$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a22d0a82-e1ee-3794-9394-20c3ba786983.roa File: a22d0a82-e1ee-3794-9394-20c3ba786983.roa (raw, json) Hash identifier: h6TQbjJSj62INz5+OjqS0L7QT1PqnDJ4kK2Snl6OsVs= Subject key identifier: 24:90:7F:6A:7E:22:01:2F:E7:19:7E:FC:BF:28:4D:D9:FF:04:5D:B1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9AA11C530B8B17FDFECB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a22d0a82-e1ee-3794-9394-20c3ba786983.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 169.224.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:a1:1c:53:0b:8b:17:fd:fe:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=96434a66-249c-4929-a415-760fc6287be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:ff:1e:9f:01:4d:d9:ac:03:81:d9:ef:46: 96:69:09:e1:21:14:82:9b:81:45:4d:31:34:3c:6c: 86:98:da:a0:7a:d3:ea:df:90:de:6a:28:a3:41:94: 74:c9:97:a8:55:59:9f:91:56:c4:4a:6c:46:3e:55: f8:38:a5:22:bd:bc:2e:42:31:3f:d3:1e:fb:26:34: 9b:12:40:e0:cc:e2:eb:34:36:da:20:b4:8b:80:64: 75:dc:9a:43:a7:99:c3:e0:9d:95:c5:8e:8f:5e:f1: df:ec:2d:4b:bf:e2:02:bf:9f:82:a2:45:9a:2b:d5: 58:d4:fe:cd:2c:de:67:1b:1d:b9:51:46:10:e3:2a: a9:16:1a:76:98:cd:2c:23:e4:40:69:f3:fe:75:ce: 0b:e2:d0:8d:d8:a0:dd:e2:bf:e4:05:0c:50:12:e0: 71:28:d1:07:e4:b3:a9:13:9e:29:77:a6:2d:2c:7f: 92:e3:3f:df:4b:bd:f1:ad:97:9e:f5:4f:4b:96:35: 67:9f:c6:7b:b2:db:cb:19:cf:19:d9:fe:16:f5:19: 55:19:63:22:b3:0b:a6:a2:c4:26:75:60:f4:c4:be: 47:46:af:0b:d4:53:1a:b0:3b:7b:45:18:b2:41:b9: bf:ab:00:17:9d:b3:d8:24:8a:c4:50:a7:85:f2:dc: 9f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:90:7F:6A:7E:22:01:2F:E7:19:7E:FC:BF:28:4D:D9:FF:04:5D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a22d0a82-e1ee-3794-9394-20c3ba786983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 169.224.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:85:43:ec:a6:a9:b7:cf:ae:9e:a0:89:a6:cd:28:39:c5:18: 96:df:ea:85:34:f9:5c:58:d7:ef:7f:61:bb:12:84:e7:aa:9b: 4c:0c:df:01:a9:e4:72:6e:d9:53:b8:a7:3e:de:a3:1a:0e:e3: 58:b2:81:4e:11:d2:4c:75:85:d5:8e:2c:2e:aa:50:1d:a2:d4: 42:72:7b:cf:cf:ae:bf:2b:64:81:00:21:9b:54:24:00:3f:3d: d1:f2:00:bc:aa:53:90:e7:fe:1a:79:06:dc:ed:66:33:40:c7: b6:ff:7d:c2:05:34:55:2c:6c:4a:1e:01:d4:44:2e:88:cd:8a: 32:5e:35:f2:91:19:53:55:33:a3:f7:13:fa:4c:9e:09:4d:09: ca:56:e6:e4:e8:10:1f:7c:0f:9b:16:c5:23:32:63:cc:3a:e3: fd:52:3f:ed:3d:75:1c:ac:39:f9:1c:c4:5f:56:0c:6c:b8:0d: 89:61:99:8f:15:a9:85:cf:2f:92:fb:43:78:ae:65:46:e0:7a: 61:fb:16:08:b0:a7:45:74:b8:54:bb:8f:09:c9:89:c8:bf:40: e0:be:3c:1d:6b:e8:c5:3e:00:9d:34:86:4a:2b:7f:e7:41:90: 6e:47:d8:4d:b4:b2:47:78:a4:93:e0:13:bd:ac:28:29:7d:50: 45:66:71:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mqEcUwuLF/3+y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk OTY0MzRhNjYtMjQ5Yy00OTI5LWE0MTUtNzYwZmM2Mjg3YmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylP/Hp8BTdmsA4HZ70aWaQnhIRSCm4FFTTE0 PGyGmNqgetPq35DeaiijQZR0yZeoVVmfkVbESmxGPlX4OKUivbwuQjE/0x77JjSb EkDgzOLrNDbaILSLgGR13JpDp5nD4J2VxY6PXvHf7C1Lv+ICv5+CokWaK9VY1P7N LN5nGx25UUYQ4yqpFhp2mM0sI+RAafP+dc4L4tCN2KDd4r/kBQxQEuBxKNEH5LOp E54pd6YtLH+S4z/fS73xrZee9U9LljVnn8Z7stvLGc8Z2f4W9RlVGWMiswumosQm dWD0xL5HRq8L1FMasDt7RRiyQbm/qwAXnbPYJIrEUKeF8tyf6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSQf2p+IgEv5xl+/L8oTdn/BF2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTIyZDBhODItZTFlZS0z Nzk0LTkzOTQtMjBjM2JhNzg2OTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqeDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqFQ+ymqbfPrp6giabNKDnFGJbf6oU0+VxY1+9/YbsShOeqm0wM3wGp 5HJu2VO4pz7eoxoO41iygU4R0kx1hdWOLC6qUB2i1EJye8/Prr8rZIEAIZtUJAA/ PdHyALyqU5Dn/hp5BtztZjNAx7b/fcIFNFUsbEoeAdRELojNijJeNfKRGVNVM6P3 E/pMnglNCcpW5uToEB98D5sWxSMyY8w64/1SP+09dRysOfkcxF9WDGy4DYlhmY8V qYXPL5L7Q3iuZUbgemH7Fgiwp0V0uFS7jwnJici/QOC+PB1r6MU+AJ00hkorf+dB kG5H2E20skd4pJPgE72sKCl9UEVmcYY= -----END CERTIFICATE-----Generated at Fri Apr 17 17:53:34 2026 by rpki-client