$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ece6eb8-c662-3845-b3e8-c4e860cf4e8c.roa File: 9ece6eb8-c662-3845-b3e8-c4e860cf4e8c.roa (raw, json) Hash identifier: d7H4lFfFjQzcfPXLLLdk+IdwzYappJF7+ybKzPN+gqg= Subject key identifier: 46:C0:4F:46:D4:71:FA:D6:68:7C:AA:41:D1:C4:9F:F4:52:30:51:07 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E500FA47EC651AAE7451100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ece6eb8-c662-3845-b3e8-c4e860cf4e8c.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 160.34.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0f:a4:7e:c6:51:aa:e7:45:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=c9b8a2d5-748d-4ae1-bc4c-7d1328488be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:aa:09:eb:06:26:01:b7:f2:50:4d:6e:f6: bd:bf:6e:44:09:39:da:ba:9c:ef:a3:d2:25:9c:e6: 52:8c:b2:b9:36:f1:93:f4:af:18:e4:9f:3b:b9:8d: fb:03:29:b3:ac:14:ad:d5:3b:09:b1:f8:cb:ac:40: a3:ba:31:f9:a2:3e:03:85:f3:d2:ed:d7:c1:d7:82: e0:3e:4b:14:67:2e:09:20:9f:af:ff:51:88:45:6e: 9a:cc:c1:22:25:0b:2c:93:4f:fe:b7:82:0d:44:53: 77:b9:1d:3a:1d:6f:9c:af:df:08:9a:77:c0:3a:23: 22:05:ed:aa:09:16:95:9c:b8:62:13:97:af:52:95: 2c:75:ff:13:ae:2a:4e:7d:7c:f8:00:1e:8c:4f:4c: b0:2d:53:88:0e:47:29:53:89:0b:a3:73:59:68:ca: ae:7d:e0:72:6b:49:3c:e0:38:a3:2f:53:80:a3:17: 25:b7:df:7e:ed:15:c9:75:66:ae:86:6b:da:06:bb: 86:12:86:bd:d3:24:65:cb:67:cd:a0:b7:20:e6:45: 2f:64:fb:7b:c6:bc:f1:0f:90:b0:f3:29:91:f1:80: 5f:91:9d:00:70:5f:ce:bc:88:ab:e8:85:e9:b6:9e: 98:52:f7:12:51:a3:75:99:f0:8d:94:87:0b:fc:20: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C0:4F:46:D4:71:FA:D6:68:7C:AA:41:D1:C4:9F:F4:52:30:51:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ece6eb8-c662-3845-b3e8-c4e860cf4e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 160.34.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f4:94:fc:63:89:06:23:2a:b5:67:9c:79:88:f9:1f:a6:f3: 50:8d:03:e9:08:ad:da:cc:c1:19:e1:87:03:c7:59:43:f2:5a: 2c:d5:ce:03:6f:9d:87:02:a2:6a:97:c6:f2:79:1f:5e:16:97: 85:d4:25:7b:f2:41:0a:26:50:97:22:d2:d0:41:61:40:a1:8d: be:c8:bb:83:b4:fd:1c:3d:7c:3d:35:5c:87:89:de:11:f8:aa: 9b:26:1b:38:41:0c:f5:70:c5:a2:03:84:be:a7:c0:d6:7d:f6: 91:42:1c:72:4c:70:0c:2d:03:23:c7:76:35:6d:80:01:25:fc: 6a:08:39:9f:07:b9:3e:3c:e7:6b:8f:2d:c1:9a:b6:81:b4:21: ee:81:ea:bf:a9:2a:12:3a:76:35:59:fe:14:76:90:3a:b2:47: 3f:57:12:b7:c2:cc:b3:09:da:67:c2:14:9d:af:1e:f7:c2:53: ba:eb:47:58:60:9a:b9:15:4a:ef:44:fb:29:8a:18:9f:f8:52: 28:90:fc:46:f8:af:a5:07:8d:e9:2d:16:f3:25:78:13:f3:14: f6:44:33:61:fc:8d:40:a2:72:a8:fa:56:25:f8:02:68:00:36: 0f:ca:2c:69:f3:13:86:f2:0f:0a:6a:4c:df:c3:a4:d1:c3:2d: ac:e5:ff:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUA+kfsZRqudFEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YzliOGEyZDUtNzQ4ZC00YWUxLWJjNGMtN2QxMzI4NDg4YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyWqCesGJgG38lBNbva9v25ECTnaupzvo9Il nOZSjLK5NvGT9K8Y5J87uY37AymzrBSt1TsJsfjLrECjujH5oj4DhfPS7dfB14Lg PksUZy4JIJ+v/1GIRW6azMEiJQssk0/+t4INRFN3uR06HW+cr98ImnfAOiMiBe2q CRaVnLhiE5evUpUsdf8TripOfXz4AB6MT0ywLVOIDkcpU4kLo3NZaMqufeBya0k8 4DijL1OAoxclt99+7RXJdWauhmvaBruGEoa90yRly2fNoLcg5kUvZPt7xrzxD5Cw 8ymR8YBfkZ0AcF/OvIir6IXptp6YUvcSUaN1mfCNlIcL/CCqRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbAT0bUcfrWaHyqQdHEn/RSMFEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWVjZTZlYjgtYzY2Mi0z ODQ1LWIzZTgtYzRlODYwY2Y0ZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJj0lPxjiQYjKrVnnHmI+R+m81CNA+kIrdrMwRnhhwPHWUPyWizVzgNv nYcComqXxvJ5H14Wl4XUJXvyQQomUJci0tBBYUChjb7Iu4O0/Rw9fD01XIeJ3hH4 qpsmGzhBDPVwxaIDhL6nwNZ99pFCHHJMcAwtAyPHdjVtgAEl/GoIOZ8HuT4852uP LcGatoG0Ie6B6r+pKhI6djVZ/hR2kDqyRz9XErfCzLMJ2mfCFJ2vHvfCU7rrR1hg mrkVSu9E+ymKGJ/4UiiQ/Eb4r6UHjektFvMleBPzFPZEM2H8jUCicqj6ViX4AmgA Ng/KLGnzE4byDwpqTN/DpNHDLazl/90= -----END CERTIFICATE-----Generated at Wed May 13 04:07:15 2026 by rpki-client