$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd44df42-3f54-37f6-881c-e708b3079e2c.roa File: dd44df42-3f54-37f6-881c-e708b3079e2c.roa (raw, json) Hash identifier: 2+bOKe85sYLk5D1LtlmjRrgJeogz/R3ZSFD5yxflDTQ= Subject key identifier: 8E:7C:F5:3E:13:01:ED:C6:F2:9D:10:4B:24:B3:F8:2B:4A:30:6A:1A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D5F7FB27CD7DB8F6FA1F52568 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd44df42-3f54-37f6-881c-e708b3079e2c.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 46558 IP address blocks: 132.226.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:b2:7c:d7:db:8f:6f:a1:f5:25:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=183c65fa-aa98-497b-909b-6ff1c290bb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ea:3b:c3:bc:90:72:de:64:8e:2d:40:14:83: ee:cd:08:b2:ff:3d:26:62:ad:28:e6:7e:c6:54:06: 1c:5e:bd:d5:e3:e2:cb:59:71:99:af:b9:5d:e2:e2: 92:19:1a:26:b4:4b:73:df:14:f1:29:9e:f7:32:ed: 2d:a8:ab:42:e6:12:6c:98:06:c9:56:a0:cd:34:11: ad:46:3c:17:9c:3e:65:be:c7:78:1a:e4:b8:69:88: fe:43:7b:6c:49:af:01:51:e9:bd:08:ed:93:4a:8a: 48:f3:c4:41:6c:b1:a9:c5:d9:21:49:fa:60:47:71: 18:23:28:ad:5a:f7:01:59:38:6c:ef:71:88:66:0c: d1:03:7c:99:4f:9e:6a:b9:da:b4:a0:b7:51:e6:b7: 90:7a:00:1a:2a:8d:e0:3e:68:20:8c:11:e1:05:6f: a8:2c:e8:23:50:fc:62:61:ad:79:e9:84:03:80:95: 63:bc:44:a8:25:1b:f4:7e:42:47:e9:22:22:23:cb: a3:56:25:2e:18:e9:f5:65:47:b3:41:1b:d0:c1:7c: 07:47:e0:7b:7a:af:92:8b:d2:32:00:21:a8:0b:fd: b1:a6:24:c5:f2:d9:b1:e2:85:e6:88:6e:fa:3d:f5: 66:12:b9:3d:28:bb:6f:08:d7:cf:bc:f0:d0:b4:6d: cd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7C:F5:3E:13:01:ED:C6:F2:9D:10:4B:24:B3:F8:2B:4A:30:6A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd44df42-3f54-37f6-881c-e708b3079e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.226.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:7e:3c:46:8a:85:35:82:d3:1f:37:91:a6:d9:ef:c5:ff:13: 3a:40:55:f5:d0:83:bc:85:70:74:5b:df:02:a5:38:e3:6f:b1: 41:20:78:82:3c:96:6b:9f:69:f1:6e:ee:ee:01:d1:8c:6d:43: d3:49:d6:5f:db:9e:b9:30:68:e4:39:41:7c:a1:f0:04:dd:12: 6b:02:7e:24:af:14:0e:b0:ee:9b:cf:9d:8a:2e:0b:8e:1d:4f: 6a:45:80:4f:fb:d4:66:a7:bd:f4:65:67:88:dd:4f:fa:ec:4d: 70:4f:8b:60:c5:15:e1:c4:94:ee:cc:c4:43:c9:34:20:32:5e: 4a:6b:15:33:cb:0a:bc:ae:74:32:d9:fa:16:14:5d:9c:25:06: 8e:c0:11:b9:1f:28:41:dc:27:21:8c:63:d5:8c:b7:b6:e3:61: cc:42:d8:e6:af:58:ea:2d:b4:61:3f:63:19:26:33:e0:52:ba: c4:24:7f:ff:90:64:6c:ae:7a:c2:d6:77:9a:e5:b4:f6:1d:e1: 28:d6:3d:48:1f:5b:76:bf:b4:b8:81:51:ae:5f:40:3d:c8:2d: 30:53:1e:cb:29:a0:ff:1e:d0:af:5c:9e:00:e8:a5:ab:8c:77: ac:15:47:04:4e:a7:73:a1:23:d1:08:57:59:1e:5b:13:93:d7: bc:06:8d:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff7J819uPb6H1JWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk MTgzYzY1ZmEtYWE5OC00OTdiLTkwOWItNmZmMWMyOTBiYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+o7w7yQct5kji1AFIPuzQiy/z0mYq0o5n7G VAYcXr3V4+LLWXGZr7ld4uKSGRomtEtz3xTxKZ73Mu0tqKtC5hJsmAbJVqDNNBGt RjwXnD5lvsd4GuS4aYj+Q3tsSa8BUem9CO2TSopI88RBbLGpxdkhSfpgR3EYIyit WvcBWThs73GIZgzRA3yZT55qudq0oLdR5reQegAaKo3gPmggjBHhBW+oLOgjUPxi Ya156YQDgJVjvESoJRv0fkJH6SIiI8ujViUuGOn1ZUezQRvQwXwHR+B7eq+Si9Iy ACGoC/2xpiTF8tmx4oXmiG76PfVmErk9KLtvCNfPvPDQtG3N8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI589T4TAe3G8p0QSySz+CtKMGoaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGQ0NGRmNDItM2Y1NC0z N2Y2LTg4MWMtZTcwOGIzMDc5ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChOKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKh+PEaKhTWC0x83kabZ78X/EzpAVfXQg7yFcHRb3wKlOONvsUEgeII8 lmufafFu7u4B0YxtQ9NJ1l/bnrkwaOQ5QXyh8ATdEmsCfiSvFA6w7pvPnYouC44d T2pFgE/71GanvfRlZ4jdT/rsTXBPi2DFFeHElO7MxEPJNCAyXkprFTPLCryudDLZ +hYUXZwlBo7AEbkfKEHcJyGMY9WMt7bjYcxC2OavWOottGE/YxkmM+BSusQkf/+Q ZGyuesLWd5rltPYd4SjWPUgfW3a/tLiBUa5fQD3ILTBTHsspoP8e0K9cngDopauM d6wVRwROp3OhI9EIV1keWxOT17wGjUk= -----END CERTIFICATE-----Generated at Mon Apr 13 19:32:51 2026 by rpki-client