$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3776c352-5192-35d4-9369-07013e25c256.roa File: 3776c352-5192-35d4-9369-07013e25c256.roa (raw, json) Hash identifier: hBqGNndmn0c/wnSNBcJ2a7xREgXFTXUullvZfYlnoJw= Subject key identifier: C6:9B:D1:15:34:A4:8C:70:E4:5E:65:48:E6:50:8B:E0:CC:A2:EB:74 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D8FDF88B7E210B0E4F680C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3776c352-5192-35d4-9369-07013e25c256.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 134.70.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:df:88:b7:e2:10:b0:e4:f6:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=5265a7c7-c895-423f-af0c-2a7f19bb0348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:ae:c2:83:6d:da:50:d9:1c:9a:be:6a:8b: 57:da:7c:38:7a:9c:1e:c3:a2:da:f4:bc:46:42:74: 3f:0b:52:1e:3d:53:26:0d:7f:cc:96:5e:69:f2:84: 2f:33:48:9b:11:c3:43:c8:75:68:a0:e8:d7:be:12: 0e:21:77:19:a9:e9:db:2e:32:e3:98:48:49:3d:55: 38:0e:03:1e:3a:42:dc:80:57:28:c2:a4:12:7f:eb: 4d:1a:35:f9:6a:09:d0:ad:06:46:1f:11:b7:cc:3a: fd:5e:ff:4c:0f:8e:02:5d:dd:71:c6:5b:6c:dd:e6: 99:fb:fc:44:c4:63:60:8f:b3:80:27:98:58:8e:86: 78:ae:2e:43:84:18:dc:f8:17:00:c4:a1:b7:f5:62: 70:1b:5c:4d:20:e3:83:42:c5:27:56:ab:b1:c1:83: d6:f0:54:7d:af:eb:a4:ca:7c:03:3c:fc:9c:ac:d2: 1e:c2:d5:8a:67:18:78:8a:b0:4b:17:9d:53:7f:94: 05:65:34:33:4b:f5:59:39:e5:36:59:d6:2e:f3:d7: 79:b3:8d:b0:11:75:fd:3c:14:5a:e4:db:82:ca:f7: f5:d7:8b:da:6a:8e:24:c9:3c:1e:7d:41:f4:ad:1b: fe:34:5c:79:31:30:a0:f2:c1:df:c0:df:11:0a:92: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9B:D1:15:34:A4:8C:70:E4:5E:65:48:E6:50:8B:E0:CC:A2:EB:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3776c352-5192-35d4-9369-07013e25c256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9f:44:29:12:d8:57:74:d8:20:cc:66:b6:88:1b:cb:d3:d9: a1:fb:6b:a8:96:7a:f1:38:63:1e:b0:4c:27:2a:99:5c:61:7b: fc:cf:e6:f7:f3:67:17:29:2c:17:9f:95:3c:47:15:a0:2b:75: 37:ba:b8:0f:1c:fb:8f:50:96:22:68:e1:34:3b:1d:7e:38:d9: ff:a4:90:30:9f:83:30:50:49:1a:a3:55:da:ed:14:47:46:19: 2b:37:4d:4a:63:71:d9:62:25:5e:58:21:24:88:82:17:56:cf: 50:85:32:3a:0b:5c:50:8b:d7:b1:43:34:8d:48:03:82:bb:41: 86:25:7c:3c:a9:2a:3a:53:45:9b:b9:bc:02:06:5b:a8:25:29: 00:a3:da:32:69:16:5b:03:70:a5:45:4f:dd:56:1c:05:a8:52: b1:1f:b4:b6:bd:97:46:a1:36:12:fc:bc:9d:ef:21:c6:c7:d4: c2:6c:5b:11:ea:71:8b:20:df:4c:f6:28:ab:ec:61:8a:69:2e: 28:4f:57:cf:71:21:47:6f:7f:39:04:82:73:29:0b:da:5a:47: 4e:e8:c4:96:65:fc:7d:8b:99:b4:d0:bc:a9:50:64:21:5b:ad: d8:32:41:e5:db:4d:73:d7:b7:d2:21:5e:84:10:df:6a:87:73: dc:42:88:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj9+It+IQsOT2gMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk NTI2NWE3YzctYzg5NS00MjNmLWFmMGMtMmE3ZjE5YmIwMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0euwoNt2lDZHJq+aotX2nw4epwew6La9LxG QnQ/C1IePVMmDX/Mll5p8oQvM0ibEcNDyHVooOjXvhIOIXcZqenbLjLjmEhJPVU4 DgMeOkLcgFcowqQSf+tNGjX5agnQrQZGHxG3zDr9Xv9MD44CXd1xxlts3eaZ+/xE xGNgj7OAJ5hYjoZ4ri5DhBjc+BcAxKG39WJwG1xNIOODQsUnVquxwYPW8FR9r+uk ynwDPPycrNIewtWKZxh4irBLF51Tf5QFZTQzS/VZOeU2WdYu89d5s42wEXX9PBRa 5NuCyvf114vaao4kyTwefUH0rRv+NFx5MTCg8sHfwN8RCpIHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMab0RU0pIxw5F5lSOZQi+DMout0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzc3NmMzNTItNTE5Mi0z NWQ0LTkzNjktMDcwMTNlMjVjMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWfRCkS2Fd02CDMZraIG8vT2aH7a6iWevE4Yx6wTCcqmVxhe/zP5vfz ZxcpLBeflTxHFaArdTe6uA8c+49QliJo4TQ7HX442f+kkDCfgzBQSRqjVdrtFEdG GSs3TUpjcdliJV5YISSIghdWz1CFMjoLXFCL17FDNI1IA4K7QYYlfDypKjpTRZu5 vAIGW6glKQCj2jJpFlsDcKVFT91WHAWoUrEftLa9l0ahNhL8vJ3vIcbH1MJsWxHq cYsg30z2KKvsYYppLihPV89xIUdvfzkEgnMpC9paR07oxJZl/H2LmbTQvKlQZCFb rdgyQeXbTXPXt9IhXoQQ32qHc9xCiEY= -----END CERTIFICATE-----Generated at Wed May 13 11:36:07 2026 by rpki-client