$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/869a3451-e0d8-3d5c-912a-49fc8a86910c.roa File: 869a3451-e0d8-3d5c-912a-49fc8a86910c.roa (raw, json) Hash identifier: 3bKc18DQF2oXZUDzsryndYjLMipEwUXmyxwbWHS9Aq4= Subject key identifier: 92:D9:57:21:FC:BB:F0:CF:C5:13:1E:9A:32:D4:9A:3B:F8:CB:D5:11 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6EDA8EC2B819CC072DED7280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/869a3451-e0d8-3d5c-912a-49fc8a86910c.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 132.145.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:8e:c2:b8:19:cc:07:2d:ed:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=313f5c3d-080b-4c42-b1a1-846800a720b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:af:04:06:da:87:cc:ec:5c:c1:4f:ff:ec: 37:ac:78:d4:52:98:17:52:3a:c0:9a:38:7e:40:9b: 97:e3:08:1a:37:c0:de:79:17:b5:55:d5:62:86:1c: 32:8f:c1:06:80:fe:96:25:9b:35:a4:8a:9c:4e:8f: 72:a8:52:e7:e8:c3:c2:44:38:10:36:f0:5c:50:e8: 63:1d:b5:62:74:4a:e0:78:1e:a6:e4:85:e6:37:cd: 0f:00:1d:a6:82:2b:4e:9c:bb:79:f6:28:70:9f:4a: 2a:a5:3f:8d:0a:25:67:54:88:c3:8f:75:ce:7b:49: 46:8a:73:a1:06:fe:71:9c:4d:67:90:ef:b0:d7:76: db:3f:a8:6b:cf:7d:c3:4f:8f:14:13:b2:c9:c7:f4: 41:2a:00:cd:74:e3:f6:08:f3:bf:80:7e:75:83:8e: dd:cd:6a:12:32:ff:3a:d9:90:38:02:52:23:91:e3: f2:6b:f1:af:fb:63:e9:54:9f:29:fb:e0:93:69:55: 16:34:db:43:47:5f:d4:5c:ea:67:04:fb:2c:3b:1e: 74:29:45:fd:42:9c:7a:06:37:7f:31:6a:20:13:c3: 96:92:f4:34:96:c8:29:9c:82:bc:d3:12:4a:ef:bd: 85:bc:b9:d4:84:3c:49:c1:7b:bf:44:5f:3a:bc:8c: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D9:57:21:FC:BB:F0:CF:C5:13:1E:9A:32:D4:9A:3B:F8:CB:D5:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/869a3451-e0d8-3d5c-912a-49fc8a86910c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:aa:89:fe:70:95:ed:d9:51:4d:a1:55:06:a1:8d:74:88:b8: ca:e6:33:fe:1b:24:53:41:f9:14:a3:e4:ad:72:ce:d7:d8:07: 8e:82:f9:2b:2c:1c:91:03:81:64:31:7a:81:33:8c:aa:93:af: 4f:56:dd:54:af:a4:cd:6f:2c:64:2f:04:d3:2b:88:28:a1:b9: 3e:d3:80:0d:04:65:da:81:57:42:0b:dc:2f:69:22:e1:18:5d: 26:10:3d:35:b1:31:9a:a2:2a:e3:8f:c1:c7:11:d7:9d:7f:3c: a1:81:e5:71:a1:42:91:20:e3:37:95:39:57:a4:16:08:db:ad: 33:3e:7c:c7:f2:27:79:db:78:0c:51:d8:a8:ed:4f:1b:07:62: e2:93:f4:60:a2:03:34:e5:06:b6:c4:45:08:97:75:81:6c:11: c2:cd:70:38:5e:0c:21:34:76:a8:63:96:c0:f6:c6:4e:2f:7d: af:03:d6:13:5f:60:ff:ef:b0:ce:b2:75:55:a5:35:41:14:75: 06:8f:74:45:54:2a:ba:19:0e:90:67:55:d9:dc:03:2f:9f:89: b0:5b:d2:66:5b:90:04:2f:d7:9f:8c:de:88:91:8b:93:ed:e8: 89:62:27:34:1b:45:3e:4c:36:19:55:d6:3e:bd:40:58:d4:26: c8:7e:7c:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2o7CuBnMBy3tcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MzEzZjVjM2QtMDgwYi00YzQyLWIxYTEtODQ2ODAwYTcyMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8qvBAbah8zsXMFP/+w3rHjUUpgXUjrAmjh+ QJuX4wgaN8DeeRe1VdVihhwyj8EGgP6WJZs1pIqcTo9yqFLn6MPCRDgQNvBcUOhj HbVidErgeB6m5IXmN80PAB2mgitOnLt59ihwn0oqpT+NCiVnVIjDj3XOe0lGinOh Bv5xnE1nkO+w13bbP6hrz33DT48UE7LJx/RBKgDNdOP2CPO/gH51g47dzWoSMv86 2ZA4AlIjkePya/Gv+2PpVJ8p++CTaVUWNNtDR1/UXOpnBPssOx50KUX9Qpx6Bjd/ MWogE8OWkvQ0lsgpnIK80xJK772FvLnUhDxJwXu/RF86vIx/2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLZVyH8u/DPxRMemjLUmjv4y9URMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY5YTM0NTEtZTBkOC0z ZDVjLTkxMmEtNDlmYzhhODY5MTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2qif5wle3ZUU2hVQahjXSIuMrmM/4bJFNB+RSj5K1yztfYB46C+Sss HJEDgWQxeoEzjKqTr09W3VSvpM1vLGQvBNMriCihuT7TgA0EZdqBV0IL3C9pIuEY XSYQPTWxMZqiKuOPwccR151/PKGB5XGhQpEg4zeVOVekFgjbrTM+fMfyJ3nbeAxR 2KjtTxsHYuKT9GCiAzTlBrbERQiXdYFsEcLNcDheDCE0dqhjlsD2xk4vfa8D1hNf YP/vsM6ydVWlNUEUdQaPdEVUKroZDpBnVdncAy+fibBb0mZbkAQv15+M3oiRi5Pt 6IliJzQbRT5MNhlV1j69QFjUJsh+fCY= -----END CERTIFICATE-----Generated at Mon Apr 13 14:38:09 2026 by rpki-client