:4f:fb:c0: 0b:9a:aa:46:40:d1:60:f9:98:2b:c0:54:d1:15:e6:44:cf:e2: 1d:15:82:b6:a8:6b:e3:11:f8:69:b0:97:ab:d0:a3:d9:0d:5e: e9:c3:72:cf:1b:6f:9b:44:61:c4:0d:ea:66:a1:c0:81:1e:8e: f8:70:f0:b4:b5:50:36:16:c1:63:b8:f8:4a:a4:06:b3:54:c4: c9:d7:aa:ce:a3:67:20:2b:84:f7:37:8a:58:80:2f:05:f1:5b: 3a:de:e7:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUA0kQXenodbAuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NjdlOGExMGUtZTQ5NS00ZjdhLTkyZDYtY2JhYWYzMWVmZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCXFEM2WZ9Abk0+f/wpB167HOGrlfjcEbxvM N8ujZYCqlLcAtimtlkisMMGefyXQy7wVbFRZbFvqJHidEl4soBuyLKCiJazzzUJy GnXzwZZaNRlTQE9bX2u5giGWZf+P+eDnfmwEEL+q/XNocAJ5wIfTvlsY5UhBMJHM Nh2IUIk7Zsvgxjkr9tHL8EIOy4ZqFxr6IAkiRbP45XFAY3GwJin5zZHUvCooPY30 hwD/J6MW5OqmwuS4kP8a1v5pTGnKhDGTSCPTJW3OitT352SCtnMmvkkjS4qkgzDE xj9FtURZMzLfdr3Mz6yAS6KlvV69T7RDs8piaKO5A72ziaFGHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI8MTW6z5kVURnWexydOIs56qkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjE3Y2Y1NDQtZTY3Zi0z NDZhLWIyMzEtYWIzZmEwNGE3OTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhOIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtbINK+xPgM8RposYvtqiKSPXU9yNL+xk45JmxGvqMICzUe2gDaYxh1 +uqem8VZqjORKKrmFwKK8lzAOlm1G/3AR8YEN/gjsjSlUq2VCpPh3VhOeimApfPq 1CbkIGlBhEeizqxFOcWxaP0CaGUOwWD6x/IC7+/0pTo+u3Roo/CXGtblZEQG8kj+ 6U/YciwKT+mCbU1oPfgiPmyS3AfZUU/7wAuaqkZA0WD5mCvAVNEV5kTP4h0Vgrao a+MR+Gmwl6vQo9kNXunDcs8bb5tEYcQN6mahwIEejvhw8LS1UDYWwWO4+EqkBrNU xMnXqs6jZyArhPc3iliALwXxWzre59Q= -----END CERTIFICATE-----Generated at Wed May 13 04:46:27 2026 by rpki-client