$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f2d9547-c50a-3b5d-ad0c-479e172cb83b.roa File: 3f2d9547-c50a-3b5d-ad0c-479e172cb83b.roa (raw, json) Hash identifier: sMapp4ZJqLuWkJ6pRcxWGdjInH8+Oqi8NU3b3MUuUEc= Subject key identifier: 00:DB:B1:32:F7:AA:71:69:D2:09:20:79:31:FB:13:B0:A7:54:93:04 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E5028A8DDF026D92A57FB00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f2d9547-c50a-3b5d-ad0c-479e172cb83b.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 160.34.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:28:a8:dd:f0:26:d9:2a:57:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=af0e6318-c836-4db5-83f6-8a624df52835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:b4:2d:8b:38:8d:ea:38:aa:b5:de:36:31: c8:08:30:41:c8:c4:fe:d7:90:d5:33:f3:0b:83:bc: a9:d8:00:f8:8a:45:a1:ed:aa:2b:37:49:9e:88:64: 81:e9:ea:e0:54:d9:d7:bf:8e:04:ed:93:aa:02:c7: f0:ea:6a:96:72:6a:c0:f6:2f:06:7f:6a:6b:3f:9b: 04:e5:1d:55:03:82:e4:a1:28:b3:75:c2:00:72:81: 8b:1d:44:f2:09:e4:47:b7:9d:aa:35:a5:cd:1f:d2: ed:6b:e3:c3:a0:eb:5c:ce:8a:34:6d:a1:a2:97:3e: 2d:d7:57:4f:a9:09:01:b6:dd:4b:d4:30:05:ed:73: 18:73:26:05:3e:c9:f5:6b:ae:4c:b4:5d:0a:f4:3f: b5:16:ec:13:67:ee:5a:f0:4d:9f:8b:41:a2:c0:9d: c5:f1:8d:41:c4:5d:93:cc:55:78:fc:5e:00:e7:21: e7:d8:40:90:f7:31:7f:c8:7d:c2:bb:d0:2a:ce:75: 9b:60:a9:33:d3:7b:f3:78:5c:64:3a:e7:17:60:56: df:95:1a:94:b4:20:fb:c7:ab:de:7e:2e:36:42:b0: 6b:bd:ad:42:83:af:75:d8:90:19:98:d0:8b:5e:aa: 5b:c0:c5:2e:4f:3d:d7:75:52:76:08:ea:80:10:71: 84:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DB:B1:32:F7:AA:71:69:D2:09:20:79:31:FB:13:B0:A7:54:93:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f2d9547-c50a-3b5d-ad0c-479e172cb83b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 160.34.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1f:66:55:66:0d:cf:fc:a3:8a:be:5f:0b:35:b3:78:95:c8: c4:4f:b9:90:bc:0b:19:f8:cc:71:36:29:7e:e5:5d:5f:23:bf: d6:f7:fd:50:c1:96:74:ce:48:75:1e:02:0d:f7:79:3d:bf:38: 08:db:17:13:4b:22:4b:68:6a:80:fd:4d:f9:5d:22:0a:04:b0: 8f:83:c3:e7:dc:3d:ac:e4:ed:44:99:f7:1a:15:e0:05:29:cc: ab:65:3b:ec:bc:4e:45:4c:d3:de:7a:fd:99:ac:5a:7c:f8:a8: 34:86:a3:d4:fd:41:4f:80:b9:df:c1:c6:9b:42:5e:bb:06:21: e0:b2:40:a5:e3:e2:02:ed:62:6a:cc:43:fb:99:29:b6:aa:61: e1:e8:53:90:4b:64:48:a9:68:65:91:ef:6b:3f:ed:e0:4b:91: 75:6a:f8:b0:c7:c9:fb:ab:5e:7a:33:ec:65:43:be:cc:c4:9c: 88:fb:ac:1c:dd:96:e3:ea:fb:3a:2e:73:4e:b6:cd:20:3e:04: 9a:11:f2:bc:b4:e5:27:5a:d0:a8:99:46:6e:3a:b3:dd:4f:c4: ad:9c:64:49:be:c6:53:69:f3:43:1e:f3:4e:64:53:6b:cd:b4: 5b:07:c8:42:85:17:a4:11:cc:13:0c:7d:e7:44:9e:19:24:1a: d4:d9:ea:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCio3fAm2SpX+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YWYwZTYzMTgtYzgzNi00ZGI1LTgzZjYtOGE2MjRkZjUyODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx20LYs4jeo4qrXeNjHICDBByMT+15DVM/ML g7yp2AD4ikWh7aorN0meiGSB6ergVNnXv44E7ZOqAsfw6mqWcmrA9i8Gf2prP5sE 5R1VA4LkoSizdcIAcoGLHUTyCeRHt52qNaXNH9Lta+PDoOtczoo0baGilz4t11dP qQkBtt1L1DAF7XMYcyYFPsn1a65MtF0K9D+1FuwTZ+5a8E2fi0GiwJ3F8Y1BxF2T zFV4/F4A5yHn2ECQ9zF/yH3Cu9AqznWbYKkz03vzeFxkOucXYFbflRqUtCD7x6ve fi42QrBrva1Cg6912JAZmNCLXqpbwMUuTz3XdVJ2COqAEHGEaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADbsTL3qnFp0gkgeTH7E7CnVJMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2YyZDk1NDctYzUwYS0z YjVkLWFkMGMtNDc5ZTE3MmNiODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCJ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUfZlVmDc/8o4q+Xws1s3iVyMRPuZC8Cxn4zHE2KX7lXV8jv9b3/VDB lnTOSHUeAg33eT2/OAjbFxNLIktoaoD9TfldIgoEsI+Dw+fcPazk7USZ9xoV4AUp zKtlO+y8TkVM0956/ZmsWnz4qDSGo9T9QU+Aud/BxptCXrsGIeCyQKXj4gLtYmrM Q/uZKbaqYeHoU5BLZEipaGWR72s/7eBLkXVq+LDHyfurXnoz7GVDvszEnIj7rBzd luPq+zouc062zSA+BJoR8ry05Sda0KiZRm46s91PxK2cZEm+xlNp80Me805kU2vN tFsHyEKFF6QRzBMMfedEnhkkGtTZ6sc= -----END CERTIFICATE-----Generated at Wed May 13 08:47:14 2026 by rpki-client