$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/425cb91b-5eea-3250-948a-db9be357d3b5.roa File: 425cb91b-5eea-3250-948a-db9be357d3b5.roa (raw, json) Hash identifier: TZFwUi2qvyKodW+3xDTZQx4bBfIf7u0Dc4fHUYG35nA= Subject key identifier: 65:3A:23:F3:8E:E2:BA:30:4B:0A:B7:81:72:34:CC:4D:8A:EB:7E:33 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC6CAF7FEDF121C249CDCB958 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/425cb91b-5eea-3250-948a-db9be357d3b5.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 207.127.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:f7:fe:df:12:1c:24:9c:dc:b9:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=d8a8ef79-290d-4d24-bb60-93150d1c3f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:bf:76:36:04:e2:e9:b6:ac:9d:48:86:4c: 8e:ae:b1:2e:30:c1:96:66:9f:c8:b4:b1:bb:e8:0c: d0:70:38:c8:01:46:9e:ea:12:e4:a9:3a:a3:9e:23: 7b:6c:81:37:d4:08:23:b4:49:e2:11:de:a7:65:23: 53:89:35:d9:90:55:57:01:38:ab:b1:85:eb:7c:df: 62:99:92:5e:ef:6d:cc:9f:f6:46:9f:a3:c0:10:4d: bf:31:24:aa:4e:5d:33:4c:61:b4:8d:4a:1f:b8:f8: 8b:88:f2:d3:ac:08:62:24:02:74:6e:a4:d2:f7:fa: cb:27:10:03:e5:6e:ec:a7:dd:2a:65:1d:34:92:75: 26:9e:2d:b8:06:8f:e9:20:e4:ac:6a:07:87:3f:a4: 38:b3:1d:16:c2:fb:60:28:7b:3d:97:10:16:ee:95: 98:4c:0c:3b:c1:a8:7c:01:ee:f3:cd:e8:e9:af:92: 01:c2:e6:cd:ac:52:3f:fa:e8:de:35:cc:00:e5:b5: c8:38:8c:c6:68:f4:8f:1b:6a:bc:8b:8e:60:94:ce: 5a:66:39:42:b2:5b:cc:49:5e:d5:54:a3:d4:c2:da: 33:83:34:1b:02:17:c9:35:13:ae:d2:58:61:c7:93: bf:87:b3:9c:ba:04:b8:0b:8c:b1:c5:5d:23:6e:4e: 6c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3A:23:F3:8E:E2:BA:30:4B:0A:B7:81:72:34:CC:4D:8A:EB:7E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/425cb91b-5eea-3250-948a-db9be357d3b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.127.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:62:26:d6:41:0a:7a:bf:8e:43:05:43:0a:65:89:77:46:88: e8:35:7a:56:ec:a6:ff:a4:d0:49:b8:15:8f:cf:e8:b1:f4:3d: a6:9a:2e:83:ea:40:84:46:27:8f:ac:49:6e:8f:97:70:56:66: 1e:b6:fb:51:27:de:41:ee:d4:05:10:a4:a4:55:5b:a2:53:e0: 98:57:e0:d2:c7:08:f2:26:5b:d6:a1:61:6f:2e:e9:81:85:cd: eb:02:dc:30:4f:2a:a2:e7:4d:ad:9a:75:00:d1:a5:bd:22:c6: 34:90:5a:6e:c4:43:c2:6d:1f:1e:55:69:2b:ca:34:8a:45:a9: 29:e7:27:6c:46:bb:41:cc:12:db:90:06:df:1e:9d:15:ef:ac: bd:9d:11:1c:d7:16:71:f4:ac:12:0d:1e:68:69:6e:16:03:c4: fd:93:e1:9b:46:be:ba:40:02:69:fb:00:95:ca:8b:7c:45:03: b3:48:f1:81:6d:19:13:c7:f3:1d:79:30:fd:19:be:b4:b8:62: 47:ef:5e:61:7b:7b:c9:66:19:34:b2:06:00:ef:9f:f9:f1:77: 0d:75:3d:17:7b:9a:a6:ff:58:0a:34:d7:39:bb:14:3b:d4:13: bf:75:7c:7a:b9:26:f8:0c:be:30:9f:e4:48:41:af:a5:f9:66: 3b:47:7a:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Gyvf+3xIcJJzcuVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk ZDhhOGVmNzktMjkwZC00ZDI0LWJiNjAtOTMxNTBkMWMzZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXu/djYE4um2rJ1IhkyOrrEuMMGWZp/ItLG7 6AzQcDjIAUae6hLkqTqjniN7bIE31AgjtEniEd6nZSNTiTXZkFVXATirsYXrfN9i mZJe723Mn/ZGn6PAEE2/MSSqTl0zTGG0jUofuPiLiPLTrAhiJAJ0bqTS9/rLJxAD 5W7sp90qZR00knUmni24Bo/pIOSsageHP6Q4sx0WwvtgKHs9lxAW7pWYTAw7wah8 Ae7zzejpr5IBwubNrFI/+ujeNcwA5bXIOIzGaPSPG2q8i45glM5aZjlCslvMSV7V VKPUwtozgzQbAhfJNROu0lhhx5O/h7OcugS4C4yxxV0jbk5sDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU6I/OO4rowSwq3gXI0zE2K634zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDI1Y2I5MWItNWVlYS0z MjUwLTk0OGEtZGI5YmUzNTdkM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz394MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1iJtZBCnq/jkMFQwpliXdGiOg1elbspv+k0Em4FY/P6LH0PaaaLoPq QIRGJ4+sSW6Pl3BWZh62+1En3kHu1AUQpKRVW6JT4JhX4NLHCPImW9ahYW8u6YGF zesC3DBPKqLnTa2adQDRpb0ixjSQWm7EQ8JtHx5VaSvKNIpFqSnnJ2xGu0HMEtuQ Bt8enRXvrL2dERzXFnH0rBINHmhpbhYDxP2T4ZtGvrpAAmn7AJXKi3xFA7NI8YFt GRPH8x15MP0ZvrS4YkfvXmF7e8lmGTSyBgDvn/nxdw11PRd7mqb/WAo01zm7FDvU E791fHq5JvgMvjCf5EhBr6X5ZjtHeto= -----END CERTIFICATE-----Generated at Wed May 13 06:43:15 2026 by rpki-client