$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95dba91a-4075-3b97-872e-cda7831f988e.roa File: 95dba91a-4075-3b97-872e-cda7831f988e.roa (raw, json) Hash identifier: bLUrNzutY50k5im8s+F7ZgMC+1zCvPIC4tym2L5ppY0= Subject key identifier: B8:3E:3D:D6:4A:39:CE:5F:6D:1F:30:59:BF:D7:54:CB:C3:46:5C:9A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC6CAF787A415F23FDE07E880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95dba91a-4075-3b97-872e-cda7831f988e.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 134.185.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:f7:87:a4:15:f2:3f:de:07:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=572fd8c3-19d7-494c-b466-b2e4b35b2072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:fc:27:02:cd:65:c4:9a:8d:44:e4:96:d3: 0a:64:50:13:c4:a2:37:fe:59:64:e7:ae:a4:b4:e3: 74:40:ac:39:18:f3:e7:30:b1:f1:42:92:dd:e2:5d: 4e:c6:84:fb:49:27:66:26:a9:ff:3a:16:87:01:0c: c6:a9:d9:df:62:01:a1:fd:62:f6:56:7f:5c:36:ec: cd:59:09:5d:a4:a7:d6:ed:1d:c3:03:a9:65:1f:a5: 0c:6f:f1:92:85:b3:0c:e3:60:53:fa:16:73:8f:5e: fc:79:d9:bb:37:b7:03:91:f5:7e:28:87:fa:1d:b6: 1f:5b:6f:db:1b:a6:fb:8d:56:32:3f:12:bd:ab:6e: b4:f5:6d:62:37:43:85:9b:15:59:46:24:79:95:03: 74:80:8a:31:cb:97:33:25:45:55:ff:c6:cd:c5:10: ee:7f:af:fd:11:b8:72:35:95:95:de:87:76:c9:64: ea:d1:24:09:2c:4c:5c:30:0d:4a:2d:d8:8d:35:9a: fe:ff:8f:0c:78:d2:0a:3f:84:92:79:55:81:01:f5: 1e:31:75:75:aa:d2:8c:23:86:a3:74:f4:2d:14:0a: 00:bf:a8:c6:4e:db:48:64:a3:6c:e5:74:97:a8:00: 68:5e:78:75:54:15:8f:2e:18:25:2a:de:b8:03:bb: d1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3E:3D:D6:4A:39:CE:5F:6D:1F:30:59:BF:D7:54:CB:C3:46:5C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95dba91a-4075-3b97-872e-cda7831f988e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d9:bc:76:ab:a4:06:a9:93:4c:bd:d1:69:59:11:e0:ae:f3: c6:ec:3a:3a:22:6b:cf:ae:43:86:c6:39:d7:6f:b1:f2:9f:1a: 87:76:ff:76:d5:d5:c2:66:25:4b:88:4c:3d:34:1d:e6:f9:70: a3:57:d7:b8:5c:e0:8b:3b:fc:98:b5:28:32:3e:0c:4c:bd:77: 47:e9:e5:a2:86:d0:cf:7b:22:5b:27:e8:fb:19:e7:ce:10:bc: 65:fa:25:70:d2:4d:f2:c8:39:3c:83:31:c1:a7:46:bb:bb:64: 6b:c3:85:f2:c8:9a:c0:c4:4f:87:b8:dd:5b:ea:8f:ec:48:72: 47:26:9d:48:ab:35:92:86:25:b6:08:f8:81:da:85:d4:4f:03: 22:42:05:10:ae:d9:71:cc:69:4b:b4:50:3d:47:7f:5b:f8:31: 85:2b:54:cc:6b:73:0d:85:f0:22:af:15:ab:e6:56:37:14:0e: 3c:7e:3d:f2:5a:11:dd:7a:cf:90:c8:39:0a:c1:dc:8f:e7:8b: ec:01:c5:0a:80:a2:19:12:aa:da:d6:11:cd:41:62:9e:94:e5: 6c:3e:67:fc:63:d6:f6:81:b3:3e:8c:1a:5b:56:7b:52:a2:c3: a6:55:63:1e:17:af:9c:46:d2:c3:08:88:6c:b1:fe:fe:58:37: 5e:61:80:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GyveHpBXyP94H6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk NTcyZmQ4YzMtMTlkNy00OTRjLWI0NjYtYjJlNGIzNWIyMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljn8JwLNZcSajUTkltMKZFATxKI3/llk566k tON0QKw5GPPnMLHxQpLd4l1OxoT7SSdmJqn/OhaHAQzGqdnfYgGh/WL2Vn9cNuzN WQldpKfW7R3DA6llH6UMb/GShbMM42BT+hZzj178edm7N7cDkfV+KIf6HbYfW2/b G6b7jVYyPxK9q2609W1iN0OFmxVZRiR5lQN0gIoxy5czJUVV/8bNxRDuf6/9Ebhy NZWV3od2yWTq0SQJLExcMA1KLdiNNZr+/48MeNIKP4SSeVWBAfUeMXV1qtKMI4aj dPQtFAoAv6jGTttIZKNs5XSXqABoXnh1VBWPLhglKt64A7vRWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg+PdZKOc5fbR8wWb/XVMvDRlyaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTVkYmE5MWEtNDA3NS0z Yjk3LTg3MmUtY2RhNzgzMWY5ODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChrnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbZvHarpAapk0y90WlZEeCu88bsOjoia8+uQ4bGOddvsfKfGod2/3bV 1cJmJUuITD00Heb5cKNX17hc4Is7/Ji1KDI+DEy9d0fp5aKG0M97Ilsn6PsZ584Q vGX6JXDSTfLIOTyDMcGnRru7ZGvDhfLImsDET4e43Vvqj+xIckcmnUirNZKGJbYI +IHahdRPAyJCBRCu2XHMaUu0UD1Hf1v4MYUrVMxrcw2F8CKvFavmVjcUDjx+PfJa Ed16z5DIOQrB3I/ni+wBxQqAohkSqtrWEc1BYp6U5Ww+Z/xj1vaBsz6MGltWe1Ki w6ZVYx4Xr5xG0sMIiGyx/v5YN15hgME= -----END CERTIFICATE-----Generated at Wed May 13 09:33:18 2026 by rpki-client