$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f3d72a1-0b8c-3f95-9da9-8499d6c99d4b.roa File: 5f3d72a1-0b8c-3f95-9da9-8499d6c99d4b.roa (raw, json) Hash identifier: D7qIqqROtJe2rSDifqStPCXzIutPg+5JNcCkLWnWCBY= Subject key identifier: 0A:62:B0:90:2F:20:10:64:1F:F6:15:0E:8E:1E:8D:A6:7C:30:DC:4E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8C2A98C75B54F0DEC04CCF80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f3d72a1-0b8c-3f95-9da9-8499d6c99d4b.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 168.129.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:98:c7:5b:54:f0:de:c0:4c:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=2fe4358b-a085-4783-820d-e2739303bdb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:2e:de:15:9d:dd:4f:b6:35:86:b6:0f:51: 28:c5:16:96:31:8f:62:88:84:56:4d:04:04:65:14: 8e:24:85:df:55:41:4e:55:7f:6f:a6:81:7a:2b:69: 0f:be:37:48:36:e3:eb:b3:9f:df:a5:f7:f0:e4:2e: 21:e3:b2:68:66:80:76:d0:60:ad:98:36:48:2a:56: 65:0c:9a:1f:25:fc:cb:c0:f3:37:25:03:51:62:79: 48:98:dc:df:07:81:ab:59:dd:cb:87:0a:03:d1:ad: 21:59:f5:39:5c:85:51:1f:37:f5:ea:4a:94:92:a3: 23:5e:fe:df:e2:4f:22:7b:e1:67:3e:33:be:21:6a: 53:37:47:ab:97:ba:b6:35:e5:d7:23:c9:ad:de:05: 1a:80:a6:bf:1b:8e:f7:d6:2f:9d:76:4f:0f:18:5f: 89:68:75:27:47:f9:ff:43:72:a8:82:13:c2:db:67: 68:dd:d0:c2:7f:98:84:34:80:8a:e9:9a:65:79:de: 97:f4:bf:30:69:bd:88:cd:02:e4:2d:53:6f:93:b9: e9:2f:34:3f:31:88:10:91:6d:21:ce:23:8f:cf:68: ec:b1:ec:92:b9:65:a5:75:4a:aa:d3:1e:08:38:3a: fe:15:71:8e:ff:a3:f7:5b:7c:e5:14:e1:05:1a:9f: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:62:B0:90:2F:20:10:64:1F:F6:15:0E:8E:1E:8D:A6:7C:30:DC:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f3d72a1-0b8c-3f95-9da9-8499d6c99d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:82:4f:aa:f2:f0:00:cf:0d:d0:7f:07:c1:4a:b5:79:07:39: 5a:81:d8:00:4f:99:63:31:1a:ba:7e:74:29:2c:18:b2:c5:8c: ce:a8:02:9f:c8:39:aa:3c:5c:56:ca:ba:1e:01:92:d4:80:95: 00:e1:cf:db:20:5b:99:b2:40:3f:b9:70:29:dc:31:e3:f8:28: ce:f0:ec:9c:19:4c:7c:41:ed:a2:0b:64:43:ec:ed:89:d8:cc: f7:f1:b9:19:6d:d5:c0:cc:73:cf:4d:40:14:08:32:b8:fb:fe: e1:12:13:0f:64:1f:9e:2d:70:79:51:71:54:0f:ab:65:71:0e: 13:c7:9d:b9:33:6b:65:f4:be:17:f2:18:51:83:ca:47:b3:d3: 47:a9:fb:62:bb:8f:36:4d:db:21:42:d7:f9:7f:77:1c:cd:bc: 67:7b:ef:72:f8:b8:04:ff:e8:30:a2:8d:bb:5b:e6:05:49:83: 24:c2:d6:6c:70:45:04:1b:99:e9:3f:7a:3a:85:e4:3f:b6:0c: 26:43:17:62:dd:3f:b1:4e:ab:2c:ac:e5:4d:e0:d3:89:e5:2c: 59:8e:72:ee:c2:fa:2e:8b:81:f0:60:87:5b:f6:cd:c8:01:68: 85:73:ef:21:73:cf:c8:0d:af:5f:b0:0a:0b:1e:15:ec:b4:61: 3d:eb:f3:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKpjHW1Tw3sBMz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MmZlNDM1OGItYTA4NS00NzgzLTgyMGQtZTI3MzkzMDNiZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7gu3hWd3U+2NYa2D1EoxRaWMY9iiIRWTQQE ZRSOJIXfVUFOVX9vpoF6K2kPvjdINuPrs5/fpffw5C4h47JoZoB20GCtmDZIKlZl DJofJfzLwPM3JQNRYnlImNzfB4GrWd3LhwoD0a0hWfU5XIVRHzf16kqUkqMjXv7f 4k8ie+FnPjO+IWpTN0erl7q2NeXXI8mt3gUagKa/G4731i+ddk8PGF+JaHUnR/n/ Q3KoghPC22do3dDCf5iENICK6Zpled6X9L8wab2IzQLkLVNvk7npLzQ/MYgQkW0h ziOPz2jsseySuWWldUqq0x4IODr+FXGO/6P3W3zlFOEFGp9T+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApisJAvIBBkH/YVDo4ejaZ8MNxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWYzZDcyYTEtMGI4Yy0z Zjk1LTlkYTktODQ5OWQ2Yzk5ZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqIHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiCT6ry8ADPDdB/B8FKtXkHOVqB2ABPmWMxGrp+dCksGLLFjM6oAp/I Oao8XFbKuh4BktSAlQDhz9sgW5myQD+5cCncMeP4KM7w7JwZTHxB7aILZEPs7YnY zPfxuRlt1cDMc89NQBQIMrj7/uESEw9kH54tcHlRcVQPq2VxDhPHnbkza2X0vhfy GFGDykez00ep+2K7jzZN2yFC1/l/dxzNvGd773L4uAT/6DCijbtb5gVJgyTC1mxw RQQbmek/ejqF5D+2DCZDF2LdP7FOqyys5U3g04nlLFmOcu7C+i6LgfBgh1v2zcgB aIVz7yFzz8gNr1+wCgseFey0YT3r808= -----END CERTIFICATE-----Generated at Wed May 13 06:22:30 2026 by rpki-client