$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c799e9-230d-35b1-8b2a-9b08e603343c.roa File: 96c799e9-230d-35b1-8b2a-9b08e603343c.roa (raw, json) Hash identifier: /sRUIMg4Jmmw5Yy7/sjCTi3xa7HrViyca8yX05hoqRY= Subject key identifier: AB:94:B4:D3:6D:D0:CB:A8:55:D1:99:3A:45:70:43:5B:E2:5D:5A:CE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D8FFD6D94D5182EA310A300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c799e9-230d-35b1-8b2a-9b08e603343c.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 134.70.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:fd:6d:94:d5:18:2e:a3:10:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=09daf1fa-4e3f-44b2-8f26-52fc91a1c42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:47:72:35:b9:d3:bf:94:2a:00:26:81:0d: 92:34:39:35:c7:94:5f:e7:16:b3:27:8c:dc:61:09: ef:fc:75:b5:d8:38:82:bd:4e:c5:c7:73:e8:84:d0: 8e:55:fc:f6:91:a1:bd:86:62:7c:56:4e:5f:d1:47: 7a:ba:8d:42:3e:ce:05:1f:20:85:25:fe:14:71:e4: 10:90:13:f8:66:95:ed:b8:50:f5:ad:0f:b8:ba:61: 68:90:f3:3f:52:61:3d:5d:bc:1a:3e:eb:7c:7c:14: c3:84:f4:e7:af:7f:a6:7a:2d:75:b9:fe:56:d1:18: 6a:44:e9:33:55:ae:8b:db:65:fe:ad:a0:a5:f4:32: a5:f8:ec:56:a3:2b:f0:82:7a:75:72:f2:4c:86:e0: cb:1e:09:95:e5:84:e2:38:ed:28:f3:68:a8:ca:fc: c1:1c:54:72:a8:7c:0c:1e:18:79:df:6a:e7:ea:30: a9:de:0d:03:cd:e6:0a:59:71:d2:04:b1:ab:72:a3: 04:b9:81:87:fc:25:c2:3f:0b:a4:55:71:b6:9e:b2: 5a:0d:43:d4:7f:0a:c2:2d:f1:83:68:da:10:81:cc: 51:00:71:c0:d9:28:f8:b3:75:17:32:d1:fb:3d:d4: 08:50:5f:29:e2:71:06:9b:86:13:e4:b2:ae:93:18: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:94:B4:D3:6D:D0:CB:A8:55:D1:99:3A:45:70:43:5B:E2:5D:5A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c799e9-230d-35b1-8b2a-9b08e603343c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:48:72:9f:a6:00:02:14:e5:7b:cd:18:8a:77:cb:71:21:0f: 08:ad:4d:58:cb:5f:58:82:a1:77:b9:5e:c9:6a:0d:6f:5f:28: 20:ec:7b:90:0a:97:05:78:96:20:15:c6:69:55:b5:ce:c3:e9: 1a:5f:ed:7c:e6:c1:b3:18:13:13:04:a7:60:b8:85:53:7d:d5: d8:9f:47:93:3c:f4:5b:9f:42:3b:a1:62:7f:98:cb:8f:31:1d: 71:1a:1e:0d:18:cc:67:fc:2b:ef:fc:43:52:88:b7:f4:82:cd: 18:1b:e3:8f:be:2c:43:e5:85:7b:61:94:1d:be:52:6d:3d:05: 05:5e:99:06:fb:e0:c0:b7:80:d1:2d:9a:34:76:95:66:fc:38: d2:75:9b:34:e7:96:b9:53:9f:45:21:e2:1b:c5:17:ed:2b:68: 87:d8:43:e4:27:59:56:96:b5:de:76:d1:ce:3a:f8:4b:c9:d0: b4:00:48:0e:e6:71:74:5b:2a:23:a6:55:09:84:8b:d2:2e:db: d0:92:b1:b2:d9:44:e5:c0:88:dc:83:d6:64:41:7d:ef:db:21: 09:0f:7d:04:8c:26:73:e2:60:5c:3a:32:2d:ac:58:ce:24:4e: e8:38:ae:2f:3f:6c:45:89:5b:c8:14:90:3b:68:ad:0d:18:5d: e0:d2:55:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/1tlNUYLqMQowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk MDlkYWYxZmEtNGUzZi00NGIyLThmMjYtNTJmYzkxYTFjNDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/9HcjW507+UKgAmgQ2SNDk1x5Rf5xazJ4zc YQnv/HW12DiCvU7Fx3PohNCOVfz2kaG9hmJ8Vk5f0Ud6uo1CPs4FHyCFJf4UceQQ kBP4ZpXtuFD1rQ+4umFokPM/UmE9XbwaPut8fBTDhPTnr3+mei11uf5W0RhqROkz Va6L22X+raCl9DKl+OxWoyvwgnp1cvJMhuDLHgmV5YTiOO0o82ioyvzBHFRyqHwM Hhh532rn6jCp3g0DzeYKWXHSBLGrcqMEuYGH/CXCPwukVXG2nrJaDUPUfwrCLfGD aNoQgcxRAHHA2Sj4s3UXMtH7PdQIUF8p4nEGm4YT5LKukxj5CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuUtNNt0MuoVdGZOkVwQ1viXVrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTZjNzk5ZTktMjMwZC0z NWIxLThiMmEtOWIwOGU2MDMzNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZIcp+mAAIU5XvNGIp3y3EhDwitTVjLX1iCoXe5XslqDW9fKCDse5AK lwV4liAVxmlVtc7D6Rpf7XzmwbMYExMEp2C4hVN91difR5M89FufQjuhYn+Yy48x HXEaHg0YzGf8K+/8Q1KIt/SCzRgb44++LEPlhXthlB2+Um09BQVemQb74MC3gNEt mjR2lWb8ONJ1mzTnlrlTn0Uh4hvFF+0raIfYQ+QnWVaWtd520c46+EvJ0LQASA7m cXRbKiOmVQmEi9Iu29CSsbLZROXAiNyD1mRBfe/bIQkPfQSMJnPiYFw6Mi2sWM4k Tug4ri8/bEWJW8gUkDtorQ0YXeDSVWs= -----END CERTIFICATE-----Generated at Wed May 13 08:47:54 2026 by rpki-client