$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7fe34e73-a79c-387e-9aae-e57a4a16a29e.roa File: 7fe34e73-a79c-387e-9aae-e57a4a16a29e.roa (raw, json) Hash identifier: 0X2JhIShBJQ6VbR7Td8CUh4qy1/3Yj3c6RPv+9EO3UU= Subject key identifier: C3:C5:09:0B:F0:A3:E6:24:30:38:CD:63:4E:98:36:92:CC:8C:70:74 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E5026736D527C9100AEC4E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7fe34e73-a79c-387e-9aae-e57a4a16a29e.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 170.9.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:26:73:6d:52:7c:91:00:ae:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=cc338ed1-4d50-46f9-9f77-3255a0cf21ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:a5:a3:73:46:2d:17:dc:ec:8d:e1:72:62: 27:ba:26:25:2a:a2:52:d4:64:d2:7b:28:59:f0:7c: ae:58:68:94:a5:47:9e:35:ce:b8:75:ff:f2:e1:34: bc:99:11:63:4a:ba:15:70:02:b1:c0:9e:8c:d9:f6: 5a:52:52:3e:7d:32:cc:da:a1:18:16:57:e2:73:bd: 59:7e:96:d0:e9:a4:c5:f8:17:5b:1b:45:63:fd:68: bc:c1:36:f1:92:7f:82:81:a7:a7:7c:d7:3e:79:55: 65:a2:7d:48:ac:17:eb:6d:67:b4:53:3f:7d:a6:3f: 40:8e:7d:9a:a2:5b:6e:01:26:2b:0c:b6:42:d4:dc: 42:c5:ea:37:65:f8:0a:d6:42:1f:c4:b3:18:46:fc: 4b:f2:cd:8b:8e:6d:0b:65:6d:65:15:f7:74:9d:c7: 89:8f:19:41:ce:77:c3:5f:d8:27:5d:c8:41:52:e2: fc:8e:69:ca:31:17:aa:77:4c:b5:73:c3:cd:62:04: cf:d0:50:70:4d:e5:89:6b:63:be:ae:da:54:11:15: 8a:77:4c:45:2b:ec:2b:5a:b4:e7:8b:07:29:96:fd: 63:ef:34:77:7d:f0:33:25:f8:eb:5c:c4:49:36:4e: b1:f0:ec:85:5e:1b:b6:4f:f3:71:7c:c4:c8:dd:11: 74:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C5:09:0B:F0:A3:E6:24:30:38:CD:63:4E:98:36:92:CC:8C:70:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7fe34e73-a79c-387e-9aae-e57a4a16a29e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.9.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:cb:18:39:90:00:3b:74:67:af:88:23:24:b1:7e:a2:a3:c7: 92:8f:50:82:b2:95:ca:f3:7f:78:fa:be:99:6f:3d:eb:b1:ce: 0c:db:ec:5f:28:29:85:ea:37:1c:88:d0:76:2e:39:49:00:5e: 82:53:45:37:2f:2e:48:e1:b3:98:3e:60:27:9e:af:2c:c4:7f: a2:66:7b:48:e4:2e:c5:22:05:30:db:19:a5:eb:f0:f2:d6:78: 1f:34:18:12:42:b3:9c:5b:aa:bf:94:ce:46:76:03:2c:24:d7: c8:55:2a:10:8a:11:94:76:9c:48:6b:c0:d5:b9:eb:81:fb:42: e2:fc:cb:3e:e6:91:30:83:67:c7:ee:c1:7d:5c:cc:62:9a:dc: 7a:fe:6d:68:e1:ee:71:43:b5:6c:02:84:da:99:87:72:eb:25: 7c:62:02:97:57:39:89:42:7b:bd:84:2b:90:01:2f:cd:2e:9c: 3d:e4:f4:d6:cf:10:fb:72:01:70:e1:63:30:39:99:20:22:b3: 75:c3:98:b9:1e:0c:ab:ef:af:51:7d:77:6b:30:41:84:57:86: b3:98:5a:9a:70:e3:80:1b:49:e7:64:d8:a0:db:8f:f6:78:31: 71:63:f4:af:34:ce:d2:d6:91:95:8f:76:8f:39:88:ae:c3:74: a1:a0:06:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCZzbVJ8kQCuxOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk Y2MzMzhlZDEtNGQ1MC00NmY5LTlmNzctMzI1NWEwY2YyMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwOlo3NGLRfc7I3hcmInuiYlKqJS1GTSeyhZ 8HyuWGiUpUeeNc64df/y4TS8mRFjSroVcAKxwJ6M2fZaUlI+fTLM2qEYFlfic71Z fpbQ6aTF+BdbG0Vj/Wi8wTbxkn+CgaenfNc+eVVlon1IrBfrbWe0Uz99pj9Ajn2a oltuASYrDLZC1NxCxeo3ZfgK1kIfxLMYRvxL8s2Ljm0LZW1lFfd0nceJjxlBznfD X9gnXchBUuL8jmnKMReqd0y1c8PNYgTP0FBwTeWJa2O+rtpUERWKd0xFK+wrWrTn iwcplv1j7zR3ffAzJfjrXMRJNk6x8OyFXhu2T/NxfMTI3RF0JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPFCQvwo+YkMDjNY06YNpLMjHB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2ZlMzRlNzMtYTc5Yy0z ODdlLTlhYWUtZTU3YTRhMTZhMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqglAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjLGDmQADt0Z6+IIySxfqKjx5KPUIKylcrzf3j6vplvPeuxzgzb7F8o KYXqNxyI0HYuOUkAXoJTRTcvLkjhs5g+YCeeryzEf6Jme0jkLsUiBTDbGaXr8PLW eB80GBJCs5xbqr+UzkZ2Aywk18hVKhCKEZR2nEhrwNW564H7QuL8yz7mkTCDZ8fu wX1czGKa3Hr+bWjh7nFDtWwChNqZh3LrJXxiApdXOYlCe72EK5ABL80unD3k9NbP EPtyAXDhYzA5mSAis3XDmLkeDKvvr1F9d2swQYRXhrOYWppw44AbSedk2KDbj/Z4 MXFj9K80ztLWkZWPdo85iK7DdKGgBgk= -----END CERTIFICATE-----Generated at Wed May 13 04:33:15 2026 by rpki-client