$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b3bdf967-f78a-3a97-bff2-107ae125eade.roa File: b3bdf967-f78a-3a97-bff2-107ae125eade.roa (raw, json) Hash identifier: uOUFd42c2JH4ZVpHtCKHXCN8ys5lem8XiHU09QUSpdI= Subject key identifier: E2:53:81:F6:EA:E8:0B:72:42:28:68:4B:3D:7C:AF:C8:59:3C:3A:76 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EAA518B61B37A9E64894282C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b3bdf967-f78a-3a97-bff2-107ae125eade.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 31898 IP address blocks: 147.5.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:8b:61:b3:7a:9e:64:89:42:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=a582da90-0a96-4c49-bd0d-f20c9ca909df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:7e:d7:b0:d6:b3:1c:94:55:e7:2f:b8:65: d1:53:61:fd:e0:7b:d7:85:f0:a2:64:9d:e9:82:09: 1a:ba:70:27:4a:d7:fe:b5:9d:9a:9a:3f:5d:a4:5c: 4d:ad:ba:2d:92:6a:1b:52:54:d6:4f:72:01:0d:1f: 71:fc:73:b6:2d:e6:6d:c4:73:b6:3c:c3:0b:b2:d6: fd:a6:b7:11:89:ec:15:20:52:24:bf:2a:14:b5:92: 29:67:b3:69:f5:76:d7:1d:60:a1:15:9b:8c:6e:58: 1b:f0:3c:77:80:8b:37:7b:e3:28:80:d0:68:b6:c0: 57:b1:34:a9:a1:aa:ed:83:0d:1a:58:3a:b1:46:f3: a3:9d:93:10:63:4d:d9:8b:55:d7:46:bd:6a:d3:8e: 99:a2:86:37:87:6d:5a:30:58:07:95:56:22:ee:28: 4d:78:49:e9:05:2c:54:eb:57:0b:f2:13:53:4f:21: d7:41:fd:33:39:33:d6:e5:5d:16:eb:78:58:d4:11: 95:b6:65:ab:01:94:15:dd:5e:0f:88:af:c9:ba:b6: e0:a5:2e:3f:a1:63:a5:7b:41:78:84:eb:de:f1:b3: 2b:b1:f8:75:66:09:41:54:59:32:30:3c:2b:7c:e5: 9e:30:f8:e3:83:2e:a0:54:42:43:9f:a0:c0:2c:f3: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:53:81:F6:EA:E8:0B:72:42:28:68:4B:3D:7C:AF:C8:59:3C:3A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b3bdf967-f78a-3a97-bff2-107ae125eade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.5.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b1:3d:cb:42:1d:37:48:bc:0b:03:a5:66:a6:f9:61:80:7c: 25:7d:1c:7c:70:b3:23:ea:2e:7e:df:f7:6e:2c:c0:b5:50:00: c1:9c:e2:1f:32:09:7d:58:c6:cc:e5:c8:04:f5:6f:1e:10:e4: 24:91:44:cd:0f:28:be:eb:ed:a2:fb:58:bb:10:06:7c:96:2e: 6e:c2:7d:8e:98:bf:ba:a0:41:b8:13:e0:2b:df:4b:b7:82:80: cd:26:5b:18:5d:d7:63:b3:df:a3:e8:8b:bf:a8:0d:ab:49:cb: 97:59:86:29:29:51:67:01:3b:84:b8:d7:6f:1c:51:ae:1e:6b: 21:a5:dd:88:d8:e9:3a:ee:22:cc:41:93:ed:63:15:c5:67:81: 74:de:46:9a:60:f0:33:68:48:f3:fb:41:b4:eb:06:35:ac:74: 3c:61:f7:b4:1b:c3:82:82:e0:fb:16:57:40:d2:30:0c:59:6d: ac:b9:6e:8c:07:8c:31:bf:88:2c:e5:f8:54:9c:f6:96:7c:58: 20:e4:ef:18:5a:0d:c3:69:7f:3a:b6:88:2f:8d:2c:ae:2a:c1: f8:2b:d0:94:96:05:47:b6:3b:47:68:62:af:e5:ae:72:ae:3d: 59:0c:b1:fa:52:c9:7d:f6:9a:42:43:65:27:bd:76:55:64:71: 05:46:a0:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUYths3qeZIlCgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk YTU4MmRhOTAtMGE5Ni00YzQ5LWJkMGQtZjIwYzljYTkwOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWB+17DWsxyUVecvuGXRU2H94HvXhfCiZJ3p ggkaunAnStf+tZ2amj9dpFxNrbotkmobUlTWT3IBDR9x/HO2LeZtxHO2PMMLstb9 prcRiewVIFIkvyoUtZIpZ7Np9XbXHWChFZuMblgb8Dx3gIs3e+MogNBotsBXsTSp oartgw0aWDqxRvOjnZMQY03Zi1XXRr1q046ZooY3h21aMFgHlVYi7ihNeEnpBSxU 61cL8hNTTyHXQf0zOTPW5V0W63hY1BGVtmWrAZQV3V4PiK/JurbgpS4/oWOle0F4 hOve8bMrsfh1ZglBVFkyMDwrfOWeMPjjgy6gVEJDn6DALPP0DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJTgfbq6AtyQihoSz18r8hZPDp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjNiZGY5NjctZjc4YS0z YTk3LWJmZjItMTA3YWUxMjVlYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkwUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuxPctCHTdIvAsDpWam+WGAfCV9HHxwsyPqLn7f924swLVQAMGc4h8y CX1YxszlyAT1bx4Q5CSRRM0PKL7r7aL7WLsQBnyWLm7CfY6Yv7qgQbgT4CvfS7eC gM0mWxhd12Oz36Poi7+oDatJy5dZhikpUWcBO4S4128cUa4eayGl3YjY6TruIsxB k+1jFcVngXTeRppg8DNoSPP7QbTrBjWsdDxh97Qbw4KC4PsWV0DSMAxZbay5bowH jDG/iCzl+FSc9pZ8WCDk7xhaDcNpfzq2iC+NLK4qwfgr0JSWBUe2O0doYq/lrnKu PVkMsfpSyX32mkJDZSe9dlVkcQVGoD8= -----END CERTIFICATE-----Generated at Thu Aug 27 09:39:41 2026 by rpki-client