$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1177357f-8429-340d-92e6-efa42de387f4.roa File: 1177357f-8429-340d-92e6-efa42de387f4.roa (raw, json) Hash identifier: A5LcY4iZavEcJhvQnhB6mhb127Az1kD5IwhRzgXghjg= Subject key identifier: 6B:DC:22:71:66:F9:D1:C2:6B:0F:0C:2F:5D:59:1E:E8:47:DD:E9:00 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D98BAA2FEA971BFAC8B1B5B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1177357f-8429-340d-92e6-efa42de387f4.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 168.129.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a2:fe:a9:71:bf:ac:8b:1b:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=99605a5a-abe9-4525-8de6-5ec2d3b138f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:75:64:89:ed:57:a5:60:d9:d4:f4:e8:ef: d0:50:1b:96:46:48:ca:09:4d:71:fa:5b:23:4a:0e: 00:7d:ff:c4:78:33:f1:ad:05:a8:54:44:af:a2:f5: 08:5a:53:84:2a:c8:c0:6a:19:a4:ac:b9:10:6b:81: 6b:4a:6b:3a:de:ec:d7:0e:3d:9b:21:6c:e8:83:45: 93:c3:b5:ca:84:c4:13:e9:12:f7:d2:3f:af:a3:2b: 0e:e4:2a:40:b3:5a:a5:4c:fb:29:e3:2b:87:78:3d: 9d:a9:f6:39:61:c2:68:07:88:3f:7c:32:2e:5d:d9: 79:36:3c:42:29:5f:40:6e:04:2a:00:df:cb:db:5a: 4d:f6:8f:fa:73:03:05:ac:99:82:d7:56:f8:c9:4a: 23:ff:7b:87:a6:9f:52:01:a0:a6:83:5c:38:77:d4: f7:68:49:f1:c4:d4:5f:46:f8:c0:17:ed:79:17:ee: a3:92:97:3a:26:79:db:46:8d:f5:c4:5e:6a:43:18: 9d:3d:6d:6a:2f:fe:7d:59:e7:20:7b:bf:b2:02:9d: 5a:c3:cc:f5:f3:f3:3a:22:05:b7:49:da:06:72:2c: 86:57:9d:d2:f8:aa:c8:87:fa:b2:ab:f4:bd:64:1f: ec:2a:5b:9f:90:bc:22:b2:92:8c:98:b8:98:dd:a4: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DC:22:71:66:F9:D1:C2:6B:0F:0C:2F:5D:59:1E:E8:47:DD:E9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1177357f-8429-340d-92e6-efa42de387f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:90:11:73:cd:88:ae:f6:c2:6d:cf:51:3c:ab:55:15:4a:18: 36:e6:f0:6d:c3:df:40:c4:67:dd:9c:5e:f0:f2:90:06:1f:fb: b3:cd:87:3f:d4:7f:25:9e:3f:04:67:d1:03:c6:d1:02:30:2d: 4e:a1:a5:24:77:06:a0:fa:af:c6:55:3a:cb:c1:9b:de:80:78: 4d:20:cb:93:3b:1b:3c:c0:97:d3:fd:7a:39:60:63:31:c0:a4: aa:a8:21:99:eb:d6:7c:4b:07:af:9e:82:76:8e:68:28:f4:6d: 09:82:00:5d:6b:00:77:d1:7d:43:c1:ae:cf:3a:ca:06:55:68: 45:ed:54:90:86:ed:c0:48:ea:c1:64:78:8d:14:d0:3c:92:7c: 70:b8:4a:b8:55:21:d0:84:8b:62:96:81:b2:72:7e:02:04:8f: dc:27:59:95:a8:ea:f7:5e:ea:91:16:ff:1a:1c:d0:b5:10:d0: 39:26:98:3b:84:06:e6:42:73:bb:85:e6:d0:ba:11:9a:2f:f5: 24:0c:ae:10:6c:9d:22:fe:cb:89:9e:df:e2:f7:35:02:7d:e9: 96:5e:29:bf:dc:05:38:e2:bc:0b:c8:d0:a4:12:c1:a2:68:7c: f0:13:80:d0:f1:3b:57:a5:a8:5d:d0:a6:6d:7e:ef:00:7f:c6: 5b:eb:76:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqL+qXG/rIsbWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk OTk2MDVhNWEtYWJlOS00NTI1LThkZTYtNWVjMmQzYjEzOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha11ZIntV6Vg2dT06O/QUBuWRkjKCU1x+lsj Sg4Aff/EeDPxrQWoVESvovUIWlOEKsjAahmkrLkQa4FrSms63uzXDj2bIWzog0WT w7XKhMQT6RL30j+voysO5CpAs1qlTPsp4yuHeD2dqfY5YcJoB4g/fDIuXdl5NjxC KV9AbgQqAN/L21pN9o/6cwMFrJmC11b4yUoj/3uHpp9SAaCmg1w4d9T3aEnxxNRf RvjAF+15F+6jkpc6JnnbRo31xF5qQxidPW1qL/59Wecge7+yAp1aw8z18/M6IgW3 SdoGciyGV53S+KrIh/qyq/S9ZB/sKlufkLwispKMmLiY3aQOywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvcInFm+dHCaw8ML11ZHuhH3ekAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTE3NzM1N2YtODQyOS0z NDBkLTkyZTYtZWZhNDJkZTM4N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqIFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+QEXPNiK72wm3PUTyrVRVKGDbm8G3D30DEZ92cXvDykAYf+7PNhz/U fyWePwRn0QPG0QIwLU6hpSR3BqD6r8ZVOsvBm96AeE0gy5M7GzzAl9P9ejlgYzHA pKqoIZnr1nxLB6+egnaOaCj0bQmCAF1rAHfRfUPBrs86ygZVaEXtVJCG7cBI6sFk eI0U0DySfHC4SrhVIdCEi2KWgbJyfgIEj9wnWZWo6vde6pEW/xoc0LUQ0DkmmDuE BuZCc7uF5tC6EZov9SQMrhBsnSL+y4me3+L3NQJ96ZZeKb/cBTjivAvI0KQSwaJo fPATgNDxO1elqF3Qpm1+7wB/xlvrdiQ= -----END CERTIFICATE-----Generated at Wed May 13 08:49:10 2026 by rpki-client