$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa File: 23c5e5ea-0067-3a34-834a-532581a87ad9.roa (raw, json) Hash identifier: V72iD3s0eYBNl6/lnp//bn38/04MpXcAgCY7Jl1crCM= Subject key identifier: 0E:84:B4:A0:FB:F5:2A:24:E4:95:2A:90:D1:71:43:61:84:F6:C2:54 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A815AF575A1432845E1C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 207.211.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:81:5a:f5:75:a1:43:28:45:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=5a00432a-e1e4-4631-a091-a202f70bbbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:30:b0:65:7d:c1:f1:a3:bb:c5:d7:61:a4:0d: c1:96:1c:26:81:78:15:3d:7c:09:7a:2c:55:33:9b: a6:09:8e:48:b5:4a:7d:9d:09:72:4d:68:9a:b0:d7: ee:12:0f:a4:1e:b7:89:86:64:f3:a8:fb:3c:e1:2d: 09:07:bf:24:81:f7:45:9e:3c:d1:01:4d:76:d3:a9: 81:2f:5a:c2:b8:c6:af:c8:a8:97:53:7f:9d:92:eb: 1c:40:bc:9a:ed:60:36:41:d5:40:ec:d6:9f:27:36: d9:e4:46:0d:70:be:3f:03:5a:c6:d3:35:e8:6a:76: 2f:80:9e:c1:3a:a2:b5:5c:b5:4f:ca:55:0e:b7:d0: 75:51:a2:39:bb:8a:12:17:94:2d:c1:c4:2f:9d:b5: 5d:e8:59:0b:e3:81:cf:72:d6:10:65:a9:56:fc:e9: 68:ee:f4:6e:eb:6c:46:1e:c9:96:bd:89:06:4b:a3: 98:eb:e9:59:40:14:4d:de:69:39:7b:75:5f:05:79: 6d:22:1c:45:df:f3:85:53:61:dd:2c:ea:0f:64:70: 83:ad:d3:43:b0:f8:3c:d8:d1:ad:0f:4e:89:f5:10: 86:ee:a7:0f:2e:6d:33:88:c2:d9:72:08:ff:02:0f: 25:97:62:78:c5:d8:1d:66:ac:a2:db:d3:a3:4f:ea: 38:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:84:B4:A0:FB:F5:2A:24:E4:95:2A:90:D1:71:43:61:84:F6:C2:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.211.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:94:e2:0f:c4:e0:43:e3:48:10:20:41:93:e4:b3:ca:38:54: f4:7d:d6:48:b5:d1:13:fd:22:c6:de:a9:2e:8f:e7:39:ab:a3: 48:6d:c0:2b:57:13:2e:f3:8f:a7:32:1c:ea:13:0d:2b:47:b9: 9c:24:76:51:b1:c8:da:3f:ab:82:71:d8:d1:f0:25:2e:71:15: e8:1b:3e:0e:af:8d:e9:17:08:fd:c3:45:ea:37:1d:7e:61:67: 3c:85:8f:8a:bb:b6:05:c7:cd:5a:2a:4a:60:e7:4a:03:36:e3: 7b:19:c8:44:4d:aa:d0:09:66:7f:9e:6f:3c:8d:66:85:11:ed: dc:c5:c0:91:3c:81:cf:9f:be:71:1f:07:1b:a5:64:a6:10:30: d1:e1:25:c7:c0:cc:da:dc:8f:2b:e6:2d:e9:c2:12:b7:09:23: e8:da:4f:94:bc:74:59:a9:31:8e:79:73:43:26:0c:89:07:1f: 82:a4:dd:e1:a7:83:c8:71:c7:c8:31:a0:d8:1c:c1:f4:1b:c5: 28:23:fa:2e:9d:3b:12:22:9b:e6:e4:f9:b7:6d:58:e0:c6:de: 03:84:02:db:96:32:e4:bd:8d:b2:37:94:23:39:ed:0d:08:2c: 8a:0d:67:d0:49:0e:96:84:ce:3a:14:7a:42:92:1c:fe:27:2c: f7:6c:ba:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moFa9XWhQyhF4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NWEwMDQzMmEtZTFlNC00NjMxLWEwOTEtYTIwMmY3MGJiYmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzCwZX3B8aO7xddhpA3BlhwmgXgVPXwJeixV M5umCY5ItUp9nQlyTWiasNfuEg+kHreJhmTzqPs84S0JB78kgfdFnjzRAU1206mB L1rCuMavyKiXU3+dkuscQLya7WA2QdVA7NafJzbZ5EYNcL4/A1rG0zXoanYvgJ7B OqK1XLVPylUOt9B1UaI5u4oSF5QtwcQvnbVd6FkL44HPctYQZalW/Olo7vRu62xG HsmWvYkGS6OY6+lZQBRN3mk5e3VfBXltIhxF3/OFU2HdLOoPZHCDrdNDsPg82NGt D06J9RCG7qcPLm0ziMLZcgj/Ag8ll2J4xdgdZqyi29OjT+o43wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6EtKD79Sok5JUqkNFxQ2GE9sJUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjNjNWU1ZWEtMDA2Ny0z YTM0LTgzNGEtNTMyNTgxYTg3YWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiU4g/E4EPjSBAgQZPks8o4VPR91ki10RP9IsbeqS6P5zmro0htwCtX Ey7zj6cyHOoTDStHuZwkdlGxyNo/q4Jx2NHwJS5xFegbPg6vjekXCP3DReo3HX5h ZzyFj4q7tgXHzVoqSmDnSgM243sZyERNqtAJZn+ebzyNZoUR7dzFwJE8gc+fvnEf BxulZKYQMNHhJcfAzNrcjyvmLenCErcJI+jaT5S8dFmpMY55c0MmDIkHH4Kk3eGn g8hxx8gxoNgcwfQbxSgj+i6dOxIim+bk+bdtWODG3gOEAtuWMuS9jbI3lCM57Q0I LIoNZ9BJDpaEzjoUekKSHP4nLPdsus0= -----END CERTIFICATE-----Generated at Fri Apr 17 15:21:50 2026 by rpki-client