$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cbca1f7-85ba-3250-b351-05cf651470e9.roa File: 8cbca1f7-85ba-3250-b351-05cf651470e9.roa (raw, json) Hash identifier: ouDWikFwh0PdQuS4g3xJjd5LjSfBVuK4CO34a7vUH5g= Subject key identifier: 0A:5C:FD:14:49:38:DE:70:E8:8D:B0:CC:60:CA:2C:33:F5:3D:ED:D0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC54256A6963BBDA13040A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cbca1f7-85ba-3250-b351-05cf651470e9.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 134.70.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:42:56:a6:96:3b:bd:a1:30:40:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=50d78b02-01b1-4937-9475-46b35e92d1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:f9:02:d6:6b:c5:62:d0:16:1c:42:f1:6d: da:6a:94:ba:67:d5:83:f6:21:64:4c:60:9e:58:9d: 02:c8:72:22:0c:60:0a:ee:4f:44:d1:d6:3c:2f:2a: fd:fb:d1:db:fe:1a:e5:c3:8f:b8:0d:d3:53:ee:56: cf:7d:2e:5f:86:99:0d:cd:36:2e:c9:88:84:e5:ef: a8:e9:05:40:5a:5a:51:5d:11:a9:7d:8f:73:3e:77: e3:b9:67:2b:99:d2:08:cf:7f:16:0c:ce:46:40:a0: 2d:cb:39:0d:32:02:4f:63:bf:f3:9b:d7:59:66:8e: 9d:79:c4:81:05:02:a7:2a:40:f3:d1:90:a3:58:0f: ee:4b:a6:56:c7:0c:1c:3a:0c:93:2b:35:e2:d1:16: d4:1b:ac:ef:e8:92:7f:c8:0b:9a:75:a5:ed:32:9a: 38:e2:fa:42:90:17:1e:6f:da:98:96:84:01:8f:5d: da:19:80:c2:e4:b6:0f:59:3f:d2:70:94:6e:48:d4: c6:e7:8f:c3:c1:4f:08:06:71:e6:9d:02:e6:f2:5c: d4:88:79:80:15:53:16:29:ae:cc:3c:7e:ff:72:c9: 26:ec:c3:3a:94:8e:80:aa:1a:5f:9e:ff:3b:b5:ba: 8a:fa:a5:b3:d7:cf:bf:0c:26:81:f5:ca:71:96:e5: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5C:FD:14:49:38:DE:70:E8:8D:B0:CC:60:CA:2C:33:F5:3D:ED:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cbca1f7-85ba-3250-b351-05cf651470e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:02:c6:96:7a:39:7d:8d:6f:b6:64:7b:d9:70:7c:79:ab:d1: 8f:94:a3:8d:10:a7:a8:97:a5:e7:8f:85:79:8a:b5:64:75:e1: 98:cf:2d:55:3e:9f:dc:db:3e:f2:77:44:dc:a6:1e:29:7c:bd: a5:69:d1:ea:61:5a:7d:94:55:9a:c2:96:e6:d6:bb:40:a1:21: cd:e1:03:0f:a8:30:19:0e:52:9a:5b:50:b0:24:8c:ce:d9:f4: 09:cf:8a:cb:03:7b:9c:f0:4b:36:7f:71:8b:e7:9a:c2:bf:f5: 97:d4:a6:de:a6:d8:a4:ad:e1:48:15:7d:c7:7f:da:09:3e:0b: 4c:19:6e:fa:a4:8e:30:2d:cb:d1:d9:e8:72:22:b2:70:18:11: 8f:2c:de:b9:1e:d8:aa:45:83:56:2b:4a:eb:91:a0:62:57:56: dd:5c:37:c8:25:12:71:1b:a1:90:a5:14:d4:20:04:b6:fa:12: 25:11:18:2b:bd:bb:52:1b:69:56:4e:20:68:d5:83:d3:1f:dc: 7a:e0:0f:40:83:2c:1c:f8:50:46:28:79:cc:d9:36:be:a1:32: 5a:a2:ac:5e:fe:62:ec:83:c9:34:f1:c2:e1:13:11:f6:10:13: 6b:3a:70:27:d9:15:6b:0a:02:66:8b:de:e8:3f:40:21:4a:a9: 37:3f:a6:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUJWppY7vaEwQKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk NTBkNzhiMDItMDFiMS00OTM3LTk0NzUtNDZiMzVlOTJkMWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq75AtZrxWLQFhxC8W3aapS6Z9WD9iFkTGCe WJ0CyHIiDGAK7k9E0dY8Lyr9+9Hb/hrlw4+4DdNT7lbPfS5fhpkNzTYuyYiE5e+o 6QVAWlpRXRGpfY9zPnfjuWcrmdIIz38WDM5GQKAtyzkNMgJPY7/zm9dZZo6decSB BQKnKkDz0ZCjWA/uS6ZWxwwcOgyTKzXi0RbUG6zv6JJ/yAuadaXtMpo44vpCkBce b9qYloQBj13aGYDC5LYPWT/ScJRuSNTG54/DwU8IBnHmnQLm8lzUiHmAFVMWKa7M PH7/cskm7MM6lI6Aqhpfnv87tbqK+qWz18+/DCaB9cpxluUYCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApc/RRJON5w6I2wzGDKLDP1Pe3QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGNiY2ExZjctODViYS0z MjUwLWIzNTEtMDVjZjY1MTQ3MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkakMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMCxpZ6OX2Nb7Zke9lwfHmr0Y+Uo40Qp6iXpeePhXmKtWR14ZjPLVU+ n9zbPvJ3RNymHil8vaVp0ephWn2UVZrClubWu0ChIc3hAw+oMBkOUppbULAkjM7Z 9AnPissDe5zwSzZ/cYvnmsK/9ZfUpt6m2KSt4UgVfcd/2gk+C0wZbvqkjjAty9HZ 6HIisnAYEY8s3rke2KpFg1YrSuuRoGJXVt1cN8glEnEboZClFNQgBLb6EiURGCu9 u1IbaVZOIGjVg9Mf3HrgD0CDLBz4UEYoeczZNr6hMlqirF7+YuyDyTTxwuETEfYQ E2s6cCfZFWsKAmaL3ug/QCFKqTc/prA= -----END CERTIFICATE-----Generated at Wed May 13 06:40:44 2026 by rpki-client