$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3dcf896-7b30-3585-ae02-81a5da6b3d6e.roa File: c3dcf896-7b30-3585-ae02-81a5da6b3d6e.roa (raw, json) Hash identifier: cXX2WNBbtEzqVNHaTWWPdDmBfTMksVXfLRkwH/Mjo/c= Subject key identifier: A8:E8:51:35:D8:20:2B:49:2B:2B:A6:DF:EB:9E:97:F3:EA:3C:D1:5D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6EDA9057224A875BF729B900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3dcf896-7b30-3585-ae02-81a5da6b3d6e.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 150.136.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:90:57:22:4a:87:5b:f7:29:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=15ea2318-b72e-4f19-9200-603afe522512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a3:8c:e2:02:7c:41:3b:04:68:0f:36:98:40: 57:ef:8c:f9:b3:6c:ab:a8:89:d4:8d:42:5f:fb:f1: 19:e6:3f:93:06:ec:71:c3:e9:46:87:0e:32:f6:ea: f7:4f:dd:c9:62:e3:53:1c:c6:5e:0b:a4:0f:09:44: bd:6a:70:d3:68:b9:db:fe:56:46:31:3f:c5:92:65: 93:41:31:04:10:5a:d9:ba:cc:61:26:8b:d1:15:af: 36:4a:1c:51:9d:33:61:9e:9d:72:b7:d9:4b:e1:65: b3:09:3d:e6:45:d4:bb:ac:80:b4:d6:fc:4b:82:58: 58:f8:46:ab:f3:01:0d:b0:0d:57:19:da:6e:c7:20: 62:ab:b4:2f:81:b3:4e:3c:08:62:42:c6:49:02:39: 69:0b:78:45:fe:0b:b1:89:2f:7b:8a:59:bc:6a:ed: 04:6e:1a:f0:2c:32:c7:0d:5c:a2:92:c2:b8:1c:f0: 4b:80:31:f0:13:ce:20:d4:7b:d3:e2:bf:13:ec:2f: 49:64:46:a1:5c:92:7d:f6:5a:c9:bb:23:d6:93:18: e7:44:f2:82:e8:f2:04:f9:91:49:e9:b6:90:0d:fe: 25:75:98:fc:c3:b7:19:71:b2:01:93:3b:44:84:2e: f4:88:ae:12:db:72:d2:2d:35:2a:bb:16:3e:af:1b: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E8:51:35:D8:20:2B:49:2B:2B:A6:DF:EB:9E:97:F3:EA:3C:D1:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3dcf896-7b30-3585-ae02-81a5da6b3d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 150.136.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fb:f2:27:b3:67:81:f6:e3:5a:42:c6:f3:54:19:d1:bf:d1: 8a:c9:c3:f5:7b:fd:d5:53:c9:2c:52:2b:5a:11:43:eb:4c:bb: 53:a4:6c:66:be:94:0f:ce:37:f5:85:d4:df:b4:ba:31:8a:e1: 64:8f:b1:ff:1a:80:da:c5:2d:35:c9:89:e0:0f:4b:41:7b:b4: 19:24:76:10:69:67:b0:0c:73:18:d3:b4:27:f6:24:b5:65:ad: 5f:4b:27:a5:89:14:9d:53:76:51:2a:fd:85:b1:33:59:e9:28: 7e:57:43:c1:0c:bf:be:5d:4d:db:66:90:77:42:e3:1f:47:4c: 91:64:93:31:e2:17:a2:7f:45:b8:2d:e9:f0:75:be:92:51:23: a8:a6:a4:f0:bc:95:2a:b9:1c:b6:54:2d:ee:03:57:96:c2:b3: 46:cc:dd:f2:85:a1:21:d2:2c:d0:dc:58:1c:70:0a:e0:c5:d3: 99:b5:db:14:c3:10:df:64:78:7f:cc:b4:90:ef:1c:18:2a:ec: 89:a3:85:62:1f:76:f3:8d:5b:84:0e:31:ab:72:a9:d9:4c:a9: fe:57:07:54:6e:c4:50:b0:13:8a:30:38:fd:1a:9e:ed:94:a5: 65:90:2b:77:08:94:23:16:15:be:f8:de:4f:64:0e:d7:a2:47: 60:4d:4d:87 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1u2pBXIkqHW/cpuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MTVlYTIzMTgtYjcyZS00ZjE5LTkyMDAtNjAzYWZlNTIyNTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKOM4gJ8QTsEaA82mEBX74z5s2yrqInUjUJf +/EZ5j+TBuxxw+lGhw4y9ur3T93JYuNTHMZeC6QPCUS9anDTaLnb/lZGMT/FkmWT QTEEEFrZusxhJovRFa82ShxRnTNhnp1yt9lL4WWzCT3mRdS7rIC01vxLglhY+Ear 8wENsA1XGdpuxyBiq7QvgbNOPAhiQsZJAjlpC3hF/guxiS97ilm8au0EbhrwLDLH DVyiksK4HPBLgDHwE84g1HvT4r8T7C9JZEahXJJ99lrJuyPWkxjnRPKC6PIE+ZFJ 6baQDf4ldZj8w7cZcbIBkztEhC70iK4S23LSLTUquxY+rxsYSQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKjoUTXYICtJKyum3+uel/PqPNFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzNkY2Y4OTYtN2IzMC0z NTg1LWFlMDItODFhNWRhNmIzZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlogwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXfvyJ7NngfbjWkLG81QZ0b/RisnD9Xv91VPJLFIrWhFD60y7U6RsZr6U D8439YXU37S6MYrhZI+x/xqA2sUtNcmJ4A9LQXu0GSR2EGlnsAxzGNO0J/YktWWt X0snpYkUnVN2USr9hbEzWekofldDwQy/vl1N22aQd0LjH0dMkWSTMeIXon9FuC3p 8HW+klEjqKak8LyVKrkctlQt7gNXlsKzRszd8oWhIdIs0NxYHHAK4MXTmbXbFMMQ 32R4f8y0kO8cGCrsiaOFYh92841bhA4xq3Kp2Uyp/lcHVG7EULATijA4/Rqe7ZSl ZZArdwiUIxYVvvjeT2QO16JHYE1Nhw== -----END CERTIFICATE-----Generated at Mon Apr 13 14:41:08 2026 by rpki-client