$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa File: 9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa (raw, json) Hash identifier: kPw4Q4O6CBEDzJDz3ASsjidfllG2mbE9MhgVA8uvqUA= Subject key identifier: B0:48:F1:5B:C3:9D:7C:8A:B1:88:EE:E9:01:2E:A6:36:BD:09:FE:42 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6EDA8F0AC9B7EBE325CF2600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 168.138.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:8f:0a:c9:b7:eb:e3:25:cf:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=94c91b45-d714-4b35-bbf2-f06c50202e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:28:e0:81:65:7d:b3:4a:4e:94:c7:be:b6:b1: 38:96:07:47:91:e8:ed:b8:db:7b:2b:48:b4:ec:7b: 22:8f:0c:ab:13:41:fb:98:ef:34:5b:0a:03:42:a1: 4a:00:53:52:32:40:7d:74:37:2e:f9:f3:8c:d1:6b: 4f:18:22:c9:5b:e5:63:3c:42:64:ff:4c:0f:20:16: 9c:d2:92:b5:f2:a3:cb:71:e4:48:ae:aa:76:3e:49: e0:a1:59:6e:fc:86:f4:cb:12:07:f1:0a:5a:bc:65: c2:66:46:c6:e8:cc:be:0d:32:0b:51:86:72:94:6b: b0:41:c8:28:9b:a0:53:22:4e:1f:41:60:e0:1a:c8: 86:f6:20:87:1e:f8:a2:2c:ab:d6:32:5a:14:b5:28: fd:9d:f0:a2:90:1f:b0:01:f5:c1:14:ad:8c:15:f9: bd:7c:46:2c:88:75:55:a6:10:e7:fd:f8:60:26:db: 9b:0e:a7:26:27:66:dc:b6:33:37:ca:f2:a3:5b:c0: 7b:13:d8:2f:90:b0:2e:1c:bf:11:ae:19:90:1d:48: c1:6f:93:3c:77:c5:9a:4e:73:0e:22:86:20:87:8e: 53:26:7d:5e:fc:48:a3:2e:ea:bd:61:c2:50:1a:f5: 8b:d1:d2:2f:b5:60:0e:97:8c:53:0f:f7:2f:36:d0: 40:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:48:F1:5B:C3:9D:7C:8A:B1:88:EE:E9:01:2E:A6:36:BD:09:FE:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:cb:48:f4:93:3c:de:20:67:ae:74:37:be:89:ae:a2:c3:c4: c6:de:0c:19:d8:38:ef:50:9e:e3:d5:e1:15:dc:fd:a9:59:1d: 9f:87:5e:f0:60:2b:22:10:e2:b1:8a:b1:a8:d2:bf:11:59:00: 0b:99:30:b9:e8:e8:7c:0c:51:cf:6d:27:33:4b:d9:e2:1f:f5: 63:ec:3f:79:85:cc:60:68:ac:02:4c:aa:43:e2:ec:92:89:e2: 33:bf:a9:a6:71:27:d5:dc:57:30:26:a7:fd:73:85:fd:df:06: 7a:24:f0:06:03:db:7a:fb:7c:d5:44:97:38:b5:4d:ba:ef:4b: 9b:48:02:c3:95:94:fd:20:68:33:73:a8:ba:60:47:8b:0c:ed: be:ef:39:8e:99:9e:9d:f4:56:ae:fc:b0:69:73:83:08:05:90: e5:51:5f:43:2f:a1:79:fc:66:6d:1f:8c:a0:a7:13:03:14:24: a8:01:db:c4:a6:47:b1:e6:79:25:c2:e0:c6:05:89:1e:70:ee: a6:0a:aa:a8:05:19:0f:e0:20:13:30:0e:d0:95:3b:ee:fa:78: 01:19:dc:16:2e:b8:27:e8:99:b3:e3:80:1c:82:83:a1:29:1c: 2a:76:a8:59:90:ab:4c:c1:9d:69:35:b6:96:89:bc:3e:b6:6c: a0:41:f8:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2o8Kybfr4yXPJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk OTRjOTFiNDUtZDcxNC00YjM1LWJiZjItZjA2YzUwMjAyZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCjggWV9s0pOlMe+trE4lgdHkejtuNt7K0i0 7HsijwyrE0H7mO80WwoDQqFKAFNSMkB9dDcu+fOM0WtPGCLJW+VjPEJk/0wPIBac 0pK18qPLceRIrqp2PkngoVlu/Ib0yxIH8QpavGXCZkbG6My+DTILUYZylGuwQcgo m6BTIk4fQWDgGsiG9iCHHviiLKvWMloUtSj9nfCikB+wAfXBFK2MFfm9fEYsiHVV phDn/fhgJtubDqcmJ2bctjM3yvKjW8B7E9gvkLAuHL8RrhmQHUjBb5M8d8WaTnMO IoYgh45TJn1e/EijLuq9YcJQGvWL0dIvtWAOl4xTD/cvNtBAcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBI8VvDnXyKsYju6QEupja9Cf5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWViN2I4ZTEtNDFjYi0z ZmJlLTg2MzktZjE2OWQ0NjZiYzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnLSPSTPN4gZ650N76JrqLDxMbeDBnYOO9QnuPV4RXc/alZHZ+HXvBg KyIQ4rGKsajSvxFZAAuZMLno6HwMUc9tJzNL2eIf9WPsP3mFzGBorAJMqkPi7JKJ 4jO/qaZxJ9XcVzAmp/1zhf3fBnok8AYD23r7fNVElzi1TbrvS5tIAsOVlP0gaDNz qLpgR4sM7b7vOY6Znp30Vq78sGlzgwgFkOVRX0MvoXn8Zm0fjKCnEwMUJKgB28Sm R7HmeSXC4MYFiR5w7qYKqqgFGQ/gIBMwDtCVO+76eAEZ3BYuuCfombPjgByCg6Ep HCp2qFmQq0zBnWk1tpaJvD62bKBB+Gw= -----END CERTIFICATE-----Generated at Mon Apr 13 14:39:42 2026 by rpki-client