$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eb28e405-1d03-3705-8b7c-db9aa75025c1.roa File: eb28e405-1d03-3705-8b7c-db9aa75025c1.roa (raw, json) Hash identifier: GtYm7lOmmsHnLjcxAWMLSkUj7ufM649UyIJAd4n48qo= Subject key identifier: 40:29:E9:EB:0F:A0:D4:48:9C:1B:E9:83:30:55:66:C7:8B:34:50:AF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DE2B5E35FC907F03988DAB880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eb28e405-1d03-3705-8b7c-db9aa75025c1.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 31898 IP address blocks: 157.137.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:e3:5f:c9:07:f0:39:88:da:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=b589cf75-8013-4d4f-838c-c040faa28173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:ef:2a:98:09:f5:9c:11:ed:2f:66:04:39: 73:9f:72:69:ef:12:f8:a4:9a:76:ec:c0:99:43:7f: 08:3f:e2:c1:3a:e0:77:b0:88:28:bb:9d:cd:47:ee: 54:39:59:97:b7:47:dd:52:12:28:54:e5:b5:fd:60: 89:42:60:91:5d:0a:61:ed:3d:4b:b7:ff:ea:02:59: fb:c6:19:4e:45:a7:d2:eb:1b:09:e4:21:7e:e7:ba: 29:58:e7:ef:0a:0a:ea:ae:0f:a6:08:f5:fe:fd:49: be:44:25:d5:59:25:16:46:04:20:ae:21:7f:e3:3b: 88:4b:40:f9:34:06:ab:cf:c8:c8:ce:44:c8:2f:35: c2:e9:1f:5b:7b:65:b2:1c:e0:2d:19:77:ae:d8:29: 6c:9f:bf:e7:23:21:af:db:56:b6:f2:68:8b:9a:37: 50:78:fe:5c:e4:ed:d0:54:8b:6d:18:1f:1f:19:1a: 23:46:71:ce:bb:ac:dd:77:ab:a1:e2:8e:70:08:64: 33:1f:53:83:55:e9:47:ee:ab:3b:1c:84:54:af:5b: 7c:13:7b:dd:0b:0e:cd:29:40:91:bb:cb:fd:30:21: d7:49:92:3f:ed:7b:92:74:c0:69:ac:42:e0:9e:4a: ee:7c:39:0f:85:09:40:ff:e2:34:df:ac:d3:a4:2c: fd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:29:E9:EB:0F:A0:D4:48:9C:1B:E9:83:30:55:66:C7:8B:34:50:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eb28e405-1d03-3705-8b7c-db9aa75025c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:98:c8:08:81:74:11:71:00:36:33:02:6f:58:73:a7:49:11: 51:9b:f4:11:e9:0c:e1:a2:70:2a:44:85:17:a7:cb:35:a8:15: 93:61:4b:df:f0:80:b4:88:66:07:73:76:57:b5:c1:9a:3f:af: fe:c8:5e:10:f3:62:bd:91:0e:5e:7c:06:e3:86:77:5c:30:8b: 0d:72:f9:50:29:a9:c4:95:b9:aa:ad:03:3c:c5:b1:eb:17:4d: 00:e5:1c:c4:c0:7f:ab:64:75:68:28:be:b9:c5:57:42:04:58: 40:ad:af:e2:bf:26:56:cc:77:25:a8:f9:40:0d:a8:04:3a:5d: 20:af:9e:aa:80:ec:50:b8:bc:90:97:e5:31:7b:57:5d:c5:6c: b7:01:9b:c0:cb:78:99:93:69:c9:f4:81:14:4d:f4:f0:4e:1e: c2:38:a7:c0:b3:e5:0d:f6:ae:67:da:6f:85:59:f7:14:fe:a9: 1e:19:32:15:51:3c:86:67:25:0b:ea:cb:7a:d6:2f:3e:dd:14: d5:16:62:c1:90:7b:55:50:98:79:5c:10:1a:6b:0c:31:00:04: ab:7e:99:b1:a8:16:0c:90:90:54:58:e0:d4:13:5a:9f:be:44: ec:b2:5b:86:63:d2:f4:56:90:33:66:57:f4:59:10:bc:c8:bf: 11:60:47:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3iteNfyQfwOYjauIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk YjU4OWNmNzUtODAxMy00ZDRmLTgzOGMtYzA0MGZhYTI4MTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhjvKpgJ9ZwR7S9mBDlzn3Jp7xL4pJp27MCZ Q38IP+LBOuB3sIgou53NR+5UOVmXt0fdUhIoVOW1/WCJQmCRXQph7T1Lt//qAln7 xhlORafS6xsJ5CF+57opWOfvCgrqrg+mCPX+/Um+RCXVWSUWRgQgriF/4zuIS0D5 NAarz8jIzkTILzXC6R9be2WyHOAtGXeu2Clsn7/nIyGv21a28miLmjdQeP5c5O3Q VIttGB8fGRojRnHOu6zdd6uh4o5wCGQzH1ODVelH7qs7HIRUr1t8E3vdCw7NKUCR u8v9MCHXSZI/7XuSdMBprELgnkrufDkPhQlA/+I036zTpCz9aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAp6esPoNRInBvpgzBVZseLNFCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWIyOGU0MDUtMWQwMy0z NzA1LThiN2MtZGI5YWE3NTAyNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYlqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaYyAiBdBFxADYzAm9Yc6dJEVGb9BHpDOGicCpEhRenyzWoFZNhS9/w gLSIZgdzdle1wZo/r/7IXhDzYr2RDl58BuOGd1wwiw1y+VApqcSVuaqtAzzFsesX TQDlHMTAf6tkdWgovrnFV0IEWECtr+K/JlbMdyWo+UANqAQ6XSCvnqqA7FC4vJCX 5TF7V13FbLcBm8DLeJmTacn0gRRN9PBOHsI4p8Cz5Q32rmfab4VZ9xT+qR4ZMhVR PIZnJQvqy3rWLz7dFNUWYsGQe1VQmHlcEBprDDEABKt+mbGoFgyQkFRY4NQTWp++ ROyyW4Zj0vRWkDNmV/RZELzIvxFgRwg= -----END CERTIFICATE-----Generated at Thu May 28 17:05:28 2026 by rpki-client