$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa File: 3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa (raw, json) Hash identifier: LIwKwcZpxgYpJ4Z1zKLyeb9OZUQo9ma7Gnf4fgK5s40= Subject key identifier: 9A:13:50:53:99:75:E2:A0:45:83:9B:31:A4:99:A8:00:AF:41:04:9B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DE2B5F999181F4B24E6658300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 31898 IP address blocks: 157.137.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:f9:99:18:1f:4b:24:e6:65:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=93541909-b819-4f3c-a98a-58f494e9a945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:23:ca:95:0b:f1:84:c3:a3:eb:4d:16:9c: 0e:ac:21:66:b3:de:b3:21:56:94:53:57:d9:96:b3: 3e:4c:37:32:c1:3f:f5:c8:5b:c2:17:cf:99:16:c1: e5:36:94:37:47:a6:34:43:7f:e1:38:24:47:f4:2d: 8a:42:b1:65:af:3b:8c:6a:34:f8:75:74:22:76:31: df:7f:61:d6:0c:65:0c:5a:8c:2b:75:96:dd:47:59: b8:ba:ec:08:2c:a4:ca:3d:e2:8c:c7:96:cf:aa:43: d0:d8:af:a1:11:8a:6d:1e:c3:b2:65:0b:0c:eb:f4: 16:36:b7:ba:b7:6d:d3:af:9b:a1:06:b8:1c:93:cc: 42:f6:96:73:3c:af:93:35:34:24:0f:4b:72:4e:84: 85:d0:13:48:1e:77:1e:f4:05:6c:21:b3:52:36:ec: 8f:24:31:d1:2b:1f:21:28:f4:47:c4:80:3c:09:81: aa:6c:52:46:59:6e:c4:5d:22:4c:50:5f:91:b1:b6: cc:ba:85:d6:41:b4:01:49:07:05:0e:a1:3e:76:6f: b1:43:40:67:a7:2d:fa:5d:9b:e8:34:bb:16:28:7e: 1e:9b:29:6e:ac:b5:4f:5c:ae:55:a0:68:4c:71:de: 5f:0e:7a:da:c6:28:ad:27:7d:e3:68:4b:02:a9:e4: 24:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:13:50:53:99:75:E2:A0:45:83:9B:31:A4:99:A8:00:AF:41:04:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c5:5f:e2:53:7b:65:2d:70:e0:42:4b:61:93:d0:ff:f1:ee: 7a:94:df:ee:d0:01:4c:c4:f6:18:f4:76:4c:3f:b8:3e:40:18: a0:70:b0:00:03:93:19:1d:99:48:67:6d:5f:30:b6:6e:d2:2e: 2f:29:57:92:4f:b0:96:80:e6:14:06:24:7a:f4:30:f9:74:49: a5:02:04:0f:47:8a:91:5e:7a:af:43:b5:ef:2a:2f:67:d4:b2: 9a:41:5d:32:f5:eb:66:33:e6:13:dd:ed:2d:22:13:81:8a:8a: d5:d5:a0:9e:16:f2:3d:ca:46:96:a2:8f:61:7e:4b:f9:32:8d: 50:8f:e1:f7:cb:56:b9:91:da:09:cc:f3:e8:14:9e:a0:cf:1c: 57:b1:d5:ae:64:9c:36:27:91:0d:14:ee:62:8a:d3:56:bf:43: 8c:3b:5d:6c:57:96:3c:92:02:a0:16:81:cf:e8:14:88:8b:15: af:2f:09:e1:a8:8a:52:1c:76:f1:e4:47:11:c9:e4:5c:e4:6b: 53:e2:12:7b:aa:c0:d3:e0:de:9e:ed:bf:05:c8:d1:18:e4:d8: 40:f9:8c:a5:09:88:a3:12:5a:2d:d6:53:25:74:65:0a:3b:cb: be:4d:52:df:61:87:80:95:d7:cc:dc:ed:87:05:39:39:d7:e2: 72:83:11:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itfmZGB9LJOZlgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk OTM1NDE5MDktYjgxOS00ZjNjLWE5OGEtNThmNDk0ZTlhOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5YjypUL8YTDo+tNFpwOrCFms96zIVaUU1fZ lrM+TDcywT/1yFvCF8+ZFsHlNpQ3R6Y0Q3/hOCRH9C2KQrFlrzuMajT4dXQidjHf f2HWDGUMWowrdZbdR1m4uuwILKTKPeKMx5bPqkPQ2K+hEYptHsOyZQsM6/QWNre6 t23Tr5uhBrgck8xC9pZzPK+TNTQkD0tyToSF0BNIHnce9AVsIbNSNuyPJDHRKx8h KPRHxIA8CYGqbFJGWW7EXSJMUF+RsbbMuoXWQbQBSQcFDqE+dm+xQ0Bnpy36XZvo NLsWKH4emylurLVPXK5VoGhMcd5fDnraxiitJ33jaEsCqeQk5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoTUFOZdeKgRYObMaSZqACvQQSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzQ4OGVlM2EtM2Y0OS0z OTY1LWE5ZTAtZjllZDYzZGQxMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnYmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/FX+JTe2UtcOBCS2GT0P/x7nqU3+7QAUzE9hj0dkw/uD5AGKBwsAAD kxkdmUhnbV8wtm7SLi8pV5JPsJaA5hQGJHr0MPl0SaUCBA9HipFeeq9Dte8qL2fU sppBXTL162Yz5hPd7S0iE4GKitXVoJ4W8j3KRpaij2F+S/kyjVCP4ffLVrmR2gnM 8+gUnqDPHFex1a5knDYnkQ0U7mKK01a/Q4w7XWxXljySAqAWgc/oFIiLFa8vCeGo ilIcdvHkRxHJ5Fzka1PiEnuqwNPg3p7tvwXI0Rjk2ED5jKUJiKMSWi3WUyV0ZQo7 y75NUt9hh4CV18zc7YcFOTnX4nKDEVs= -----END CERTIFICATE-----Generated at Thu May 28 17:06:07 2026 by rpki-client