$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa File: d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa (raw, json) Hash identifier: 4qt5cI00vnNw4N2UzWWlkvvcrRddMWAhiEX8if1SJQE= Subject key identifier: 93:BE:E6:48:76:43:23:C2:03:4B:A4:74:B5:14:0D:F0:4F:33:9C:3F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6EDA5AEF583BA05ADCCE1B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 132.145.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:5a:ef:58:3b:a0:5a:dc:ce:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=6a584a99-553a-44e8-8c04-40fafccf2f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:09:bd:19:7f:d4:4c:cf:33:9d:39:02:98:7d: ec:bb:bf:8d:45:3e:f4:96:3d:53:41:b1:14:20:de: 05:d6:29:c0:cb:7c:51:34:99:87:a7:1a:5f:73:74: 83:34:f8:7c:ff:32:86:97:fd:45:b7:9f:f9:3a:3d: 9c:8e:79:07:56:22:1e:c3:a9:1b:3e:af:ce:90:8d: f3:af:88:9f:1a:2a:28:4b:81:30:99:04:ad:72:64: 46:0c:d6:31:ff:8a:13:08:cb:31:88:27:2d:22:86: d6:58:12:51:5a:fc:d3:a7:a6:b6:6a:55:66:9c:af: f6:19:45:32:2b:0a:d7:be:0f:b2:84:69:67:7d:b0: 38:0e:a2:a8:d0:b2:c3:b6:d7:d2:e4:ee:4f:a9:16: 8c:56:23:c4:5c:40:ea:b4:67:26:20:1e:fa:71:1e: cb:6a:d9:14:fb:2e:00:75:60:d0:61:12:8b:01:91: 9d:6a:82:78:ef:ce:7d:97:7e:e3:95:92:31:7a:23: 00:ae:9c:04:62:76:31:f8:54:56:a7:83:3b:61:2c: a3:7b:c3:01:78:44:05:a6:67:3e:7f:4a:4d:87:07: 45:49:b1:cf:1c:cf:6a:cb:3e:22:a2:29:c6:24:ab: fb:d8:cc:e4:48:e3:e8:de:23:8a:b3:7f:1b:c9:ae: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BE:E6:48:76:43:23:C2:03:4B:A4:74:B5:14:0D:F0:4F:33:9C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a9:ba:ae:42:71:77:70:ec:2b:ec:0a:35:43:d6:77:e0:53: 0f:a1:d1:a5:95:9c:a5:83:c6:8b:f1:35:44:56:a4:66:4e:c3: 87:de:a8:dc:6d:a9:8a:10:3a:d3:35:cd:d2:df:e8:1d:ce:2b: 10:e8:39:8f:d4:de:aa:63:4c:12:c2:4b:84:d0:ae:0a:9f:ff: c2:dd:4c:91:e9:13:12:76:ff:ca:04:6d:63:6a:d3:02:1b:c9: de:b3:41:96:cd:87:f3:ee:a6:0e:a4:60:a6:eb:06:91:c4:da: 25:c7:c4:26:0e:0d:6a:bb:29:c8:1b:c4:f5:4b:b2:03:ac:f4: 2e:f4:ea:8a:88:35:10:c2:60:5e:3f:33:8e:d7:f6:c2:b7:74: 75:9a:93:3f:23:8a:cd:53:43:97:c2:93:90:32:e1:3d:ab:da: dc:b4:af:cb:1f:2b:1c:cf:6d:e8:50:eb:07:0e:1b:5c:4a:54: a6:5e:48:79:30:5f:0c:54:a5:7d:55:fa:be:2f:a6:f2:76:f2: f0:d2:66:c6:d7:4c:8c:f3:c4:b5:b1:01:66:ab:91:7a:52:21: 1c:5e:c5:e6:91:e5:bf:93:21:5e:0b:12:a1:19:77:07:c7:cb: 72:2a:36:89:09:2e:24:99:13:72:aa:9d:b0:8a:c5:72:96:f2: 05:0c:f3:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2lrvWDugWtzOGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk NmE1ODRhOTktNTUzYS00NGU4LThjMDQtNDBmYWZjY2YyZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgm9GX/UTM8znTkCmH3su7+NRT70lj1TQbEU IN4F1inAy3xRNJmHpxpfc3SDNPh8/zKGl/1Ft5/5Oj2cjnkHViIew6kbPq/OkI3z r4ifGiooS4EwmQStcmRGDNYx/4oTCMsxiCctIobWWBJRWvzTp6a2alVmnK/2GUUy KwrXvg+yhGlnfbA4DqKo0LLDttfS5O5PqRaMViPEXEDqtGcmIB76cR7LatkU+y4A dWDQYRKLAZGdaoJ47859l37jlZIxeiMArpwEYnYx+FRWp4M7YSyje8MBeEQFpmc+ f0pNhwdFSbHPHM9qyz4ioinGJKv72MzkSOPo3iOKs38bya7F1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJO+5kh2QyPCA0ukdLUUDfBPM5w/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDMzZjg2MWYtMGY3MS0z Zjc1LThmOTEtZDc0MDZmZDIyZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhJGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmpuq5CcXdw7CvsCjVD1nfgUw+h0aWVnKWDxovxNURWpGZOw4feqNxt qYoQOtM1zdLf6B3OKxDoOY/U3qpjTBLCS4TQrgqf/8LdTJHpExJ2/8oEbWNq0wIb yd6zQZbNh/Pupg6kYKbrBpHE2iXHxCYODWq7KcgbxPVLsgOs9C706oqINRDCYF4/ M47X9sK3dHWakz8jis1TQ5fCk5Ay4T2r2ty0r8sfKxzPbehQ6wcOG1xKVKZeSHkw XwxUpX1V+r4vpvJ28vDSZsbXTIzzxLWxAWarkXpSIRxexeaR5b+TIV4LEqEZdwfH y3IqNokJLiSZE3KqnbCKxXKW8gUM87o= -----END CERTIFICATE-----Generated at Mon Apr 13 14:41:10 2026 by rpki-client