$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa File: 63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa (raw, json) Hash identifier: FAyqciNwTOmQSVi1T0No6zcQD/ABd3AS5pqoNBQJe8s= Subject key identifier: 35:B6:79:DF:93:BC:E2:D4:70:4A:13:67:02:9E:6B:FA:18:EB:5F:B3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D8FE5C535F6BF79120EC280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 168.138.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:e5:c5:35:f6:bf:79:12:0e:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=1299a0ff-8bcd-48f0-add3-e995cfdb8a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a7:a0:13:0d:98:4c:5a:f1:2d:ae:92:39:10: 7f:78:2a:3a:60:ce:35:59:01:34:66:4a:50:f3:a1: d1:c7:a1:b0:3b:dc:27:25:5d:5b:45:7e:f6:b8:67: 30:28:c0:4e:61:4b:80:86:da:ce:1f:94:1a:e4:7f: ae:19:f3:25:5d:c5:29:3a:8a:07:cb:68:03:f1:19: 7d:5d:16:5c:b4:6a:1e:d0:fc:8f:ee:f2:fa:3f:bd: 92:f4:c6:4b:8e:1e:c4:e4:60:b3:0d:51:8c:72:40: 88:39:14:53:65:61:aa:98:34:38:a3:90:33:0d:2e: 56:5b:5e:56:e9:fc:e4:37:32:6d:9f:3d:81:dd:49: bc:39:bd:7a:90:2b:72:28:a5:06:71:73:3f:4c:20: cd:76:73:97:cb:ef:bb:a1:57:22:69:a9:d3:da:0d: 1d:3d:65:fb:66:38:30:8b:2d:d4:3b:0f:3e:60:d4: 50:c8:e8:40:36:53:10:4c:f5:0b:36:00:e4:39:e1: c8:d2:b2:6f:99:3b:5b:01:b0:6e:08:23:d7:44:92: 55:55:a6:ce:c9:52:89:70:63:25:8a:86:7a:9c:11: f3:5d:bb:b8:32:6d:12:3d:14:9a:27:da:bf:86:5b: 6b:e3:3c:ab:d5:28:9c:b8:48:b7:2c:8a:d0:9a:57: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B6:79:DF:93:BC:E2:D4:70:4A:13:67:02:9E:6B:FA:18:EB:5F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7d:0d:b9:1b:60:d9:a2:3d:26:76:c4:25:66:57:57:b2:5f: 6a:29:54:d8:63:7e:84:1e:03:9f:9e:71:0a:07:08:38:92:c7: b2:71:56:d8:b6:53:5a:21:2d:b1:f8:f2:a2:e3:19:b6:02:1b: 26:25:a2:cb:a1:0b:a6:ff:70:60:e0:03:8c:a3:a7:40:2c:bf: 1a:68:0a:c2:ca:16:08:13:49:a4:ae:5b:77:64:8c:90:25:40: 45:41:93:59:35:62:6d:cb:d8:6f:8b:3e:c9:e4:d7:13:20:36: e8:2d:07:a2:6b:4a:97:18:59:44:24:c8:fe:3e:d0:d8:ac:e6: 16:df:35:89:f4:8c:40:b9:ab:cf:6d:e1:96:a5:da:f4:d5:12: 8d:1a:e4:53:54:53:a8:59:90:71:6a:ee:0f:77:8b:95:95:4e: 27:3d:68:2f:f0:70:20:14:28:f2:33:cc:a1:d0:18:a5:39:59: 1d:73:23:52:64:e7:07:b6:94:b8:1e:2c:b7:7d:d2:4c:54:e9: 30:ef:d4:70:cd:98:62:41:87:e2:87:b9:05:2e:f4:e2:51:c0: 33:04:1f:3b:b3:49:af:46:49:e2:75:29:10:64:36:47:70:43: 7d:29:df:bd:07:f0:4b:ac:80:b1:f1:d6:84:7a:5b:56:dc:f5: 11:00:40:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj+XFNfa/eRIOwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk MTI5OWEwZmYtOGJjZC00OGYwLWFkZDMtZTk5NWNmZGI4YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqegEw2YTFrxLa6SORB/eCo6YM41WQE0ZkpQ 86HRx6GwO9wnJV1bRX72uGcwKMBOYUuAhtrOH5Qa5H+uGfMlXcUpOooHy2gD8Rl9 XRZctGoe0PyP7vL6P72S9MZLjh7E5GCzDVGMckCIORRTZWGqmDQ4o5AzDS5WW15W 6fzkNzJtnz2B3Um8Ob16kCtyKKUGcXM/TCDNdnOXy++7oVciaanT2g0dPWX7Zjgw iy3UOw8+YNRQyOhANlMQTPULNgDkOeHI0rJvmTtbAbBuCCPXRJJVVabOyVKJcGMl ioZ6nBHzXbu4Mm0SPRSaJ9q/hltr4zyr1SicuEi3LIrQmlda1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW2ed+TvOLUcEoTZwKea/oY61+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjNiMzViODktZDhmOC0z MGQ4LWEzNGEtNDFhOWFlMTBlNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqIp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl9DbkbYNmiPSZ2xCVmV1eyX2opVNhjfoQeA5+ecQoHCDiSx7JxVti2 U1ohLbH48qLjGbYCGyYlosuhC6b/cGDgA4yjp0AsvxpoCsLKFggTSaSuW3dkjJAl QEVBk1k1Ym3L2G+LPsnk1xMgNugtB6JrSpcYWUQkyP4+0Nis5hbfNYn0jEC5q89t 4Zal2vTVEo0a5FNUU6hZkHFq7g93i5WVTic9aC/wcCAUKPIzzKHQGKU5WR1zI1Jk 5we2lLgeLLd90kxU6TDv1HDNmGJBh+KHuQUu9OJRwDMEHzuzSa9GSeJ1KRBkNkdw Q30p370H8EusgLHx1oR6W1bc9REAQLo= -----END CERTIFICATE-----Generated at Wed May 13 07:02:42 2026 by rpki-client