$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3324a74c-a30a-3cb1-a405-cfaf533ccc3c.roa File: 3324a74c-a30a-3cb1-a405-cfaf533ccc3c.roa (raw, json) Hash identifier: 2b4R3UZQgwIO+1rZ/U8mlMdjANx/FWnUpO0RPfKitZU= Subject key identifier: 1C:1D:94:C2:BE:8A:9D:61:08:A0:91:82:53:B6:A2:83:AC:59:F7:C2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A20300858DAA007008B0620 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3324a74c-a30a-3cb1-a405-cfaf533ccc3c.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 134.70.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:30:08:58:da:a0:07:00:8b:06:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=1f16d695-35aa-4ce0-a01e-3287842959eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:63:50:27:3d:49:0f:9c:66:bf:bb:15:b6:67: 13:11:9e:7e:e8:a8:46:49:cb:f2:83:8d:3c:05:84: de:03:d8:cb:8c:12:16:e3:5c:1a:ee:98:2d:76:93: 85:71:36:a7:07:bb:e7:9f:f1:0f:47:8c:a7:44:d2: 3c:de:e7:04:5d:92:66:10:89:ef:08:8f:66:89:f1: 1c:c6:28:3a:7a:1d:a8:ce:eb:3f:d0:51:6b:95:95: 08:00:fe:9a:3b:84:be:6d:48:9e:22:62:1f:29:11: aa:05:4d:77:83:d0:9a:0b:5b:05:30:23:80:c2:d7: dc:ca:56:03:12:1e:51:b7:a6:a7:51:a5:f7:63:5f: 02:5b:d6:9d:3e:bd:dc:3d:ef:44:9b:ce:4f:49:b6: 4f:72:0b:60:6e:cb:4d:82:60:83:ff:54:bb:cf:3b: 8b:f4:bb:91:f1:d3:c7:7a:f0:93:a4:6a:29:a4:c7: 83:e3:8b:7d:11:50:2e:0c:6f:1d:6b:f3:5f:fa:19: 3a:f3:5e:05:83:ca:f0:20:04:01:1e:3c:d6:91:0e: 07:53:43:b7:05:11:ac:6e:56:27:ab:8e:c7:f8:84: b3:46:d1:82:2d:9f:96:a3:b0:74:31:3d:46:31:b3: ee:94:66:34:87:54:c6:fa:7f:f3:21:d6:a6:7d:cc: 84:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1D:94:C2:BE:8A:9D:61:08:A0:91:82:53:B6:A2:83:AC:59:F7:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3324a74c-a30a-3cb1-a405-cfaf533ccc3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:11:c7:ba:5f:ed:3f:77:63:d6:d9:ed:9e:df:0b:89:66:10: a1:ec:3a:9e:ce:5d:8a:67:c4:69:0d:77:90:a1:ce:e6:d6:7e: a1:72:57:f0:7e:3e:3b:1d:ad:6b:37:d1:c8:b7:2c:b5:85:fa: 64:43:79:03:7d:f0:70:f1:a0:ca:93:9a:24:3d:1f:51:4f:cf: d9:e3:34:53:c7:28:c0:1c:31:0e:cc:96:08:9f:d6:73:da:93: a3:75:44:07:a0:bb:e4:76:d9:25:98:76:b1:90:4a:44:c5:bc: c5:18:c4:3f:c1:62:8b:94:fb:03:df:fd:b4:37:00:55:bb:9d: 9c:dc:99:eb:63:a7:67:85:6d:68:f3:cb:3e:bc:55:c7:02:e6: 76:02:df:3c:d9:d1:2f:b3:21:34:b9:d4:d0:bc:9a:2a:f3:15: 58:07:6e:ce:6d:63:78:11:d5:ea:53:bd:e1:25:10:72:10:47: e2:4e:74:31:5f:fd:f5:b0:22:fe:d4:79:e8:19:74:56:f8:f4: 1f:2f:cf:fd:40:fe:74:aa:66:49:9a:5c:98:3a:c7:44:2c:86: 84:cb:17:9a:5a:1e:8b:46:84:b3:1d:6b:06:5c:78:35:9d:bf: 28:fc:d1:b0:2e:37:18:18:3e:1c:90:02:8b:bf:16:7b:b8:b6: 02:a9:9b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDAIWNqgBwCLBiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MWYxNmQ2OTUtMzVhYS00Y2UwLWEwMWUtMzI4Nzg0Mjk1OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2NQJz1JD5xmv7sVtmcTEZ5+6KhGScvyg408 BYTeA9jLjBIW41wa7pgtdpOFcTanB7vnn/EPR4ynRNI83ucEXZJmEInvCI9mifEc xig6eh2ozus/0FFrlZUIAP6aO4S+bUieImIfKRGqBU13g9CaC1sFMCOAwtfcylYD Eh5Rt6anUaX3Y18CW9adPr3cPe9Em85PSbZPcgtgbstNgmCD/1S7zzuL9LuR8dPH evCTpGoppMeD44t9EVAuDG8da/Nf+hk6814Fg8rwIAQBHjzWkQ4HU0O3BRGsblYn q47H+ISzRtGCLZ+Wo7B0MT1GMbPulGY0h1TG+n/zIdamfcyE1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwdlMK+ip1hCKCRglO2ooOsWffCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzMyNGE3NGMtYTMwYS0z Y2IxLWE0MDUtY2ZhZjUzM2NjYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4Rx7pf7T93Y9bZ7Z7fC4lmEKHsOp7OXYpnxGkNd5ChzubWfqFyV/B+ PjsdrWs30ci3LLWF+mRDeQN98HDxoMqTmiQ9H1FPz9njNFPHKMAcMQ7Mlgif1nPa k6N1RAegu+R22SWYdrGQSkTFvMUYxD/BYouU+wPf/bQ3AFW7nZzcmetjp2eFbWjz yz68VccC5nYC3zzZ0S+zITS51NC8mirzFVgHbs5tY3gR1epTveElEHIQR+JOdDFf /fWwIv7UeegZdFb49B8vz/1A/nSqZkmaXJg6x0QshoTLF5paHotGhLMdawZceDWd vyj80bAuNxgYPhyQAou/Fnu4tgKpm5Q= -----END CERTIFICATE-----Generated at Wed May 13 05:38:32 2026 by rpki-client