$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db008e14-8d19-3ca8-825e-4ae02e1cb000.roa File: db008e14-8d19-3ca8-825e-4ae02e1cb000.roa (raw, json) Hash identifier: 2SOdLPOfZojMYSxbxPDQILvpKxfkVsbjwApId0fWn3Q= Subject key identifier: 38:3A:BA:BA:AC:5B:7E:C4:9A:08:E0:BB:F2:AC:00:F8:01:66:02:66 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D87FA92B7C97C930F61E73700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db008e14-8d19-3ca8-825e-4ae02e1cb000.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 31898 IP address blocks: 157.137.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:92:b7:c9:7c:93:0f:61:e7:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=31f9cd99-800f-45fd-bab8-c76240740288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:b9:9c:61:cd:94:00:87:89:a1:86:94:c7: 5c:5d:04:1f:fd:d6:1b:71:42:91:f1:ee:08:4c:da: 35:fc:3e:25:e3:21:77:fa:77:78:00:9c:82:f3:83: ae:99:79:2f:2b:56:81:f3:2e:f1:2a:da:58:09:d3: 41:df:1d:08:9a:f6:0c:56:3d:77:b9:83:88:d6:39: fc:58:76:0e:ee:2d:18:70:93:9e:44:52:91:d9:e0: 02:55:9b:17:4e:44:f2:b5:24:a7:f8:05:bf:17:ff: bb:78:91:be:c4:fc:0e:25:39:60:c8:da:32:e3:a0: 28:98:04:07:c8:61:1d:ba:2d:b5:a3:be:c0:46:06: 56:49:14:ea:a9:46:06:8e:76:07:3a:c7:10:99:1b: da:82:55:c2:94:b8:27:52:0f:ab:65:6c:3a:78:e1: 8d:4c:b5:07:b4:cc:e8:2a:e5:ed:ca:21:aa:f8:19: af:34:01:58:81:c2:bf:34:c4:a7:97:63:b9:48:64: fb:34:c0:e6:99:3b:9f:54:b3:4f:24:2a:49:87:32: b1:92:b3:6f:36:89:4c:74:82:06:34:73:62:b2:c3: 9b:1c:9f:7b:c8:e4:a7:a5:e0:f1:b0:99:c2:89:c3: 8a:f3:49:33:54:56:51:28:d2:5d:65:14:93:5d:a6: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3A:BA:BA:AC:5B:7E:C4:9A:08:E0:BB:F2:AC:00:F8:01:66:02:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db008e14-8d19-3ca8-825e-4ae02e1cb000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ac:4d:b3:14:d4:f1:c1:00:9c:63:4e:1b:cf:3e:70:c2:17: ce:aa:08:ac:c7:41:2a:b4:6d:dd:d0:4d:8c:63:5f:0b:cd:f7: d0:c5:eb:52:e6:40:c4:de:f1:58:0c:af:79:69:85:8b:63:e7: 33:dd:29:46:22:9b:11:29:13:40:0f:c8:78:65:ad:ca:7f:17: 8a:4b:e1:8e:59:a4:3d:68:a8:86:5b:20:4e:ac:11:3e:ef:28: 67:95:68:52:9a:ae:cd:0b:5f:55:9c:2b:dd:65:12:d0:b7:dc: 1f:a1:33:dd:83:30:17:0b:bf:a5:5e:17:94:c0:2c:da:48:cc: 75:5a:e4:c0:12:87:d1:61:dc:91:fb:b2:e8:a9:ba:2b:ad:dc: fc:64:db:95:ae:c2:59:f8:0f:8b:f4:18:13:15:0f:5a:09:8e: 47:33:f4:c7:d5:68:36:ac:3e:0b:6b:a9:00:14:40:b6:5d:a1: 82:74:c3:e7:3f:66:d7:64:9a:0c:e2:c8:d0:1f:39:a6:21:1d: 7c:21:51:7a:17:35:e0:61:7e:48:da:49:50:d6:6b:04:68:a5: b3:97:05:59:e2:44:8f:3f:14:94:c5:03:44:f9:97:1e:00:47: c6:b1:71:00:9a:30:ed:9a:a1:7e:1f:5e:63:bb:87:70:19:cb: 36:da:93:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2H+pK3yXyTD2HnNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk MzFmOWNkOTktODAwZi00NWZkLWJhYjgtYzc2MjQwNzQwMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu25nGHNlACHiaGGlMdcXQQf/dYbcUKR8e4I TNo1/D4l4yF3+nd4AJyC84OumXkvK1aB8y7xKtpYCdNB3x0ImvYMVj13uYOI1jn8 WHYO7i0YcJOeRFKR2eACVZsXTkTytSSn+AW/F/+7eJG+xPwOJTlgyNoy46AomAQH yGEdui21o77ARgZWSRTqqUYGjnYHOscQmRvaglXClLgnUg+rZWw6eOGNTLUHtMzo KuXtyiGq+BmvNAFYgcK/NMSnl2O5SGT7NMDmmTufVLNPJCpJhzKxkrNvNolMdIIG NHNissObHJ97yOSnpeDxsJnCicOK80kzVFZRKNJdZRSTXaZ5hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg6urqsW37Emgjgu/KsAPgBZgJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGIwMDhlMTQtOGQxOS0z Y2E4LTgyNWUtNGFlMDJlMWNiMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnYngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+sTbMU1PHBAJxjThvPPnDCF86qCKzHQSq0bd3QTYxjXwvN99DF61Lm QMTe8VgMr3lphYtj5zPdKUYimxEpE0APyHhlrcp/F4pL4Y5ZpD1oqIZbIE6sET7v KGeVaFKars0LX1WcK91lEtC33B+hM92DMBcLv6VeF5TALNpIzHVa5MASh9Fh3JH7 suipuiut3Pxk25Wuwln4D4v0GBMVD1oJjkcz9MfVaDasPgtrqQAUQLZdoYJ0w+c/ ZtdkmgziyNAfOaYhHXwhUXoXNeBhfkjaSVDWawRopbOXBVniRI8/FJTFA0T5lx4A R8axcQCaMO2aoX4fXmO7h3AZyzbak8s= -----END CERTIFICATE-----Generated at Fri Apr 17 17:48:15 2026 by rpki-client