$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a76ef17-2f01-37a9-a111-42a266f553f5.roa File: 4a76ef17-2f01-37a9-a111-42a266f553f5.roa (raw, json) Hash identifier: Ri+Rzm9Ohjwt8wcYJJeM5OmjszIc05frePga5WKlHd0= Subject key identifier: 4D:83:BE:6D:1C:EC:8E:B0:91:91:5C:CA:CC:55:CD:D4:F6:C2:A2:16 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E502A4C76C9EFDAB2EF8980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a76ef17-2f01-37a9-a111-42a266f553f5.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 134.185.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2a:4c:76:c9:ef:da:b2:ef:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=b5b5f1c6-ecd8-45e1-81ea-9b53760b775a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:e4:78:a5:87:e8:b8:04:0e:5e:7f:de:0c: 8c:13:6b:01:e8:3c:9f:54:9e:74:a4:00:70:6d:84: 86:f4:7d:ce:b1:46:67:e2:90:80:b8:49:2e:a7:94: af:a8:49:10:ab:e4:74:2e:ee:1d:21:3b:0a:eb:94: 2e:8f:99:b2:83:f0:4f:80:cd:31:4d:13:5c:53:cb: 2e:f8:67:d9:78:26:5f:6d:42:25:a0:b6:11:1b:ef: 51:47:e8:15:d5:38:ab:7b:fd:2a:81:cf:92:32:62: 9d:d6:ac:c0:84:5f:e6:cb:de:64:0e:00:61:bc:96: a2:ad:29:a0:3e:ba:11:58:32:6b:b4:47:89:dd:80: 42:d7:ca:05:af:6e:66:7b:79:d2:92:68:92:9e:55: a8:47:be:86:39:a2:81:4b:7c:10:14:25:4b:b0:26: cf:b6:bf:ed:a4:d7:15:e6:c3:67:9d:27:54:88:71: 3b:f2:e7:be:9c:f4:16:0b:06:1d:b5:3a:cb:68:42: f0:98:13:a8:ef:bc:e3:cc:5b:77:f1:d2:4e:17:83: 5e:8a:33:82:43:28:1d:e9:de:ae:ee:a3:2f:1b:54: 9a:26:c2:46:75:00:ac:d2:2c:ee:8c:a2:3d:96:ba: c6:67:1e:43:3a:83:11:84:dd:ee:84:23:56:e2:e3: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:83:BE:6D:1C:EC:8E:B0:91:91:5C:CA:CC:55:CD:D4:F6:C2:A2:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a76ef17-2f01-37a9-a111-42a266f553f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:1e:08:02:a0:6a:5c:66:ca:b0:4c:99:7a:6a:af:7f:2b:71: 3a:91:87:55:6a:ae:b3:97:92:23:6f:bd:89:b6:ba:48:c6:75: 6a:50:98:26:20:45:86:f6:fc:da:eb:40:40:d6:c1:89:85:56: 70:38:13:5b:54:35:58:2e:41:c9:6b:f2:75:ea:41:35:6e:cf: d9:9d:90:c7:1e:00:53:da:47:8a:73:34:c5:03:4f:4d:0a:0d: 59:b9:a1:2c:4a:d6:2e:27:9e:38:64:0b:50:10:c1:a5:35:a4: c4:14:97:b1:57:1f:f0:9e:12:29:e7:a1:8e:84:35:c3:be:d0: b1:d1:1e:85:2f:8b:b0:df:7a:f5:b7:c7:a9:c4:94:8b:bf:3a: dd:72:ce:73:43:35:bb:78:be:17:44:aa:20:fa:2a:19:5f:2e: 83:e5:71:11:2a:4a:f0:67:0d:f0:80:c3:18:73:c0:3b:3e:2d: fe:91:14:c6:d4:3e:0c:75:56:42:a6:31:34:ba:e4:93:09:ea: 19:3f:94:34:9e:f9:ba:43:66:81:25:c7:95:d1:64:73:69:ce: 03:5b:da:b4:93:a1:bd:c0:f3:cf:e8:b9:b2:4c:4d:43:c7:64: 5e:09:0d:87:f4:2d:70:70:b8:15:95:26:bf:52:0e:a1:b4:e8: c2:e5:89:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCpMdsnv2rLviYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YjViNWYxYzYtZWNkOC00NWUxLTgxZWEtOWI1Mzc2MGI3NzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7jkeKWH6LgEDl5/3gyME2sB6DyfVJ50pABw bYSG9H3OsUZn4pCAuEkup5SvqEkQq+R0Lu4dITsK65Quj5myg/BPgM0xTRNcU8su +GfZeCZfbUIloLYRG+9RR+gV1Tire/0qgc+SMmKd1qzAhF/my95kDgBhvJairSmg ProRWDJrtEeJ3YBC18oFr25me3nSkmiSnlWoR76GOaKBS3wQFCVLsCbPtr/tpNcV 5sNnnSdUiHE78ue+nPQWCwYdtTrLaELwmBOo77zjzFt38dJOF4NeijOCQygd6d6u 7qMvG1SaJsJGdQCs0izujKI9lrrGZx5DOoMRhN3uhCNW4uPPRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2Dvm0c7I6wkZFcysxVzdT2wqIWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGE3NmVmMTctMmYwMS0z N2E5LWExMTEtNDJhMjY2ZjU1M2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhrlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAeCAKgalxmyrBMmXpqr38rcTqRh1VqrrOXkiNvvYm2ukjGdWpQmCYg RYb2/NrrQEDWwYmFVnA4E1tUNVguQclr8nXqQTVuz9mdkMceAFPaR4pzNMUDT00K DVm5oSxK1i4nnjhkC1AQwaU1pMQUl7FXH/CeEinnoY6ENcO+0LHRHoUvi7DfevW3 x6nElIu/Ot1yznNDNbt4vhdEqiD6KhlfLoPlcREqSvBnDfCAwxhzwDs+Lf6RFMbU Pgx1VkKmMTS65JMJ6hk/lDSe+bpDZoElx5XRZHNpzgNb2rSTob3A88/oubJMTUPH ZF4JDYf0LXBwuBWVJr9SDqG06MLliUQ= -----END CERTIFICATE-----Generated at Wed May 13 08:50:07 2026 by rpki-client