$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db8b3af0-c3ec-3d60-adca-690b32b7ebef.roa File: db8b3af0-c3ec-3d60-adca-690b32b7ebef.roa (raw, json) Hash identifier: VA8JLEHVa/tBKhu1UHl3LOCbf36bwsYN6KTuVnwP9G8= Subject key identifier: 8C:2F:D3:94:C3:CF:BA:20:F9:31:60:26:8F:E3:F9:69:04:E0:F4:F9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DE2B5D71E9B7DE66A7F6184C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db8b3af0-c3ec-3d60-adca-690b32b7ebef.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 31898 IP address blocks: 157.137.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:d7:1e:9b:7d:e6:6a:7f:61:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=50b428bf-80a1-4e0f-96bc-a5490408fbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:08:55:c6:cb:d5:0d:1b:06:77:1f:c3:63:b4: 29:9f:7f:cc:0b:a0:9f:83:e4:b8:41:03:63:1f:78: b6:56:ca:e5:26:db:57:da:27:93:23:fe:11:8a:09: 9f:af:e6:ab:94:24:5d:02:74:6b:a4:f9:cb:39:6b: 72:07:b3:22:86:2b:17:73:7b:d5:51:d9:42:1d:83: 4a:e4:e0:4b:61:77:56:c3:01:4a:0e:7d:f4:ce:bc: e2:e6:93:3c:1c:a7:4b:eb:6b:ef:ff:88:1c:36:91: 59:ed:9d:5d:e9:de:84:9c:d9:a0:a7:d2:63:8d:c7: bf:19:24:14:29:26:3f:de:4c:8a:4b:f6:32:5c:ea: 02:49:6b:44:20:f1:69:c9:08:0e:fc:bc:5e:a0:10: 10:df:2f:66:d8:d4:03:e0:e9:9d:82:b5:5d:fc:8e: 37:d9:94:b5:b1:76:58:34:f0:9a:31:eb:74:9f:c8: 62:27:f4:b4:27:71:89:66:8c:3b:36:71:ea:6b:79: 09:83:58:ed:ca:0f:ad:5f:ab:46:d4:ef:01:5e:13: f5:b2:58:fa:7b:e3:5b:e5:a4:45:36:11:84:9c:c5: 4d:e1:44:90:1d:8b:f5:be:9f:d0:64:d0:d2:3e:1e: 44:e3:30:d8:8a:af:dd:5c:d8:be:b6:e9:38:69:4e: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2F:D3:94:C3:CF:BA:20:F9:31:60:26:8F:E3:F9:69:04:E0:F4:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db8b3af0-c3ec-3d60-adca-690b32b7ebef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:41:15:0f:e6:d2:68:c2:ac:86:68:13:d9:36:bd:ba:ca:af: 4b:14:15:5d:aa:be:61:35:f1:5f:9a:e9:30:00:5c:52:ff:b7: e7:85:5c:ee:f2:cb:7b:02:8d:00:ac:9e:5f:ab:7f:0d:0b:8e: 8c:35:2c:3a:80:6e:3c:0e:16:89:b0:07:55:28:38:60:c7:40: be:32:ed:02:05:e0:46:2f:5c:16:0f:f1:aa:67:a6:a0:f5:4f: e9:65:24:ce:71:80:7e:8b:26:0c:1c:09:d4:d5:84:7d:aa:db: 5b:cf:3c:2f:f5:84:03:f2:92:c9:3a:ed:e0:71:2e:81:bb:c2: 37:60:12:e1:84:da:e3:84:f2:2a:2c:d3:2b:a5:9b:71:a3:08: da:e6:c1:8d:78:96:01:0f:59:ea:8e:24:d7:51:66:16:89:2b: 0f:85:39:38:c7:a6:0b:c1:55:5b:4d:e7:8a:60:97:db:82:84: ed:38:c2:35:07:ef:5b:91:4b:93:9e:7f:60:28:37:1c:ea:9b: 57:6e:1a:37:0b:f0:ab:c5:bc:c1:ee:b7:a1:0c:0f:10:e8:6d: 1d:3c:00:a8:4a:1f:ca:2e:24:5c:e6:63:df:0e:5c:fe:7f:07: 63:22:0d:54:b0:20:09:26:28:da:cf:ed:46:92:dc:ac:6a:1d: a4:0e:45:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itdcem33man9hhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk NTBiNDI4YmYtODBhMS00ZTBmLTk2YmMtYTU0OTA0MDhmYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQhVxsvVDRsGdx/DY7Qpn3/MC6Cfg+S4QQNj H3i2VsrlJttX2ieTI/4Rigmfr+arlCRdAnRrpPnLOWtyB7MihisXc3vVUdlCHYNK 5OBLYXdWwwFKDn30zrzi5pM8HKdL62vv/4gcNpFZ7Z1d6d6EnNmgp9Jjjce/GSQU KSY/3kyKS/YyXOoCSWtEIPFpyQgO/LxeoBAQ3y9m2NQD4OmdgrVd/I432ZS1sXZY NPCaMet0n8hiJ/S0J3GJZow7NnHqa3kJg1jtyg+tX6tG1O8BXhP1slj6e+Nb5aRF NhGEnMVN4USQHYv1vp/QZNDSPh5E4zDYiq/dXNi+tuk4aU69QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwv05TDz7og+TFgJo/j+WkE4PT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGI4YjNhZjAtYzNlYy0z ZDYwLWFkY2EtNjkwYjMyYjdlYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhBFQ/m0mjCrIZoE9k2vbrKr0sUFV2qvmE18V+a6TAAXFL/t+eFXO7y y3sCjQCsnl+rfw0Ljow1LDqAbjwOFomwB1UoOGDHQL4y7QIF4EYvXBYP8apnpqD1 T+llJM5xgH6LJgwcCdTVhH2q21vPPC/1hAPyksk67eBxLoG7wjdgEuGE2uOE8ios 0yulm3GjCNrmwY14lgEPWeqOJNdRZhaJKw+FOTjHpgvBVVtN54pgl9uChO04wjUH 71uRS5Oef2AoNxzqm1duGjcL8KvFvMHut6EMDxDobR08AKhKH8ouJFzmY98OXP5/ B2MiDVSwIAkmKNrP7UaS3KxqHaQORQo= -----END CERTIFICATE-----Generated at Thu May 28 17:03:05 2026 by rpki-client