$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1dd371aa-b89f-3985-948c-e16febd916a9.roa File: 1dd371aa-b89f-3985-948c-e16febd916a9.roa (raw, json) Hash identifier: WaLQczzKrrTDRd7jodmPR7dNQlHQtu+iyyMoqeAH0+I= Subject key identifier: 5D:34:E7:39:0F:E3:49:F6:80:21:44:E4:EB:2F:F1:0E:D9:66:E7:42 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D86957D0E81FBEE71F5361D40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1dd371aa-b89f-3985-948c-e16febd916a9.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 192.29.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:7d:0e:81:fb:ee:71:f5:36:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=b8c0a077-f18e-445b-99bc-0afc59298413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a8:ed:0b:b9:37:07:a7:8a:96:02:23:bb:c6: 0f:3e:ed:85:da:07:ff:97:a2:cc:76:3f:c2:b3:75: 38:d2:3b:02:b1:63:db:21:37:2d:0d:22:7b:b5:b6: b6:7e:cf:ac:ab:a9:a9:af:e4:dd:5e:43:02:1f:3f: c2:a1:96:c2:e6:37:76:95:0b:f5:a9:42:fc:1e:b6: 30:f8:62:a8:f1:f2:3f:a9:76:f4:c5:7a:10:45:cc: 10:b3:13:99:aa:43:13:d9:08:4e:78:63:c2:d3:71: 13:05:19:69:f4:66:f4:90:ad:ec:fb:80:ce:74:ea: bf:9c:2f:e6:28:12:cb:5d:c9:71:30:b6:03:dc:61: 16:8e:65:4c:0b:b1:dc:47:fb:6d:39:0d:e6:ee:b5: cd:72:00:39:54:5d:0e:78:e2:31:51:69:a6:d7:1a: 71:3d:d1:ff:11:4d:f4:98:2f:98:e0:19:bc:9d:77: b1:98:fd:65:35:d1:96:04:33:fd:5c:f2:74:69:a9: dd:1a:5d:75:5e:c1:b4:9b:be:a4:e5:39:9a:42:4d: f4:91:68:61:7c:06:76:28:65:c6:d1:59:fb:ed:42: 11:a1:cf:09:c5:8b:4f:64:0a:24:16:1e:90:35:e8: 2d:15:9f:3f:cd:11:e6:14:2a:56:36:63:b3:70:e4: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:34:E7:39:0F:E3:49:F6:80:21:44:E4:EB:2F:F1:0E:D9:66:E7:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1dd371aa-b89f-3985-948c-e16febd916a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:5e:a5:2f:be:15:a5:d9:1d:31:97:8f:e0:b9:28:39:03:4e: 68:4e:d0:ec:2f:9f:49:46:91:10:91:90:95:46:25:d4:9d:ed: 98:7b:24:90:f7:91:4c:08:c6:db:53:db:ac:a6:a2:6a:9c:46: d5:08:81:45:f5:62:9d:44:fe:6e:9f:de:c6:8c:c3:4e:b4:b9: ba:d8:fb:65:de:7b:bd:40:cb:cb:9c:88:34:d2:04:2b:42:d4: 89:d6:26:2c:93:75:d2:0c:84:96:9e:42:de:1a:1f:16:65:5a: d5:f4:2c:72:e4:0f:fb:06:4f:61:9d:c5:c2:bf:c1:b8:53:84: 04:c7:8b:20:79:07:05:e0:43:32:9b:d5:a9:d8:38:38:8e:23: 9d:63:2c:70:29:86:d3:9b:7f:09:1d:11:3e:b7:39:91:a1:e6: 3f:30:ba:82:10:48:c1:b6:aa:65:d5:29:ec:5c:64:1f:7d:70: e2:58:eb:ac:b5:92:2a:a8:61:9c:93:8b:61:37:c0:7e:6b:fb: 1c:2e:ef:3f:31:9a:3b:6b:4c:da:d4:04:00:db:f7:5c:c3:09: 47:4d:9f:bf:21:71:3b:98:2e:04:ce:e2:44:ff:6a:05:c8:04: 1a:d7:b6:f3:35:17:7e:23:4f:7b:21:5f:c3:c8:44:b4:0e:79: 28:29:17:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlX0OgfvucfU2HUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YjhjMGEwNzctZjE4ZS00NDViLTk5YmMtMGFmYzU5Mjk4NDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgajtC7k3B6eKlgIju8YPPu2F2gf/l6LMdj/C s3U40jsCsWPbITctDSJ7tba2fs+sq6mpr+TdXkMCHz/CoZbC5jd2lQv1qUL8HrYw +GKo8fI/qXb0xXoQRcwQsxOZqkMT2QhOeGPC03ETBRlp9Gb0kK3s+4DOdOq/nC/m KBLLXclxMLYD3GEWjmVMC7HcR/ttOQ3m7rXNcgA5VF0OeOIxUWmm1xpxPdH/EU30 mC+Y4Bm8nXexmP1lNdGWBDP9XPJ0aandGl11XsG0m76k5TmaQk30kWhhfAZ2KGXG 0Vn77UIRoc8JxYtPZAokFh6QNegtFZ8/zRHmFCpWNmOzcOR66wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF005zkP40n2gCFE5Osv8Q7ZZudCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWRkMzcxYWEtYjg5Zi0z OTg1LTk0OGMtZTE2ZmViZDkxNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtepS++FaXZHTGXj+C5KDkDTmhO0Owvn0lGkRCRkJVGJdSd7Zh7JJD3 kUwIxttT26ymomqcRtUIgUX1Yp1E/m6f3saMw060ubrY+2Xee71Ay8uciDTSBCtC 1InWJiyTddIMhJaeQt4aHxZlWtX0LHLkD/sGT2GdxcK/wbhThATHiyB5BwXgQzKb 1anYODiOI51jLHAphtObfwkdET63OZGh5j8wuoIQSMG2qmXVKexcZB99cOJY66y1 kiqoYZyTi2E3wH5r+xwu7z8xmjtrTNrUBADb91zDCUdNn78hcTuYLgTO4kT/agXI BBrXtvM1F34jT3shX8PIRLQOeSgpF9A= -----END CERTIFICATE-----Generated at Sat Apr 18 03:59:40 2026 by rpki-client