$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa File: 2e020565-2650-3731-84b4-b30e83f1cb6a.roa (raw, json) Hash identifier: G5tNHswx3CXJyXkSZV3Yel6djfdxygZ8KhM6r7Dirw4= Subject key identifier: 6E:9D:20:3F:0C:04:5E:22:AB:0E:E5:9E:DB:9B:15:25:51:33:4C:91 Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F4328584D67DFCE18F26B146B8E3D6880 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 32145 IP address blocks: 131.109.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ce:18:f2:6b:14:6b:8e:3d:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=dd3f53f4-1fbe-4951-a7a3-2c0aff3ff554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:99:f5:35:de:4d:ea:de:42:b0:8a:1e:4b:49: 1d:3e:e7:bf:62:dc:de:c1:f3:9b:73:aa:c8:b0:82: 6a:cb:e4:bb:68:bb:8e:99:ba:00:a6:67:a4:2d:80: bb:bb:fc:86:d0:11:09:91:2a:fd:a8:4c:f3:ec:3a: b0:2a:40:07:14:44:e1:56:0e:81:15:8c:a6:5b:0f: b3:ca:cd:56:55:3c:ed:87:34:be:80:a0:d3:92:3d: 77:35:4e:ce:89:ab:6c:07:0d:8d:dc:6d:bc:87:32: 10:db:36:8e:e2:5e:e1:18:4c:ca:34:d8:fc:5b:9c: 51:36:2d:7a:0f:4c:7c:4e:91:89:2f:83:72:4d:57: 8d:a2:50:cb:3a:9b:c4:7b:99:86:0c:80:ee:97:26: f7:f6:9b:87:f9:70:82:ed:ed:50:b6:af:f4:f8:a0: 57:71:a3:7e:a4:fc:c1:ad:bc:04:93:b8:ca:57:f0: 19:15:bc:82:56:fe:ce:12:40:dc:98:00:74:ee:c7: 86:1b:e2:8c:43:1b:2b:d9:75:c2:10:c1:98:ec:3e: 4d:26:2e:be:d3:64:0a:ad:96:6f:2f:09:2a:77:03: f7:c3:a9:71:6d:58:ae:17:7c:90:84:9b:7c:48:14: 5f:3c:50:28:49:56:f9:b1:99:5c:a3:5d:0c:61:29: 2b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9D:20:3F:0C:04:5E:22:AB:0E:E5:9E:DB:9B:15:25:51:33:4C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv4: 131.109.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:29:96:12:b5:89:58:81:f9:94:1e:97:61:f0:0f:38:a0:ab: a2:11:12:4d:1e:93:c3:0f:a0:33:93:e1:58:5f:ca:ea:16:60: 8d:de:2f:19:42:1f:52:17:89:65:82:22:66:49:39:1e:93:8e: 74:61:62:21:84:10:99:72:29:89:5d:72:f8:a8:5f:44:78:78: 63:61:88:5a:04:c0:cb:b1:44:a5:7a:66:3d:b0:55:23:13:cc: f8:43:88:10:fa:02:50:41:30:10:84:f0:00:6c:2c:4c:b1:b3: ea:22:7f:c3:2d:dd:ee:83:cc:93:86:2e:c3:cd:55:6d:47:d9: f8:25:7b:18:a8:0b:e2:39:57:d2:a4:0e:0e:7c:14:0f:81:2a: e1:58:76:d4:5d:eb:5a:ed:96:33:53:b5:3c:b9:68:b0:5f:9d: 4d:48:55:d3:02:95:76:a2:ca:24:a5:06:76:97:0c:44:2e:50: 42:67:2c:74:fc:66:e6:0f:68:18:6d:ef:0e:a5:89:a9:ed:39: 6e:7d:4e:60:bc:97:82:d9:e9:91:18:78:67:78:16:7f:6b:09: 7a:33:f8:53:ec:4c:43:e1:67:1a:4d:4b:dd:45:e1:ce:e1:72: b6:22:72:bc:a7:d6:4e:9f:b0:9f:ef:a5:77:84:d0:15:ff:8c: fb:8e:17:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n384Y8msUa449aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZGQzZjUzZjQtMWZiZS00OTUxLWE3YTMtMmMwYWZmM2ZmNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5n1Nd5N6t5CsIoeS0kdPue/YtzewfObc6rI sIJqy+S7aLuOmboApmekLYC7u/yG0BEJkSr9qEzz7DqwKkAHFEThVg6BFYymWw+z ys1WVTzthzS+gKDTkj13NU7OiatsBw2N3G28hzIQ2zaO4l7hGEzKNNj8W5xRNi16 D0x8TpGJL4NyTVeNolDLOpvEe5mGDIDulyb39puH+XCC7e1Qtq/0+KBXcaN+pPzB rbwEk7jKV/AZFbyCVv7OEkDcmAB07seGG+KMQxsr2XXCEMGY7D5NJi6+02QKrZZv LwkqdwP3w6lxbViuF3yQhJt8SBRfPFAoSVb5sZlco10MYSkr2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6dID8MBF4iqw7lntubFSVRM0yRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvMmUwMjA1NjUtMjY1MC0z NzMxLTg0YjQtYjMwZTgzZjFjYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg22AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8plhK1iViB+ZQel2HwDzigq6IREk0ek8MPoDOT4VhfyuoWYI3eLxlC H1IXiWWCImZJOR6TjnRhYiGEEJlyKYldcvioX0R4eGNhiFoEwMuxRKV6Zj2wVSMT zPhDiBD6AlBBMBCE8ABsLEyxs+oif8Mt3e6DzJOGLsPNVW1H2fglexioC+I5V9Kk Dg58FA+BKuFYdtRd61rtljNTtTy5aLBfnU1IVdMClXaiyiSlBnaXDEQuUEJnLHT8 ZuYPaBht7w6liantOW59TmC8l4LZ6ZEYeGd4Fn9rCXoz+FPsTEPhZxpNS91F4c7h crYicryn1k6fsJ/vpXeE0BX/jPuOF9k= -----END CERTIFICATE-----Generated at Fri Apr 17 22:47:29 2026 by rpki-client