$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f630e459-69dd-3a1f-8444-214c6afa0049.roa File: f630e459-69dd-3a1f-8444-214c6afa0049.roa (raw, json) Hash identifier: ywXo57A2hvXcbSKMo6DTDI3mS+SACm5SdpsMVaVjr5w= Subject key identifier: 06:D2:95:22:B9:0D:87:78:C8:BE:AA:33:E9:48:AD:53:0E:2C:3F:EC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D86953D35186FE53A46BFD880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f630e459-69dd-3a1f-8444-214c6afa0049.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 207.127.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:3d:35:18:6f:e5:3a:46:bf:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=5f020618-1002-48c2-80a6-39b8328fb592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bd:2e:c6:44:57:71:3e:f1:a3:e4:92:2b:ad: d8:ad:c2:00:45:70:a4:7f:1b:94:be:5d:fc:5b:db: 84:f3:a8:8e:df:ff:b8:3c:73:33:51:58:32:88:87: 5c:8e:92:40:4e:5b:b1:5b:6f:05:02:04:03:6e:31: d9:3d:c7:89:df:d0:b6:4a:1b:b9:bd:25:21:13:c2: 48:66:bc:3e:2e:4a:9c:6b:74:e7:a8:cf:e8:7e:90: 3a:2e:2e:18:d8:b4:df:3b:58:d4:27:dc:e6:83:d1: ec:af:74:e8:da:22:42:23:27:91:c0:f0:4e:3d:45: d5:e9:a5:52:45:05:0a:e0:4f:d0:60:1d:5e:ef:dc: 06:33:dc:85:73:1f:2c:30:60:25:d0:13:8b:f8:8f: db:40:38:97:ba:c8:4a:8b:1f:a0:87:73:2d:13:85: c7:f5:c3:93:4d:e1:4d:80:31:28:bc:0f:86:f9:36: 6f:d6:b4:38:dd:1e:8d:c4:32:de:95:2f:0a:54:99: 63:58:33:25:23:c3:ae:c4:42:51:be:a6:f3:f2:77: f5:9e:18:63:b5:d7:ce:68:e2:e1:e2:e0:a8:cc:20: a3:fb:ec:67:7a:b4:d7:37:34:71:70:85:bb:03:cd: a3:1a:20:59:89:25:91:fc:11:7d:89:e3:8a:b0:a0: 0a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D2:95:22:B9:0D:87:78:C8:BE:AA:33:E9:48:AD:53:0E:2C:3F:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f630e459-69dd-3a1f-8444-214c6afa0049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.127.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1e:58:35:a5:68:ed:d8:4e:ec:8d:4d:e4:02:0d:88:e2:c0: 84:05:70:ce:54:15:72:c2:70:de:22:b1:94:96:3b:47:fa:2f: ea:e9:47:11:ba:28:cc:75:59:d7:97:98:13:96:16:73:5e:b4: ce:c6:d8:e4:51:3a:65:2c:fb:0d:e1:0d:de:5b:57:ab:6f:82: f8:a7:fd:5a:b4:19:79:c5:ce:dc:97:8b:e5:74:ff:f3:b2:a0: 39:85:0f:c4:35:a6:8e:97:94:b9:fb:eb:c2:10:a3:58:de:e1: d4:5e:cc:bb:e3:8d:70:51:e9:11:4a:5a:27:0f:b5:ab:76:b3: 35:b8:4d:c1:16:38:8c:14:95:dd:97:31:0b:72:1e:aa:74:7e: cc:51:f0:40:9f:fa:a6:55:ef:0a:2e:4d:d6:3b:58:21:9f:5f: 70:2d:41:ee:43:7f:ca:61:9c:53:08:af:8a:34:e7:f1:aa:62: 66:30:1e:49:6e:a7:34:82:51:c4:c1:0d:b1:ac:85:b9:21:41: 0c:46:9f:41:0d:67:50:0e:45:a3:e8:9c:d1:78:f5:0c:d1:eb: 15:0d:37:d0:73:72:57:16:cb:ab:64:3c:68:e2:17:67:ee:23: 31:cb:bc:51:0e:5e:2f:46:6b:b7:ad:e6:4b:24:55:70:b2:f9: 86:ed:3c:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlT01GG/lOka/2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NWYwMjA2MTgtMTAwMi00OGMyLTgwYTYtMzliODMyOGZiNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj70uxkRXcT7xo+SSK63YrcIARXCkfxuUvl38 W9uE86iO3/+4PHMzUVgyiIdcjpJATluxW28FAgQDbjHZPceJ39C2Shu5vSUhE8JI Zrw+Lkqca3TnqM/ofpA6Li4Y2LTfO1jUJ9zmg9Hsr3To2iJCIyeRwPBOPUXV6aVS RQUK4E/QYB1e79wGM9yFcx8sMGAl0BOL+I/bQDiXushKix+gh3MtE4XH9cOTTeFN gDEovA+G+TZv1rQ43R6NxDLelS8KVJljWDMlI8OuxEJRvqbz8nf1nhhjtdfOaOLh 4uCozCCj++xnerTXNzRxcIW7A82jGiBZiSWR/BF9ieOKsKAKmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbSlSK5DYd4yL6qM+lIrVMOLD/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjYzMGU0NTktNjlkZC0z YTFmLTg0NDQtMjE0YzZhZmEwMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz39gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYeWDWlaO3YTuyNTeQCDYjiwIQFcM5UFXLCcN4isZSWO0f6L+rpRxG6 KMx1WdeXmBOWFnNetM7G2ORROmUs+w3hDd5bV6tvgvin/Vq0GXnFztyXi+V0//Oy oDmFD8Q1po6XlLn768IQo1je4dRezLvjjXBR6RFKWicPtat2szW4TcEWOIwUld2X MQtyHqp0fsxR8ECf+qZV7wouTdY7WCGfX3AtQe5Df8phnFMIr4o05/GqYmYwHklu pzSCUcTBDbGshbkhQQxGn0ENZ1AORaPonNF49QzR6xUNN9BzclcWy6tkPGjiF2fu IzHLvFEOXi9Ga7et5kskVXCy+YbtPM4= -----END CERTIFICATE-----Generated at Fri Apr 17 16:25:07 2026 by rpki-client