$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa File: 8ec2a157-3584-32e5-81a6-826583bef3c9.roa (raw, json) Hash identifier: gTAuoxqkY4/OpRweHkAtgqswIG+8AiS9Ytx3ptSp380= Subject key identifier: E5:92:2A:3A:1B:FB:61:B8:15:CF:DC:25:D0:D0:B5:04:81:6E:73:BA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A70C1FD9E6D3BC061A500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 168.107.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:70:c1:fd:9e:6d:3b:c0:61:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=b16cff21-856d-49ff-8ffa-21ecd5418ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:07:af:c1:ba:01:7a:7c:d5:f2:26:18:97: 4a:7b:30:d3:69:37:7d:05:8b:ce:ca:f2:98:a7:b6: d3:f8:90:1a:35:87:2a:be:c3:d7:77:a6:16:c2:97: 74:98:92:dd:85:ed:a2:5b:4d:95:32:c3:2d:7e:48: 3e:66:f3:ff:d4:aa:e8:f2:35:43:1b:24:a7:cb:4d: 08:82:5c:03:00:23:c1:08:dd:db:f1:38:b6:10:85: 81:24:8e:f0:20:50:23:a1:79:03:38:22:17:6c:5e: f6:1b:49:e7:2d:13:49:02:d1:ea:12:d8:10:a8:3d: 22:4a:0d:b6:c5:f5:3e:5e:07:a1:a3:b0:07:21:f6: 89:3b:99:f7:5e:38:7f:cd:47:68:87:91:5a:78:6d: 4d:8e:54:c9:da:c1:f6:f2:46:e3:41:48:b5:89:95: 19:1f:0c:bf:b1:4e:ea:c4:a1:a6:02:2a:31:93:53: a8:fd:53:cf:ee:67:ba:00:2b:d3:53:2b:b3:de:5c: f6:95:1c:05:47:6c:d2:d4:58:b5:7f:c3:de:18:6d: 8b:0d:53:63:8e:7c:c7:dd:53:88:a5:22:4c:ac:ec: 4d:29:c1:50:29:de:3e:8a:72:e6:90:d3:5a:50:30: 70:27:1e:40:c0:b1:03:e6:b1:26:72:07:67:00:4d: ad:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:92:2A:3A:1B:FB:61:B8:15:CF:DC:25:D0:D0:B5:04:81:6E:73:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:73:32:26:e3:7d:4b:88:77:c2:ed:be:a8:7d:4a:47:b6:a0: cd:16:4a:76:05:36:f1:9d:b5:9b:68:bf:75:f9:ac:5c:d9:0f: 34:e7:8d:07:5f:00:b8:0e:7f:f0:e4:7a:6c:98:fb:ba:a2:20: cb:43:bb:b7:5e:7c:e7:52:ad:dc:48:4f:e3:b5:76:97:8c:12: f9:27:6b:28:57:d8:e8:73:37:d4:a9:1b:fb:3d:c2:fe:e6:31: f3:d8:05:6c:4b:45:75:b2:83:72:52:35:0a:b7:33:05:f9:86: 03:c8:18:93:10:03:ff:d2:24:21:87:4f:61:ae:b9:1d:29:40: 08:ca:a7:9d:9f:97:7f:63:80:63:b8:cb:75:45:54:00:b8:5a: a0:07:79:6f:55:4c:92:0d:4d:f9:fa:0c:58:d4:30:59:03:36: 62:ab:b1:f6:ce:88:54:71:34:d3:d2:b5:e8:d5:a9:f0:71:8d: 1e:ab:5c:0c:e8:df:3f:ef:60:37:55:86:cb:86:d6:d6:55:10: 8e:ed:d8:24:3c:a9:e1:da:ef:61:71:5e:61:de:85:1f:bd:18: 7b:bd:3d:6a:55:f4:ed:8e:5b:d4:b6:15:fd:57:07:da:ba:ca: 6f:e7:09:86:46:cf:0d:27:1e:da:31:71:db:bf:66:24:80:69: 8e:5d:3c:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mnDB/Z5tO8BhpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YjE2Y2ZmMjEtODU2ZC00OWZmLThmZmEtMjFlY2Q1NDE4Y2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCgHr8G6AXp81fImGJdKezDTaTd9BYvOyvKY p7bT+JAaNYcqvsPXd6YWwpd0mJLdhe2iW02VMsMtfkg+ZvP/1Kro8jVDGySny00I glwDACPBCN3b8Ti2EIWBJI7wIFAjoXkDOCIXbF72G0nnLRNJAtHqEtgQqD0iSg22 xfU+Xgeho7AHIfaJO5n3Xjh/zUdoh5FaeG1NjlTJ2sH28kbjQUi1iZUZHwy/sU7q xKGmAioxk1Oo/VPP7me6ACvTUyuz3lz2lRwFR2zS1Fi1f8PeGG2LDVNjjnzH3VOI pSJMrOxNKcFQKd4+inLmkNNaUDBwJx5AwLED5rEmcgdnAE2t1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWSKjob+2G4Fc/cJdDQtQSBbnO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGVjMmExNTctMzU4NC0z MmU1LTgxYTYtODI2NTgzYmVmM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqGsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZzMibjfUuId8Ltvqh9Ske2oM0WSnYFNvGdtZtov3X5rFzZDzTnjQdf ALgOf/DkemyY+7qiIMtDu7defOdSrdxIT+O1dpeMEvknayhX2OhzN9SpG/s9wv7m MfPYBWxLRXWyg3JSNQq3MwX5hgPIGJMQA//SJCGHT2GuuR0pQAjKp52fl39jgGO4 y3VFVAC4WqAHeW9VTJINTfn6DFjUMFkDNmKrsfbOiFRxNNPStejVqfBxjR6rXAzo 3z/vYDdVhsuG1tZVEI7t2CQ8qeHa72FxXmHehR+9GHu9PWpV9O2OW9S2Ff1XB9q6 ym/nCYZGzw0nHtoxcdu/ZiSAaY5dPH4= -----END CERTIFICATE-----Generated at Fri Apr 17 16:42:15 2026 by rpki-client