$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f81b5b09-ba5c-36a6-a17c-dd95da481955.roa File: f81b5b09-ba5c-36a6-a17c-dd95da481955.roa (raw, json) Hash identifier: GNHhSj66AwzrHRguCyMx1Af0xWIlKormihdkDyKk+w8= Subject key identifier: 38:F4:7E:D6:1F:7B:F5:67:9E:A0:0F:33:5F:B9:8E:67:5D:23:13:9E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF545742765764AC110C640 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f81b5b09-ba5c-36a6-a17c-dd95da481955.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 132.145.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:45:74:27:65:76:4a:c1:10:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=7b0279a8-08a2-4684-bef4-12668eba423b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:a0:9e:56:28:65:d0:8c:f5:0d:45:45:80: 7d:e6:30:8e:f0:d5:c1:5e:9c:3d:ae:35:8d:b5:57: 85:78:3f:3b:2c:ea:a4:b1:77:b3:a4:2f:32:6e:c5: f5:6d:87:e2:51:1b:35:07:27:31:95:8b:d6:80:59: f0:0c:ba:67:15:95:67:59:d2:15:a8:dc:8d:b5:35: b1:ec:56:d5:f8:a6:fe:d7:a0:c0:3d:19:7b:0e:8f: b7:bf:67:9a:d2:07:a2:0e:51:65:3b:ad:01:93:f2: a1:76:54:1c:95:72:1a:66:8e:af:d8:d0:ff:0a:a6: aa:5f:40:bf:ea:30:f1:78:b0:a7:89:65:ad:b4:de: 2e:46:93:ff:85:41:73:65:e7:cf:13:4f:7e:94:86: c5:20:50:aa:a2:41:d1:64:2c:31:6e:25:68:2f:3f: 25:2b:37:53:28:56:75:5e:2a:b2:8b:fc:36:4b:4f: 71:a5:7f:61:ea:9f:20:b2:e9:1c:21:e3:9c:9f:70: 4d:af:33:dc:0e:c4:d8:1b:cd:59:18:87:52:d6:b9: ef:cf:74:6d:53:c3:32:92:95:90:ea:ee:ac:e7:0d: ab:a1:8a:7f:41:c5:40:b8:c7:36:c8:cd:5f:57:5b: a8:5f:e3:0d:a0:7c:ac:12:d2:1e:df:39:c4:ca:eb: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F4:7E:D6:1F:7B:F5:67:9E:A0:0F:33:5F:B9:8E:67:5D:23:13:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f81b5b09-ba5c-36a6-a17c-dd95da481955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3b:9a:93:ec:3d:09:ec:dc:da:cb:26:07:36:5d:3b:1d:8b: cd:3b:f4:91:7c:c8:f6:2f:34:3f:2a:4f:14:cf:a5:25:96:c8: b3:d3:61:aa:ba:fa:c1:aa:5d:02:95:06:89:c7:be:19:c5:26: 2b:e6:4e:9d:25:bc:d5:a3:41:fd:83:9c:78:35:1e:fc:f0:25: 99:16:5d:e6:59:fb:41:08:54:a1:86:f7:58:8a:0c:fb:d8:62: 46:d1:d0:fa:ce:4f:bf:cb:21:6c:e2:97:62:e1:42:54:83:6d: 37:1c:74:0e:65:71:e0:d8:9c:16:7d:0e:19:e7:90:72:c8:2f: 4a:9f:0a:7b:19:da:b9:b1:92:6e:11:36:40:d9:59:3f:f3:b7: 5a:7c:44:10:21:2b:aa:57:a9:b2:11:c2:86:12:4f:78:49:20: 2c:61:c8:55:6d:8b:a0:ff:9a:7d:09:f7:00:ce:3d:ad:3e:6e: 49:b2:b2:d4:81:8c:dc:80:94:76:d5:24:e6:29:81:70:c2:69: f0:05:e8:e1:3f:5c:d2:45:5a:b9:e3:fc:7a:85:ab:65:68:a8: 9e:e7:4e:51:1e:8b:33:58:49:3e:d3:30:f2:39:86:36:4d:55: 35:a9:5f:4b:b3:6a:e7:ca:03:6e:a0:06:72:e9:ac:a3:fd:e5: fa:d4:6f:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9UV0J2V2SsEQxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk N2IwMjc5YTgtMDhhMi00Njg0LWJlZjQtMTI2NjhlYmE0MjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBOgnlYoZdCM9Q1FRYB95jCO8NXBXpw9rjWN tVeFeD87LOqksXezpC8ybsX1bYfiURs1BycxlYvWgFnwDLpnFZVnWdIVqNyNtTWx 7FbV+Kb+16DAPRl7Do+3v2ea0geiDlFlO60Bk/KhdlQclXIaZo6v2ND/CqaqX0C/ 6jDxeLCniWWttN4uRpP/hUFzZefPE09+lIbFIFCqokHRZCwxbiVoLz8lKzdTKFZ1 Xiqyi/w2S09xpX9h6p8gsukcIeOcn3BNrzPcDsTYG81ZGIdS1rnvz3RtU8MykpWQ 6u6s5w2roYp/QcVAuMc2yM1fV1uoX+MNoHysEtIe3znEyuvVLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDj0ftYfe/VnnqAPM1+5jmddIxOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjgxYjViMDktYmE1Yy0z NmE2LWExN2MtZGQ5NWRhNDgxOTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU7mpPsPQns3NrLJgc2XTsdi8079JF8yPYvND8qTxTPpSWWyLPTYaq6 +sGqXQKVBonHvhnFJivmTp0lvNWjQf2DnHg1HvzwJZkWXeZZ+0EIVKGG91iKDPvY YkbR0PrOT7/LIWzil2LhQlSDbTccdA5lceDYnBZ9DhnnkHLIL0qfCnsZ2rmxkm4R NkDZWT/zt1p8RBAhK6pXqbIRwoYST3hJICxhyFVti6D/mn0J9wDOPa0+bkmystSB jNyAlHbVJOYpgXDCafAF6OE/XNJFWrnj/HqFq2VoqJ7nTlEeizNYST7TMPI5hjZN VTWpX0uzaufKA26gBnLprKP95frUb3o= -----END CERTIFICATE-----Generated at Wed May 13 08:15:05 2026 by rpki-client