$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa File: 97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa (raw, json) Hash identifier: 3AG95/+7t8NeLeDbzJQKZO55lILEjr87Yp+0cici8NU= Subject key identifier: 94:47:75:21:D4:AE:9A:A4:78:A7:34:66:1B:22:9D:46:4A:DA:EB:3C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D87FA8DC0919B779BBAD1CB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 31898 IP address blocks: 158.247.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:8d:c0:91:9b:77:9b:ba:d1:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=a3f150dc-ab39-4621-a405-fd368a9751ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:38:9f:2c:90:7e:39:12:d7:3d:0a:2a:e3: 6a:89:57:e0:ca:8a:24:36:e7:e8:dd:99:e3:50:ec: 44:0e:20:08:35:dd:bc:41:76:ca:cf:a9:00:d6:55: b2:a0:f0:2e:cc:5d:cc:9e:f9:0c:f9:fa:f0:a7:0d: ff:8e:83:da:26:8c:85:d7:2e:6d:83:c3:76:c1:3f: 6f:e0:0c:0c:31:ce:a7:09:78:ac:8b:eb:e8:b6:db: 23:34:ed:32:d2:8f:28:69:83:48:f1:08:e7:f6:0a: 53:54:0f:85:3f:c7:4e:40:e5:e3:1d:50:e2:1a:f2: 30:c7:58:9d:75:45:98:73:2b:0e:25:d7:3b:dd:a8: d3:cb:7c:ed:32:3b:93:7d:bb:0a:a1:72:d2:cd:9c: 97:0e:e6:4f:e1:50:fd:ff:c6:23:15:02:56:f4:9e: 2e:bb:2c:52:6e:6b:9f:d8:d0:67:d9:f8:e5:c8:4c: c2:1f:42:ad:d6:8a:f4:af:0c:2f:75:d8:9e:33:19: fb:ff:00:0e:8b:ea:0a:fd:0d:fc:78:48:f1:b0:fb: 8b:b4:9f:91:a6:a4:fc:fa:e9:68:08:08:51:7d:c9: 2e:a5:81:be:65:eb:77:f3:7d:7c:20:d3:ad:87:5f: 17:74:50:c3:cc:8a:78:12:63:ae:3d:90:85:7b:56: a8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:47:75:21:D4:AE:9A:A4:78:A7:34:66:1B:22:9D:46:4A:DA:EB:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.247.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:08:28:20:11:17:1b:b9:46:49:dc:2a:ad:e6:b3:3f:63:e9: 4c:fb:76:b0:1b:08:55:fd:7e:ec:f5:35:80:9b:1c:d8:d9:6b: 95:7b:8a:db:79:30:b7:56:f5:50:02:94:28:10:b7:f5:f7:1d: 17:fd:60:38:7b:5c:65:e2:15:b0:77:4b:90:81:bc:47:f2:2a: 54:62:b8:2d:d9:a3:7c:74:77:ae:3f:c4:78:52:5a:d0:08:6b: fc:2b:2f:b2:36:8e:2a:44:42:72:29:bc:4f:e2:c9:96:a9:7c: 15:c7:9f:fb:a3:b9:29:9c:59:33:0f:94:c9:82:cd:01:09:9c: ca:70:63:81:b0:35:1f:0f:0f:2a:9b:b9:64:3b:f2:19:3a:dc: cd:fb:f8:88:18:a9:40:3c:07:9a:6d:7a:fc:e9:8c:23:b1:51: 85:f1:80:eb:33:40:89:75:bf:a0:79:dd:c5:16:0a:d2:3d:a8: 5a:11:bb:6d:3a:ff:3d:49:1f:62:6f:a0:80:6b:fc:61:18:a3: 80:74:11:70:08:1d:86:57:d0:d9:6c:70:8d:da:88:f2:b7:e6: 65:43:c6:d0:e1:e2:e3:8f:6a:86:32:85:0b:02:a6:4a:f7:a2: b6:3b:83:a4:4f:54:a0:0b:29:83:d9:4c:9b:94:5f:1b:c3:f0: 95:e0:69:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2H+o3AkZt3m7rRy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk YTNmMTUwZGMtYWIzOS00NjIxLWE0MDUtZmQzNjhhOTc1MWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg44nyyQfjkS1z0KKuNqiVfgyookNufo3Znj UOxEDiAINd28QXbKz6kA1lWyoPAuzF3MnvkM+frwpw3/joPaJoyF1y5tg8N2wT9v 4AwMMc6nCXisi+vottsjNO0y0o8oaYNI8Qjn9gpTVA+FP8dOQOXjHVDiGvIwx1id dUWYcysOJdc73ajTy3ztMjuTfbsKoXLSzZyXDuZP4VD9/8YjFQJW9J4uuyxSbmuf 2NBn2fjlyEzCH0Kt1or0rwwvddieMxn7/wAOi+oK/Q38eEjxsPuLtJ+RpqT8+ulo CAhRfckupYG+Zet38318INOth18XdFDDzIp4EmOuPZCFe1aohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRHdSHUrpqkeKc0ZhsinUZK2us8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTdjNGFiY2UtNzFhNC0z ZWQ2LWIxYWUtYTI3MjQ4M2YzMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnvdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIIKCARFxu5RkncKq3msz9j6Uz7drAbCFX9fuz1NYCbHNjZa5V7itt5 MLdW9VAClCgQt/X3HRf9YDh7XGXiFbB3S5CBvEfyKlRiuC3Zo3x0d64/xHhSWtAI a/wrL7I2jipEQnIpvE/iyZapfBXHn/ujuSmcWTMPlMmCzQEJnMpwY4GwNR8PDyqb uWQ78hk63M37+IgYqUA8B5ptevzpjCOxUYXxgOszQIl1v6B53cUWCtI9qFoRu206 /z1JH2JvoIBr/GEYo4B0EXAIHYZX0NlscI3aiPK35mVDxtDh4uOPaoYyhQsCpkr3 orY7g6RPVKALKYPZTJuUXxvD8JXgafo= -----END CERTIFICATE-----Generated at Fri Apr 17 16:40:37 2026 by rpki-client