$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42be3d9-7682-37f0-ad4a-ee6860799dae.roa File: f42be3d9-7682-37f0-ad4a-ee6860799dae.roa (raw, json) Hash identifier: k5bPo9BfyHDhtpZgYr2UnOpACLILH51x0fD3aHkjf6k= Subject key identifier: F0:55:15:E0:7F:3E:84:88:7C:E8:65:7E:39:2F:C0:B4:E7:CD:B8:59 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A2008B24E7C5F16E5575140 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42be3d9-7682-37f0-ad4a-ee6860799dae.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 167.126.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:08:b2:4e:7c:5f:16:e5:57:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=fd75cc6b-c003-423a-8808-2fd1308208a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:3e:e4:59:06:67:cf:3d:cd:21:a9:5e:e2: 45:01:1f:b3:f4:1a:d2:92:e3:dd:fd:cd:55:f7:ee: 53:92:89:bc:62:94:df:43:58:eb:7e:14:e2:e2:b3: ed:01:9e:00:3a:54:ae:d4:df:11:b5:dd:12:65:3e: bf:09:61:3a:b8:a3:45:60:6e:92:af:1b:0c:9b:53: 34:b3:78:5e:48:29:ff:2a:b3:f5:a2:75:f2:ad:bf: 7e:c2:5f:e0:91:d3:6b:90:31:2d:99:0a:55:d6:34: 54:15:41:1a:ea:5b:ac:8a:35:1e:bd:50:bb:84:6e: d9:6e:b5:0d:15:21:6a:c8:74:1d:d0:3c:e1:47:a0: 24:27:8f:fd:1d:b0:ca:50:9d:d8:1d:f5:9a:7c:63: 1b:ac:be:ee:7f:55:70:14:ef:7d:eb:67:6b:df:12: b4:30:67:cd:83:55:13:fb:fc:e7:2a:71:fc:84:12: 9c:64:99:ae:f9:37:d5:60:d6:85:f9:12:88:85:30: f3:74:d6:00:b3:7b:00:1a:de:e5:c4:00:ab:37:2a: 7b:d2:1e:af:90:25:dd:1e:00:90:4c:50:04:5a:c5: 13:d4:d0:14:e7:8d:a9:e0:2f:1d:76:ce:ce:28:6a: 81:79:45:fd:c9:e2:cd:c7:5c:8f:fe:d8:d5:2f:14: 8f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:55:15:E0:7F:3E:84:88:7C:E8:65:7E:39:2F:C0:B4:E7:CD:B8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42be3d9-7682-37f0-ad4a-ee6860799dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 167.126.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cf:18:8a:cb:2e:0d:c6:45:40:a8:a5:93:bd:f3:8e:aa:75: 7a:27:98:aa:f0:a4:3a:f7:e8:a7:ac:26:f0:1d:52:df:4c:68: 80:f5:8e:a8:bd:b9:39:6a:e1:84:07:7f:de:14:a5:5f:6f:15: 90:af:84:4c:22:15:96:d7:3b:2d:1d:b0:9b:48:27:95:ac:ac: 5f:4f:39:1d:5f:3d:d5:68:4a:ff:50:2d:49:27:4a:df:e0:6f: 61:2a:95:d9:5f:8f:a5:aa:b6:ce:3c:63:1c:ee:5d:b3:4a:b9: c6:9d:2c:d1:d7:07:45:10:22:ed:8e:11:b6:37:61:c1:46:c4: d3:ef:62:8d:84:25:75:64:b5:c1:dd:5f:4d:bc:5a:bc:4e:32: cf:d9:15:38:b2:78:9d:b3:e7:cd:e0:45:82:bb:32:31:36:9d: bb:66:e4:8b:2c:c5:24:fc:e1:8f:c9:02:9b:85:60:16:77:e6: aa:f4:3e:85:3d:ac:0a:af:51:a6:21:d1:8b:6d:7a:3d:db:0c: 04:d6:d7:c9:f9:61:e5:b6:dc:fe:46:12:2f:f4:19:12:0e:dd: 5d:19:2f:35:27:53:06:28:9a:07:9c:bf:8a:4c:81:0c:0a:30: 2f:09:5f:83:c1:a1:63:c5:9a:66:5f:35:3b:52:a1:27:e5:7a: 8c:1c:e4:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIAiyTnxfFuVXUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk ZmQ3NWNjNmItYzAwMy00MjNhLTg4MDgtMmZkMTMwODIwOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPE+5FkGZ889zSGpXuJFAR+z9BrSkuPd/c1V 9+5Tkom8YpTfQ1jrfhTi4rPtAZ4AOlSu1N8Rtd0SZT6/CWE6uKNFYG6SrxsMm1M0 s3heSCn/KrP1onXyrb9+wl/gkdNrkDEtmQpV1jRUFUEa6lusijUevVC7hG7ZbrUN FSFqyHQd0DzhR6AkJ4/9HbDKUJ3YHfWafGMbrL7uf1VwFO9962dr3xK0MGfNg1UT +/znKnH8hBKcZJmu+TfVYNaF+RKIhTDzdNYAs3sAGt7lxACrNyp70h6vkCXdHgCQ TFAEWsUT1NAU542p4C8dds7OKGqBeUX9yeLNx1yP/tjVLxSPbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBVFeB/PoSIfOhlfjkvwLTnzbhZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjQyYmUzZDktNzY4Mi0z N2YwLWFkNGEtZWU2ODYwNzk5ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp34wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArPGIrLLg3GRUCopZO9846qdXonmKrwpDr36KesJvAdUt9MaID1jqi9 uTlq4YQHf94UpV9vFZCvhEwiFZbXOy0dsJtIJ5WsrF9POR1fPdVoSv9QLUknSt/g b2Eqldlfj6Wqts48YxzuXbNKucadLNHXB0UQIu2OEbY3YcFGxNPvYo2EJXVktcHd X028WrxOMs/ZFTiyeJ2z583gRYK7MjE2nbtm5IssxST84Y/JApuFYBZ35qr0PoU9 rAqvUaYh0Yttej3bDATW18n5YeW23P5GEi/0GRIO3V0ZLzUnUwYomgecv4pMgQwK MC8JX4PBoWPFmmZfNTtSoSfleowc5A0= -----END CERTIFICATE-----Generated at Wed May 13 07:13:22 2026 by rpki-client