$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa File: cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa (raw, json) Hash identifier: GsZOJ31OLDhUES2PadPrdc/WrO2JTkm+8UGkeXIH7EY= Subject key identifier: 0B:B8:38:79:8B:5D:3E:05:29:8B:98:3F:8A:B6:E8:6E:D9:C8:9A:E7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D5F7FAB70BDB69EC64B1E1AE0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 46558 IP address blocks: 136.248.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:ab:70:bd:b6:9e:c6:4b:1e:1a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=b4452587-f633-43ee-88d2-e2c3de57ed57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:f3:ed:69:98:fd:b2:98:a7:33:a9:ce:aa: 6d:35:37:d2:3f:23:29:75:19:9b:29:ab:15:39:52: d0:bc:d3:ba:f2:87:67:76:50:b0:b8:d3:c6:ad:c1: 78:d2:5f:0e:48:bc:d0:be:0c:03:d0:6f:43:8a:0c: d5:0c:c8:24:66:ce:ab:b7:65:70:1f:9f:12:05:ce: dc:c9:53:78:50:86:80:e4:b8:8a:2f:10:f6:ba:5d: 96:a8:8e:fd:37:e7:69:0f:f2:13:26:32:0f:5d:68: 31:a5:2e:bd:43:27:49:32:e2:3c:70:99:1e:cb:6a: b9:7b:13:05:e7:98:12:80:00:c2:a0:12:80:9f:53: 76:93:ba:68:17:0e:2e:38:0b:0f:2e:31:20:cd:7b: 68:4b:50:a6:8e:3f:1f:dd:a5:05:fe:82:f9:92:39: f0:d8:ad:d9:dc:6b:3d:62:d3:a6:ff:47:96:e5:97: 04:1d:db:67:0f:4d:82:44:4a:e7:10:dc:27:70:b3: ff:54:be:e0:8c:5e:30:75:e1:33:ea:f1:ac:fd:91: dc:dd:64:6a:4c:c1:65:00:0b:85:1c:13:64:64:c4: 09:47:e8:f9:87:5b:bf:da:38:d6:87:2d:74:0a:f4: dd:6e:a6:47:fb:48:cc:ea:0c:35:7d:29:67:f5:1a: f8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B8:38:79:8B:5D:3E:05:29:8B:98:3F:8A:B6:E8:6E:D9:C8:9A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ad:6a:39:e5:38:c7:2a:67:f7:85:4b:c3:11:f6:d8:2a:88: fa:74:f7:fe:8e:c6:bc:3a:52:2b:8c:b3:a4:07:bd:68:73:9a: 96:67:e1:4f:a1:b3:29:7d:ec:c4:f2:8a:3f:4b:d8:5c:f8:58: b4:53:86:ce:63:e3:db:18:27:a4:b5:54:97:66:fa:5e:2b:b8: 3d:f0:f4:b2:a6:d2:3e:57:46:7b:4e:ed:9e:8f:e4:fa:60:5f: a2:7e:cf:3d:ce:ab:e7:3f:9a:82:2f:4e:ee:8d:13:c2:5e:db: b2:e2:d9:6e:c2:b2:e2:9d:65:b6:6d:f1:a1:cb:16:c0:97:94: 38:c1:a4:44:44:e4:06:6a:7f:28:0a:0e:3b:91:6e:29:51:10: f4:7f:a7:ce:3c:17:1f:e0:e7:6e:0a:09:e1:48:95:a8:84:b3: e7:a4:28:1e:95:cd:5e:72:34:b1:dc:03:19:39:2b:d6:9d:c4: 9b:f2:b0:1f:78:80:31:a8:5c:30:73:b2:3b:0d:b3:39:60:7f: d2:4c:00:2a:0b:25:89:3f:7d:c4:72:1d:1b:56:60:c9:19:f4: ed:62:a2:59:83:ce:dc:f7:d2:dc:94:97:b6:03:55:f4:49:e8: 36:fe:a4:c0:7d:d3:09:e8:2e:95:78:c2:25:fe:78:01:70:c5: bf:4e:8b:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff6twvbaexkseGuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk YjQ0NTI1ODctZjYzMy00M2VlLTg4ZDItZTJjM2RlNTdlZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbvz7WmY/bKYpzOpzqptNTfSPyMpdRmbKasV OVLQvNO68odndlCwuNPGrcF40l8OSLzQvgwD0G9DigzVDMgkZs6rt2VwH58SBc7c yVN4UIaA5LiKLxD2ul2WqI79N+dpD/ITJjIPXWgxpS69QydJMuI8cJkey2q5exMF 55gSgADCoBKAn1N2k7poFw4uOAsPLjEgzXtoS1Cmjj8f3aUF/oL5kjnw2K3Z3Gs9 YtOm/0eW5ZcEHdtnD02CRErnENwncLP/VL7gjF4wdeEz6vGs/ZHc3WRqTMFlAAuF HBNkZMQJR+j5h1u/2jjWhy10CvTdbqZH+0jM6gw1fSln9Rr4rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAu4OHmLXT4FKYuYP4q26G7ZyJrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2M3Y2YzOWMtYjBhYS0z N2JlLWE1YjctOTg0MmE0OTE4NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiPj/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOtajnlOMcqZ/eFS8MR9tgqiPp09/6Oxrw6UiuMs6QHvWhzmpZn4U+h syl97MTyij9L2Fz4WLRThs5j49sYJ6S1VJdm+l4ruD3w9LKm0j5XRntO7Z6P5Ppg X6J+zz3Oq+c/moIvTu6NE8Je27Li2W7CsuKdZbZt8aHLFsCXlDjBpERE5AZqfygK DjuRbilREPR/p848Fx/g524KCeFIlaiEs+ekKB6VzV5yNLHcAxk5K9adxJvysB94 gDGoXDBzsjsNszlgf9JMACoLJYk/fcRyHRtWYMkZ9O1iolmDztz30tyUl7YDVfRJ 6Db+pMB90wnoLpV4wiX+eAFwxb9Oi78= -----END CERTIFICATE-----Generated at Mon Apr 13 19:33:56 2026 by rpki-client