$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/256db7d7-b2e0-33d9-94c7-041035d5ff97.roa File: 256db7d7-b2e0-33d9-94c7-041035d5ff97.roa (raw, json) Hash identifier: CvmMl1metUDLeQp84cVj4gHbGPTIXSca6CSevEY11mc= Subject key identifier: AC:8D:1D:13:0D:41:12:58:58:61:74:86:0F:12:6E:03:C3:93:5E:25 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC6CB02B21BE935746BBBA168 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/256db7d7-b2e0-33d9-94c7-041035d5ff97.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 159.13.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:02:b2:1b:e9:35:74:6b:bb:a1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=973b60ab-751a-4229-af96-b65fa64e96e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:b7:7c:71:e9:67:8e:32:84:8c:d1:57:ce: b0:a6:04:2b:2b:79:7e:3b:2f:58:30:33:59:1b:be: 08:93:8e:bd:c5:91:68:00:86:ab:5a:7a:02:d7:aa: 29:17:1f:01:66:36:31:67:ea:2a:4e:6a:dd:61:1e: f0:59:83:65:96:56:0f:75:e1:7a:3a:0e:40:07:44: 8e:0c:34:ab:bb:fb:07:18:d2:17:50:20:76:2a:bb: c8:97:5c:27:dc:12:d7:f1:6c:39:32:14:28:39:79: 2f:96:b4:db:7d:19:92:79:5a:58:be:68:f4:7f:fe: d6:42:d4:38:98:58:a6:c9:7e:43:b6:a6:7f:76:65: e4:04:e8:0b:46:22:3c:ee:b0:e2:d9:85:a2:52:db: 11:8c:bd:dd:e0:60:c1:5d:77:01:76:c7:fb:e5:17: 1a:a5:da:46:aa:c2:a7:a3:fd:81:90:d0:f0:61:e2: f1:32:7e:9b:e6:de:77:d6:e8:47:b7:dd:2b:3c:1a: f8:d0:57:72:37:5d:48:c9:cf:6d:0c:01:b5:30:c2: b6:7e:c3:c4:59:6d:49:aa:14:52:1d:52:4d:80:42: ee:de:32:ad:44:3b:f9:83:1f:a6:20:3f:56:08:d8: 19:c9:b8:01:c3:c5:1d:f2:d4:0b:90:0f:72:49:37: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8D:1D:13:0D:41:12:58:58:61:74:86:0F:12:6E:03:C3:93:5E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/256db7d7-b2e0-33d9-94c7-041035d5ff97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.13.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:12:c9:5f:f6:fa:b1:90:c8:6f:9c:a8:a4:fd:26:b2:dc:90: b9:e0:00:a7:cf:87:81:bc:d6:a5:7b:f4:24:8e:b3:fd:21:63: d6:26:40:cf:1d:5d:b3:ab:cf:fa:e9:05:df:2d:4f:95:91:12: 30:24:14:7b:74:e5:27:a3:43:1b:88:3d:ef:9f:bc:23:b5:a3: 17:ef:55:c9:f2:d3:6a:60:86:d1:08:f0:5c:40:7b:d8:09:e1: 40:ac:e9:dd:cd:a6:f0:6c:9a:61:19:8a:b2:72:09:40:57:fe: 6a:7b:15:92:40:d5:84:9b:28:0f:16:17:71:ff:f2:64:de:5c: 14:09:c5:58:22:86:38:64:ef:50:00:7d:88:77:67:79:bc:35: 76:f2:f5:cc:5f:20:c4:94:14:be:bf:3f:58:19:82:30:4b:80: 15:bf:dd:36:2a:2a:82:9b:8f:7f:ad:52:0b:8a:40:b8:9d:12: 66:18:bd:6e:3f:43:dd:5d:05:02:5c:1f:21:2b:58:2d:0c:8e: be:f5:1a:5b:f5:d2:29:36:94:e1:86:fc:e7:f5:67:47:ed:f5: 29:c2:0e:c0:61:69:2b:2b:c4:5d:10:03:94:3f:61:90:7d:c2: ee:87:58:a9:fb:39:06:5b:a1:73:2b:7a:d3:50:4b:fa:9d:90: 1a:40:ee:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GywKyG+k1dGu7oWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk OTczYjYwYWItNzUxYS00MjI5LWFmOTYtYjY1ZmE2NGU5NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHG3fHHpZ44yhIzRV86wpgQrK3l+Oy9YMDNZ G74Ik469xZFoAIarWnoC16opFx8BZjYxZ+oqTmrdYR7wWYNlllYPdeF6Og5AB0SO DDSru/sHGNIXUCB2KrvIl1wn3BLX8Ww5MhQoOXkvlrTbfRmSeVpYvmj0f/7WQtQ4 mFimyX5DtqZ/dmXkBOgLRiI87rDi2YWiUtsRjL3d4GDBXXcBdsf75RcapdpGqsKn o/2BkNDwYeLxMn6b5t531uhHt90rPBr40FdyN11Iyc9tDAG1MMK2fsPEWW1JqhRS HVJNgELu3jKtRDv5gx+mID9WCNgZybgBw8Ud8tQLkA9ySTc6BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyNHRMNQRJYWGF0hg8SbgPDk14lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjU2ZGI3ZDctYjJlMC0z M2Q5LTk0YzctMDQxMDM1ZDVmZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnw1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQSyV/2+rGQyG+cqKT9JrLckLngAKfPh4G81qV79CSOs/0hY9YmQM8d XbOrz/rpBd8tT5WREjAkFHt05SejQxuIPe+fvCO1oxfvVcny02pghtEI8FxAe9gJ 4UCs6d3NpvBsmmEZirJyCUBX/mp7FZJA1YSbKA8WF3H/8mTeXBQJxVgihjhk71AA fYh3Z3m8NXby9cxfIMSUFL6/P1gZgjBLgBW/3TYqKoKbj3+tUguKQLidEmYYvW4/ Q91dBQJcHyErWC0Mjr71Glv10ik2lOGG/Of1Z0ft9SnCDsBhaSsrxF0QA5Q/YZB9 wu6HWKn7OQZboXMretNQS/qdkBpA7oc= -----END CERTIFICATE-----Generated at Wed May 13 06:53:28 2026 by rpki-client