$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f614de2-83e7-3369-91b1-24ce386cf8e5.roa File: 8f614de2-83e7-3369-91b1-24ce386cf8e5.roa (raw, json) Hash identifier: /z4cLCVq7gkhOtbCoTy0dd+rd11solbawjL1QcZaSdw= Subject key identifier: B1:CA:AE:14:02:25:27:2B:B1:45:2A:FA:EF:F0:83:1C:54:AD:DF:00 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DE150AAD35821A8354B021D64 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f614de2-83e7-3369-91b1-24ce386cf8e5.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 54253 IP address blocks: 168.107.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:aa:d3:58:21:a8:35:4b:02:1d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=ef2ee1fc-72e6-4a8a-8238-3bdbc5714544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:4c:2d:71:aa:9e:f8:ba:ca:62:82:12:0e: f1:19:64:ee:62:2d:ea:6f:f2:94:79:18:59:97:aa: 9f:4b:c3:fb:5e:5b:e5:17:ea:e0:e0:79:55:df:ed: b5:44:cb:16:12:ff:86:25:c0:f2:d1:e1:c4:77:84: 34:7d:12:b7:77:b4:bb:fa:42:2f:a0:70:a3:f6:ba: 63:0a:ac:66:6e:7d:79:2d:ca:85:58:cd:14:e1:7a: 9e:50:33:50:ad:1c:01:e6:79:8a:f4:98:2c:8e:dd: 9a:06:af:f1:81:3b:0b:de:e6:c9:b9:bf:33:b0:b2: 29:e9:dd:30:93:c8:9f:b4:fe:b9:65:8f:e0:b3:1f: a0:0f:28:b2:87:6c:56:08:62:d6:c0:46:98:ec:28: 99:eb:5d:d1:72:e6:82:87:dd:aa:52:b3:77:3d:ae: 93:a4:e8:c6:b8:8b:46:96:09:3b:b0:3c:93:da:18: 9e:87:dc:50:37:c1:12:50:04:88:6a:6f:2c:7b:e6: 59:84:0d:d8:9f:b0:79:17:fe:96:f6:e1:cb:6f:cd: 39:70:04:65:1b:94:3e:73:0d:4e:47:e5:fb:31:6d: f9:39:5f:17:80:ad:71:d3:76:4a:26:27:45:9f:90: af:ca:1f:c6:3c:92:72:4e:9e:32:95:f5:f6:9a:a8: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CA:AE:14:02:25:27:2B:B1:45:2A:FA:EF:F0:83:1C:54:AD:DF:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f614de2-83e7-3369-91b1-24ce386cf8e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8a:2b:50:c7:1a:61:e5:38:14:dc:89:80:1a:d6:f6:65:ad: fb:c5:b8:82:a1:e4:84:c9:bd:c9:96:15:73:e4:a4:93:67:1a: f5:39:24:cc:e2:0a:91:da:41:91:9c:55:1d:c4:97:4a:a8:7a: 44:59:34:3a:da:53:e4:d0:ef:d9:a2:0c:03:5d:a9:f8:4f:f6: 7f:0d:a5:e8:c4:b4:6a:16:04:61:df:19:bc:1c:20:e0:4b:30: 72:a0:75:bb:ab:14:80:2a:8e:86:a1:5d:0c:e6:90:c0:c9:1e: 93:37:28:38:22:bf:74:94:d9:68:39:58:12:d1:a3:73:4b:cd: 33:59:60:24:30:cb:70:77:da:04:26:f7:d8:7f:e5:59:75:24: d0:2a:cb:9e:72:af:ba:60:b2:fa:91:80:b1:ab:8f:50:fa:95: cc:a7:21:17:f8:4f:21:3a:f2:f9:e5:d8:26:43:3c:04:54:54: 87:ff:96:fa:64:8a:88:9e:24:34:45:5c:83:81:8a:bd:8d:57: 5f:74:79:48:c4:24:27:25:e2:ad:6c:a5:30:fb:80:1c:1d:17: f3:16:dc:b7:82:61:fc:e5:5d:31:39:80:31:29:62:6e:b1:e0: 9b:36:18:60:f6:ed:6c:74:08:0f:2a:32:47:b0:b5:bd:14:8e: ad:3e:9a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKrTWCGoNUsCHWQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZWYyZWUxZmMtNzJlNi00YThhLTgyMzgtM2JkYmM1NzE0NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIBMLXGqnvi6ymKCEg7xGWTuYi3qb/KUeRhZ l6qfS8P7XlvlF+rg4HlV3+21RMsWEv+GJcDy0eHEd4Q0fRK3d7S7+kIvoHCj9rpj Cqxmbn15LcqFWM0U4XqeUDNQrRwB5nmK9Jgsjt2aBq/xgTsL3ubJub8zsLIp6d0w k8iftP65ZY/gsx+gDyiyh2xWCGLWwEaY7CiZ613RcuaCh92qUrN3Pa6TpOjGuItG lgk7sDyT2hieh9xQN8ESUASIam8se+ZZhA3Yn7B5F/6W9uHLb805cARlG5Q+cw1O R+X7MW35OV8XgK1x03ZKJidFn5Cvyh/GPJJyTp4ylfX2mqi6DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHKrhQCJScrsUUq+u/wgxxUrd8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGY2MTRkZTItODNlNy0z MzY5LTkxYjEtMjRjZTM4NmNmOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqGuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6KK1DHGmHlOBTciYAa1vZlrfvFuIKh5ITJvcmWFXPkpJNnGvU5JMzi CpHaQZGcVR3El0qoekRZNDraU+TQ79miDANdqfhP9n8NpejEtGoWBGHfGbwcIOBL MHKgdburFIAqjoahXQzmkMDJHpM3KDgiv3SU2Wg5WBLRo3NLzTNZYCQwy3B32gQm 99h/5Vl1JNAqy55yr7pgsvqRgLGrj1D6lcynIRf4TyE68vnl2CZDPARUVIf/lvpk ioieJDRFXIOBir2NV190eUjEJCcl4q1spTD7gBwdF/MW3LeCYfzlXTE5gDEpYm6x 4Js2GGD27Wx0CA8qMkewtb0Ujq0+mpk= -----END CERTIFICATE-----Generated at Thu May 28 17:05:16 2026 by rpki-client