$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e74d40a-1697-3568-b95b-3ccc5361e6b3.roa File: 0e74d40a-1697-3568-b95b-3ccc5361e6b3.roa (raw, json) Hash identifier: JIdzkeqyPE8c+avTC5v1ZedwVuMQQ6CNa8ICGiCjZQw= Subject key identifier: 8A:BD:0E:C0:0C:91:1F:BA:39:93:29:C5:AB:AC:6F:88:B7:BF:03:7B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D98BAB150ED2B68CECCB47200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e74d40a-1697-3568-b95b-3ccc5361e6b3.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 207.135.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b1:50:ed:2b:68:ce:cc:b4:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=0ab085c5-8e5e-4215-9d88-802c5ffe9482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:33:a4:2b:07:be:1d:d8:05:10:0c:bc:0f: d1:d2:1c:9c:8e:a0:2f:1a:d7:5b:28:29:f7:7b:2d: 4a:4d:ce:37:08:c5:07:c1:2f:65:d7:fa:11:1a:65: c3:6c:ee:3b:be:94:11:f2:db:c1:52:f1:5d:73:c3: 73:24:d1:4a:f1:39:2b:ca:48:b8:8e:ba:e0:a2:94: e4:a3:d4:cb:16:06:5a:83:fa:f9:9a:d9:07:22:2b: 70:36:7e:9f:9a:12:09:35:64:65:fc:04:09:f2:e8: a2:b3:79:ca:1f:4a:dd:8b:e0:f5:33:a7:2f:ab:07: 85:0b:ba:48:e7:6f:99:3d:44:20:30:7b:47:7b:37: c4:00:17:c4:20:43:2a:19:11:02:8c:00:3e:55:b8: 03:40:7d:05:12:a3:7e:43:31:13:fa:ce:70:09:d2: a3:6b:4c:cc:17:19:4c:1c:4c:09:80:b6:60:eb:12: a0:ea:0c:9a:c8:e0:cd:7d:b2:b8:0c:fe:d4:2a:7f: 5a:10:51:79:ac:64:04:37:a9:e5:5a:85:21:44:8a: 9c:2a:99:c6:36:24:8c:3c:c9:0e:67:91:d5:3e:07: e6:35:44:61:ca:b3:96:6d:e4:94:a9:f5:aa:c6:3b: f1:7e:31:36:a1:1e:3c:d1:e9:fe:0e:fa:1c:63:b4: fb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BD:0E:C0:0C:91:1F:BA:39:93:29:C5:AB:AC:6F:88:B7:BF:03:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e74d40a-1697-3568-b95b-3ccc5361e6b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.135.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:52:28:91:62:64:60:ec:fa:c7:bd:b6:fa:c2:e2:e9:ba:53: ed:80:e7:92:bb:0d:5a:39:2e:9a:11:33:23:df:8b:46:8e:2a: bb:3e:c6:11:88:77:61:1e:3b:72:72:8b:ac:60:11:cc:e8:c2: f1:26:a5:54:7c:54:cb:47:b9:9e:07:77:0d:20:cb:d9:35:f2: c6:ce:39:5b:94:09:4b:9e:cb:78:e4:e6:00:d0:87:1e:cd:77: 02:32:27:09:00:79:3f:31:e0:b3:df:50:a7:f1:3c:ef:ff:2b: cc:1b:4b:f7:c2:07:75:e4:fd:42:79:41:06:4b:ff:6f:a6:8c: 73:2c:4b:23:66:ea:27:82:12:14:ff:0a:fe:4d:a1:c4:ed:84: 5d:ca:47:9e:76:16:ef:b2:24:38:fe:1a:46:af:63:1d:06:31: 93:88:4c:3d:a4:e2:b6:50:34:de:53:ad:25:6e:55:45:88:9b: 66:69:d3:08:bc:6d:76:26:9d:28:b8:a6:a5:25:b3:bd:52:b9: 37:82:61:16:d8:07:b3:2e:93:0e:65:41:a4:09:ca:fe:37:f3: 54:09:54:02:9b:7c:35:8d:b7:62:8d:ea:58:d1:21:ab:fd:e1: 5d:76:0d:0b:fa:68:c0:6e:58:87:2b:6d:1b:30:06:3f:f1:48: 28:6b:c0:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YurFQ7Stozsy0cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MGFiMDg1YzUtOGU1ZS00MjE1LTlkODgtODAyYzVmZmU5NDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpYzpCsHvh3YBRAMvA/R0hycjqAvGtdbKCn3 ey1KTc43CMUHwS9l1/oRGmXDbO47vpQR8tvBUvFdc8NzJNFK8Tkryki4jrrgopTk o9TLFgZag/r5mtkHIitwNn6fmhIJNWRl/AQJ8uiis3nKH0rdi+D1M6cvqweFC7pI 52+ZPUQgMHtHezfEABfEIEMqGRECjAA+VbgDQH0FEqN+QzET+s5wCdKja0zMFxlM HEwJgLZg6xKg6gyayODNfbK4DP7UKn9aEFF5rGQEN6nlWoUhRIqcKpnGNiSMPMkO Z5HVPgfmNURhyrOWbeSUqfWqxjvxfjE2oR480en+DvocY7T7mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq9DsAMkR+6OZMpxausb4i3vwN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGU3NGQ0MGEtMTY5Ny0z NTY4LWI5NWItM2NjYzUzNjFlNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz4cMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNSKJFiZGDs+se9tvrC4um6U+2A55K7DVo5LpoRMyPfi0aOKrs+xhGI d2EeO3Jyi6xgEczowvEmpVR8VMtHuZ4Hdw0gy9k18sbOOVuUCUuey3jk5gDQhx7N dwIyJwkAeT8x4LPfUKfxPO//K8wbS/fCB3Xk/UJ5QQZL/2+mjHMsSyNm6ieCEhT/ Cv5NocTthF3KR552Fu+yJDj+GkavYx0GMZOITD2k4rZQNN5TrSVuVUWIm2Zp0wi8 bXYmnSi4pqUls71SuTeCYRbYB7Mukw5lQaQJyv4381QJVAKbfDWNt2KN6ljRIav9 4V12DQv6aMBuWIcrbRswBj/xSChrwHc= -----END CERTIFICATE-----Generated at Wed May 13 10:44:36 2026 by rpki-client