$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f40c2c35-d1b5-3828-b07b-dbf7b0a67681.roa File: f40c2c35-d1b5-3828-b07b-dbf7b0a67681.roa (raw, json) Hash identifier: FKTO/fBtR13jARE7n3dc2mfrYp+kejVTEV0VtUlvzAU= Subject key identifier: 38:3A:AF:50:3A:D5:04:AA:80:AA:92:09:A8:91:B7:FD:40:35:15:8E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D86957B36E167E6BC0B15BD40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f40c2c35-d1b5-3828-b07b-dbf7b0a67681.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 64.110.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:7b:36:e1:67:e6:bc:0b:15:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=0d6a94ed-5dbb-4fbc-9ebb-e034a45a0d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:48:3d:10:f4:ad:9f:53:0f:1e:e7:b6:40:c3: 2c:9c:93:3b:7c:63:65:92:7f:cc:55:35:34:a8:75: 66:9b:bd:ab:5b:78:58:6c:ac:b0:d4:a5:55:67:2e: 28:3b:ca:19:18:26:6b:60:d7:b9:1e:1b:42:42:9b: 47:5f:3e:87:99:94:9c:64:57:df:6d:66:3f:9d:8a: 91:1e:6f:2d:5b:75:41:67:87:f8:ea:1d:51:d8:5f: 6e:7b:d9:ee:60:9b:90:04:e3:ce:50:7d:8d:22:e7: 13:40:40:65:0d:bd:b3:45:c8:95:d0:ab:e3:c8:9a: 54:b8:f7:cd:ee:6d:47:b0:d2:73:63:ff:cd:7d:7d: 0d:a8:a9:97:75:d0:57:24:3b:14:d4:99:14:e3:14: ae:9f:83:e1:f0:24:11:df:6b:29:c1:ff:61:8d:05: 3c:53:fa:84:07:52:86:e6:f1:1e:3e:c3:e8:ae:57: 76:69:5b:44:3e:e1:72:21:73:d4:e4:18:86:75:22: 98:8d:08:7d:46:54:23:df:d6:cc:2f:10:98:52:08: 7a:9e:48:1b:7d:39:8f:4b:a3:38:a5:c0:6e:9c:50: 57:13:ef:9e:8e:0e:1d:45:7a:30:af:de:a4:4e:65: c0:f1:9a:fd:a2:8e:85:4b:80:a0:f4:96:68:11:11: 92:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3A:AF:50:3A:D5:04:AA:80:AA:92:09:A8:91:B7:FD:40:35:15:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f40c2c35-d1b5-3828-b07b-dbf7b0a67681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.110.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f0:65:17:11:ec:1f:a5:29:cc:f1:e1:45:24:28:cc:ac:79: 4a:72:07:c9:55:10:87:66:fe:8d:63:8e:82:47:e3:0d:59:da: 62:ba:0f:bb:07:58:53:26:b5:94:ee:a8:ce:14:54:58:38:85: 4e:53:8b:ad:aa:b0:fd:0d:51:61:b8:c3:27:50:2e:f1:eb:4b: 1b:df:03:e7:dd:1c:b8:df:50:4d:18:a8:6d:51:3c:b2:4b:55: 8b:0c:0b:d9:ec:2d:11:e8:5e:dd:1e:36:2f:97:53:32:80:f7: d1:a9:82:82:a5:72:0a:f8:22:8b:d3:ee:f2:a9:fd:d2:a4:6c: db:7a:76:6f:78:b2:e1:94:97:6e:51:df:df:07:30:17:35:36: f4:30:23:47:db:bc:41:5c:a4:6e:59:19:0e:fb:3f:8e:21:b8: 73:09:96:03:8d:29:8d:0a:56:df:41:81:fe:25:de:46:e9:3f: 4f:33:ba:f2:68:e3:63:8a:75:2c:f5:c5:e2:04:ad:47:50:39: 7c:3e:40:9c:f6:e5:38:d4:09:61:c2:f5:5a:0c:ac:d2:6c:98: 8b:e6:fa:e1:af:55:54:05:29:78:6a:10:6f:c1:eb:34:a3:e7: a4:d8:fa:f4:d3:91:f4:f4:82:b8:a4:97:c4:14:c5:29:0b:11: 20:ee:c5:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlXs24WfmvAsVvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MGQ2YTk0ZWQtNWRiYi00ZmJjLTllYmItZTAzNGE0NWEwZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ug9EPStn1MPHue2QMMsnJM7fGNlkn/MVTU0 qHVmm72rW3hYbKyw1KVVZy4oO8oZGCZrYNe5HhtCQptHXz6HmZScZFffbWY/nYqR Hm8tW3VBZ4f46h1R2F9ue9nuYJuQBOPOUH2NIucTQEBlDb2zRciV0KvjyJpUuPfN 7m1HsNJzY//NfX0NqKmXddBXJDsU1JkU4xSun4Ph8CQR32spwf9hjQU8U/qEB1KG 5vEePsPorld2aVtEPuFyIXPU5BiGdSKYjQh9RlQj39bMLxCYUgh6nkgbfTmPS6M4 pcBunFBXE++ejg4dRXowr96kTmXA8Zr9oo6FS4Cg9JZoERGSwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg6r1A61QSqgKqSCaiRt/1ANRWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjQwYzJjMzUtZDFiNS0z ODI4LWIwN2ItZGJmN2IwYTY3NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQG5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPwZRcR7B+lKczx4UUkKMyseUpyB8lVEIdm/o1jjoJH4w1Z2mK6D7sH WFMmtZTuqM4UVFg4hU5Ti62qsP0NUWG4wydQLvHrSxvfA+fdHLjfUE0YqG1RPLJL VYsMC9nsLRHoXt0eNi+XUzKA99GpgoKlcgr4IovT7vKp/dKkbNt6dm94suGUl25R 398HMBc1NvQwI0fbvEFcpG5ZGQ77P44huHMJlgONKY0KVt9Bgf4l3kbpP08zuvJo 42OKdSz1xeIErUdQOXw+QJz25TjUCWHC9VoMrNJsmIvm+uGvVVQFKXhqEG/B6zSj 56TY+vTTkfT0grikl8QUxSkLESDuxcs= -----END CERTIFICATE-----Generated at Fri Apr 17 17:47:54 2026 by rpki-client