$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa File: dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa (raw, json) Hash identifier: QTjprMufD/lp745UQQm2CEnq0Oj99cB5SWdIaA60M0M= Subject key identifier: 4F:8C:7E:0D:E5:11:2B:5D:EC:E8:A2:49:DA:67:55:6E:30:B2:E2:99 Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584D9325681B2B84D6119EB4B8D0 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 393559 IP address blocks: 156.70.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:68:1b:2b:84:d6:11:9e:b4:b8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=78eecf75-d5a9-481e-9614-2690bf538ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4c:71:b7:35:e1:47:c8:64:b7:a5:bd:6f:26: b7:20:1a:49:a1:d6:6b:21:ef:33:b1:d4:03:00:c1: 80:d1:b4:08:6e:38:2e:96:a2:9e:f3:e0:4f:17:2b: 1f:2f:ac:00:76:6f:61:1e:bd:51:0b:ad:08:1f:e1: 39:8d:55:e6:2e:b0:c9:57:2a:90:7b:3d:5d:10:7f: 43:75:d1:d9:50:56:2c:3f:d3:9b:10:76:b8:3c:36: dc:6b:d1:68:08:5a:dd:b1:df:45:39:df:ea:21:f0: a0:b8:d1:01:55:25:57:91:72:eb:84:5a:60:eb:2a: 13:65:c8:73:5d:71:04:b0:1b:47:eb:2a:e6:21:c8: 6f:0c:02:7e:f7:6d:79:8d:32:f9:21:8d:36:d7:25: a6:a0:b6:18:2c:99:5a:db:78:50:5f:1c:13:5e:88: 7f:42:ad:81:4a:bf:d5:98:ff:88:c3:73:c6:d1:df: 34:f8:1e:3c:61:c1:8b:04:9f:bd:f1:b0:59:9f:96: e7:cc:1e:3a:74:8f:30:8e:8e:0d:53:97:5b:63:e2: 80:45:92:5a:79:63:7c:4e:f2:e6:01:67:dc:d0:e7: 0e:f3:0e:f6:a4:68:3d:32:cb:5e:6b:cc:47:a6:db: 6b:b0:00:23:1a:47:bc:b2:32:3d:21:39:26:d0:c9: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8C:7E:0D:E5:11:2B:5D:EC:E8:A2:49:DA:67:55:6E:30:B2:E2:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 156.70.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:a7:24:72:de:96:e1:ff:21:1a:87:81:73:8a:57:f2:03:45: 13:ac:25:7f:31:3e:85:02:1b:c3:d7:3c:7b:75:0b:fc:f5:5c: b7:d3:fa:d0:52:18:ff:29:2e:16:b2:f8:07:7e:bd:61:93:c2: 3b:54:d7:49:80:f5:e0:a2:06:66:ee:e8:40:e9:7d:bf:46:80: 97:3c:df:ed:12:93:a8:bd:a0:37:80:5e:52:9c:dd:cb:27:7e: fe:15:55:3c:be:e7:c3:2f:57:de:8c:b9:67:1f:f8:d7:96:c6: 45:11:2e:26:26:19:56:a7:c3:14:1c:74:49:ab:83:f6:56:e1: 79:5b:a5:a7:23:4e:74:2b:38:95:d9:90:c0:ef:cb:03:9c:09: 14:1f:66:82:8a:0f:80:e7:e2:9d:7e:5f:a3:fa:26:08:44:df: ca:48:f3:e9:e4:85:57:91:03:19:bd:ce:22:40:89:60:16:eb: 8e:bf:fb:66:50:e8:12:3b:fe:c6:9d:d5:78:f4:77:fb:2f:e5: 53:1d:b6:df:7d:37:5e:8b:be:8a:0d:76:15:50:ac:71:47:39: 4e:3e:bf:b8:3a:f9:cf:97:5a:f6:05:d5:2e:be:94:43:3c:10: 6c:24:e9:4f:bc:a9:d9:be:bb:61:2a:43:f9:e3:bf:00:68:cf: 96:4f:4b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJWgbK4TWEZ60uNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NzhlZWNmNzUtZDVhOS00ODFlLTk2MTQtMjY5MGJmNTM4ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUxxtzXhR8hkt6W9bya3IBpJodZrIe8zsdQD AMGA0bQIbjgulqKe8+BPFysfL6wAdm9hHr1RC60IH+E5jVXmLrDJVyqQez1dEH9D ddHZUFYsP9ObEHa4PDbca9FoCFrdsd9FOd/qIfCguNEBVSVXkXLrhFpg6yoTZchz XXEEsBtH6yrmIchvDAJ+9215jTL5IY021yWmoLYYLJla23hQXxwTXoh/Qq2BSr/V mP+Iw3PG0d80+B48YcGLBJ+98bBZn5bnzB46dI8wjo4NU5dbY+KARZJaeWN8TvLm AWfc0OcO8w72pGg9Mstea8xHpttrsAAjGke8sjI9ITkm0MngSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+Mfg3lEStd7OiiSdpnVW4wsuKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvZGZmZTAzYWUtZDFhMC0z MGQ4LWI5NTktNGEwOGU2ZjQ2ZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnEZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANGnJHLeluH/IRqHgXOKV/IDRROsJX8xPoUCG8PXPHt1C/z1XLfT+tBS GP8pLhay+Ad+vWGTwjtU10mA9eCiBmbu6EDpfb9GgJc83+0Sk6i9oDeAXlKc3csn fv4VVTy+58MvV96MuWcf+NeWxkURLiYmGVanwxQcdEmrg/ZW4XlbpacjTnQrOJXZ kMDvywOcCRQfZoKKD4Dn4p1+X6P6JghE38pI8+nkhVeRAxm9ziJAiWAW646/+2ZQ 6BI7/sad1Xj0d/sv5VMdtt99N16LvooNdhVQrHFHOU4+v7g6+c+XWvYF1S6+lEM8 EGwk6U+8qdm+u2EqQ/njvwBoz5ZPS4o= -----END CERTIFICATE-----Generated at Wed May 6 02:57:06 2026 by rpki-client