$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa File: 973b87f5-9931-320b-9f50-5352dd3a2bb7.roa (raw, json) Hash identifier: iVmd6mpuqxsYJYPiew1bKeJHQf00aCY/KZEwr0QC3+0= Subject key identifier: 81:C1:8C:D3:E3:BC:42:3B:E3:86:01:42:25:D4:55:F2:2A:00:02:87 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC45913B37F73019043BC6C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54858 IP address blocks: 209.34.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:91:3b:37:f7:30:19:04:3b:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=b80e74bc-741f-4da2-a6d0-f911e2cab965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:5b:0d:57:92:7d:b6:f1:b1:fb:b1:09:30: 63:30:e8:4f:73:a0:4e:69:fb:a7:a0:dd:1d:15:5f: 31:e4:0e:c5:51:1e:a6:f9:c0:a5:59:2c:e4:3d:e7: 49:54:e1:66:e7:5d:4d:df:f8:06:9a:d0:dc:92:46: 66:32:8b:27:00:f6:e1:b6:ab:f1:a4:8e:51:21:f2: 56:db:c3:43:03:73:93:d4:39:f3:00:a0:fc:71:42: 2a:1c:59:cc:33:0f:f4:f2:09:d3:e1:a3:75:25:e2: 3e:30:03:83:76:66:f5:9f:ef:53:50:ba:4a:10:48: 74:bf:79:87:d5:a7:3f:7f:8f:60:c9:ab:94:1f:f4: c2:1c:d1:ca:20:cf:c4:14:51:51:b8:1f:04:ca:f2: b5:bf:74:13:e9:47:1a:fa:59:7b:5a:88:80:b3:0e: 45:da:f5:de:6e:1e:e8:3d:e7:b3:49:ac:90:53:e8: 0b:06:2d:de:bf:ea:bf:b1:ae:c0:75:4d:5e:ac:54: d1:9b:33:22:a3:dc:8d:16:88:ea:d3:1b:c0:c0:f0: 61:9e:f4:75:07:4c:a2:00:0e:e9:0c:cb:bd:97:15: d7:e1:af:a7:c7:5d:df:f1:f6:9b:f8:9f:1e:5d:dc: a8:85:13:f2:7d:57:89:ca:9e:46:0f:3a:2b:e0:b4: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C1:8C:D3:E3:BC:42:3B:E3:86:01:42:25:D4:55:F2:2A:00:02:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 209.34.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d6:e5:67:fb:13:63:32:c5:6f:09:d1:75:c5:9c:f8:2a:6e: d9:1d:bc:bf:34:83:c3:f4:bc:59:dc:73:4e:53:f7:fc:6d:8d: 8d:d3:74:d4:f7:c6:21:2b:d8:a9:c2:1d:1c:86:4a:77:cd:0f: 83:2b:c9:ea:1e:54:19:72:fb:d5:93:ca:7b:fc:ee:23:78:96: 63:59:c8:de:37:68:1a:99:96:47:d5:68:ef:be:35:cb:50:5d: d3:b7:46:9a:86:76:b8:60:86:07:1d:3a:f4:53:99:89:58:e1: 26:06:a7:9f:6b:fd:a3:6d:5e:b8:96:d1:45:38:bc:53:34:a7: 65:74:dc:19:1e:b8:93:60:0b:e6:8b:16:04:ab:29:b6:07:e5: e8:59:c2:3f:5f:bc:dc:44:91:40:45:86:af:13:9d:12:17:84: 6c:7d:16:99:2c:da:26:1a:4c:23:fd:36:fc:b3:06:63:1a:5e: 77:31:42:aa:c1:0d:0f:76:a1:e5:3a:a1:2d:94:5a:96:8c:6f: d5:ce:07:b2:91:ed:9f:a4:8e:90:9f:7e:a7:34:d7:c9:60:12: 02:8e:6e:76:6c:27:33:4e:f0:1d:b4:cb:e3:ff:dc:ee:91:81: 68:10:66:5d:1b:e3:ec:70:d6:d4:ee:74:56:58:b0:7d:9a:fe: f1:3d:70:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZE7N/cwGQQ7xsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk YjgwZTc0YmMtNzQxZi00ZGEyLWE2ZDAtZjkxMWUyY2FiOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+BbDVeSfbbxsfuxCTBjMOhPc6BOafunoN0d FV8x5A7FUR6m+cClWSzkPedJVOFm511N3/gGmtDckkZmMosnAPbhtqvxpI5RIfJW 28NDA3OT1DnzAKD8cUIqHFnMMw/08gnT4aN1JeI+MAODdmb1n+9TULpKEEh0v3mH 1ac/f49gyauUH/TCHNHKIM/EFFFRuB8EyvK1v3QT6Uca+ll7WoiAsw5F2vXebh7o PeezSayQU+gLBi3ev+q/sa7AdU1erFTRmzMio9yNFojq0xvAwPBhnvR1B0yiAA7p DMu9lxXX4a+nx13f8fab+J8eXdyohRPyfVeJyp5GDzor4LSK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHBjNPjvEI744YBQiXUVfIqAAKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTczYjg3ZjUtOTkzMS0z MjBiLTlmNTAtNTM1MmRkM2EyYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0SKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfW5Wf7E2MyxW8J0XXFnPgqbtkdvL80g8P0vFncc05T9/xtjY3TdNT3 xiEr2KnCHRyGSnfND4MryeoeVBly+9WTynv87iN4lmNZyN43aBqZlkfVaO++NctQ XdO3RpqGdrhghgcdOvRTmYlY4SYGp59r/aNtXriW0UU4vFM0p2V03BkeuJNgC+aL FgSrKbYH5ehZwj9fvNxEkUBFhq8TnRIXhGx9Fpks2iYaTCP9NvyzBmMaXncxQqrB DQ92oeU6oS2UWpaMb9XOB7KR7Z+kjpCffqc018lgEgKObnZsJzNO8B20y+P/3O6R gWgQZl0b4+xw1tTudFZYsH2a/vE9cL4= -----END CERTIFICATE-----Generated at Wed May 13 05:34:12 2026 by rpki-client