$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa File: 8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa (raw, json) Hash identifier: Q3Mb8BGs5xVfvGl6eI2LnfzfAvMN43DKmNBB/sPfVGw= Subject key identifier: FD:F6:E4:48:A5:73:35:BD:62:BF:41:7F:17:FF:06:ED:CD:9D:07:E2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC6CAF93582DFA8DEAD562C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 134.185.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:f9:35:82:df:a8:de:ad:56:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=f9b8839d-b6b0-441b-8387-d99774f20ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:e9:52:1f:7c:96:b6:21:a9:f8:a6:9c:52: 32:c7:b6:32:a9:2b:21:18:00:a1:62:a2:a8:a0:40: c8:9a:77:37:c9:dc:bc:51:4a:96:08:4f:f1:08:d0: a4:56:50:ec:f5:3f:eb:52:74:93:40:a8:43:2b:0a: 90:4a:70:1e:d8:f9:15:3c:23:89:3a:d1:58:11:58: 31:d0:e8:99:c5:30:03:fc:c6:89:14:de:25:c9:31: 3b:5b:57:3d:ef:95:b5:e7:ef:48:de:a9:2f:8f:4a: 89:c0:c1:69:fc:d9:71:50:fb:1a:7e:a3:06:46:f6: ef:c6:cf:cb:84:2f:62:d8:51:33:46:c1:1c:8b:12: b4:2e:db:97:c3:dc:f2:e8:b1:b0:e0:b6:5b:27:e9: f7:e5:d2:6d:cf:37:ec:c4:12:55:48:89:d4:28:c6: ef:17:9d:e3:e8:ad:7b:14:24:ad:aa:fe:b2:68:78: 03:70:0a:d5:79:8a:87:4f:8c:74:4a:be:9d:04:50: 22:30:9c:4b:2c:ef:a1:24:ba:e0:c8:cb:80:53:ec: a5:cc:1c:11:8b:4f:21:37:48:de:2c:7f:a5:1c:0a: 07:5e:a2:cb:cd:51:74:0f:a8:cf:20:61:5f:f9:e5: 78:10:aa:54:82:9f:09:5a:a8:f0:cd:56:09:e6:5b: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F6:E4:48:A5:73:35:BD:62:BF:41:7F:17:FF:06:ED:CD:9D:07:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:88:61:45:f1:96:c4:da:ac:f6:63:77:ca:de:00:a3:07:4f: e7:9a:32:d0:87:18:ad:55:1a:b9:73:94:65:6e:a1:95:c6:e7: b9:9b:8e:4a:31:b2:29:47:14:71:ee:d8:1e:0b:b6:27:80:d4: 80:c3:17:83:82:5f:d4:37:2c:1c:ed:d7:1e:a5:67:f8:c7:2b: 87:de:7b:56:cc:5f:9c:5a:75:30:cc:46:d7:64:29:fe:7d:3c: fa:f3:d0:4a:89:d6:e7:34:cf:b2:f3:56:9a:96:2e:6e:ac:33: 77:c1:b5:e5:67:55:01:17:ea:dd:d9:a5:5c:aa:c1:da:5a:83: ab:95:95:fa:41:ac:38:19:4a:87:85:5b:e2:41:ea:16:60:ea: 5f:df:63:f6:df:b6:84:85:6b:6f:19:5e:d8:cf:bf:a6:c2:58: ee:b9:55:a0:62:bc:4f:18:c6:a6:5b:ae:e3:30:15:68:54:81: 2d:8b:a6:c2:57:a0:2f:2b:5c:2d:80:44:d8:fa:d9:77:a4:e5: 6d:2d:c1:b1:b5:05:48:d5:07:13:bc:22:8c:ad:c7:18:ab:16: 07:2f:58:94:26:6d:ec:ab:bc:14:b3:46:82:aa:ab:ee:7b:b0: 76:b4:96:a0:a2:5e:28:fe:db:3d:9e:51:00:00:12:c8:b5:44: 9f:09:0e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Gyvk1gt+o3q1WLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk ZjliODgzOWQtYjZiMC00NDFiLTgzODctZDk5Nzc0ZjIwZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3npUh98lrYhqfimnFIyx7YyqSshGAChYqKo oEDImnc3ydy8UUqWCE/xCNCkVlDs9T/rUnSTQKhDKwqQSnAe2PkVPCOJOtFYEVgx 0OiZxTAD/MaJFN4lyTE7W1c975W15+9I3qkvj0qJwMFp/NlxUPsafqMGRvbvxs/L hC9i2FEzRsEcixK0LtuXw9zy6LGw4LZbJ+n35dJtzzfsxBJVSInUKMbvF53j6K17 FCStqv6yaHgDcArVeYqHT4x0Sr6dBFAiMJxLLO+hJLrgyMuAU+ylzBwRi08hN0je LH+lHAoHXqLLzVF0D6jPIGFf+eV4EKpUgp8JWqjwzVYJ5lsfDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP325EilczW9Yr9Bfxf/Bu3NnQfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGJkNzc2MTktMDNkMi0z ZjA0LWFmNTgtY2EwY2EyZjRiNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhrnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuIYUXxlsTarPZjd8reAKMHT+eaMtCHGK1VGrlzlGVuoZXG57mbjkox silHFHHu2B4LtieA1IDDF4OCX9Q3LBzt1x6lZ/jHK4fee1bMX5xadTDMRtdkKf59 PPrz0EqJ1uc0z7LzVpqWLm6sM3fBteVnVQEX6t3ZpVyqwdpag6uVlfpBrDgZSoeF W+JB6hZg6l/fY/bftoSFa28ZXtjPv6bCWO65VaBivE8YxqZbruMwFWhUgS2LpsJX oC8rXC2ARNj62Xek5W0twbG1BUjVBxO8IoytxxirFgcvWJQmbeyrvBSzRoKqq+57 sHa0lqCiXij+2z2eUQAAEsi1RJ8JDq8= -----END CERTIFICATE-----Generated at Wed May 13 06:21:44 2026 by rpki-client