$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b434b400-b1a6-3968-9911-72ab167e9b40.roa File: b434b400-b1a6-3968-9911-72ab167e9b40.roa (raw, json) Hash identifier: 7hC0QyHEzC7FXFYwU8Gh+3JhdNOf4Slwj+uO0NhtsX0= Subject key identifier: F3:84:DA:F3:00:BC:2C:7C:BD:B8:25:95:A5:26:58:29:9F:E2:14:98 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94E0A1337D2CA8EE1C5D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b434b400-b1a6-3968-9911-72ab167e9b40.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 160.34.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e0:a1:33:7d:2c:a8:ee:1c:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=0be5709a-a603-4444-a5b3-12adffba670e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1a:21:37:4c:0d:54:f8:f5:4e:52:f6:76:ef: 70:ed:2f:72:e8:87:08:ce:84:42:66:f8:52:d6:ef: 00:ea:97:6e:38:f9:36:ce:6d:f5:83:18:4d:35:7d: 4d:bf:29:f7:fd:1a:d0:c1:71:fa:8e:4c:03:aa:ea: cc:58:62:b1:52:33:65:aa:c4:b9:be:12:43:1c:f8: e7:20:3f:74:89:8b:68:cd:e2:62:88:a1:9c:29:21: ee:79:f4:c1:45:a9:1c:d1:82:8f:35:9b:53:ed:12: 51:e1:96:0a:3a:25:78:0b:60:0c:bd:eb:fc:f4:4c: 55:11:3e:c5:51:5d:61:d8:e6:1b:fd:5f:42:40:55: cd:0f:3d:5a:2e:e1:1e:8e:10:6e:fe:63:88:ac:aa: 78:27:55:63:aa:12:0a:56:a7:99:31:40:d6:57:63: 0b:74:56:e0:ea:af:0c:8c:42:b0:3a:d0:05:db:45: 0b:97:47:92:c1:1c:f9:3f:67:30:09:2b:6e:34:df: 37:b0:d2:0a:18:83:f4:d8:b9:e3:26:73:92:90:73: d3:76:25:62:40:af:a9:98:ea:26:7b:46:d8:91:99: 59:62:9b:34:da:5a:06:55:a0:32:b9:2f:a5:71:45: 9d:25:80:50:e2:4a:50:89:8b:56:01:e9:df:a8:55: 06:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:84:DA:F3:00:BC:2C:7C:BD:B8:25:95:A5:26:58:29:9F:E2:14:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b434b400-b1a6-3968-9911-72ab167e9b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 160.34.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:13:83:84:e0:dd:40:43:f4:5f:5e:f6:2b:dd:99:8e:64:3f: e3:72:41:cd:e2:16:65:97:f5:bc:af:10:c8:04:80:7d:3f:5b: b4:8f:61:a3:46:f0:6d:84:08:14:27:1c:35:49:aa:b1:70:b6: 2e:ee:ee:92:a2:be:33:5c:21:80:71:79:85:12:5f:a8:a9:0f: f4:72:cd:61:07:0c:4d:8c:e8:5c:a3:94:e8:18:9f:1e:2c:23: f0:52:04:ef:08:6d:1f:0f:d0:9a:df:28:c7:da:d8:44:1d:f9: 68:41:14:5f:d6:86:92:fd:3d:c6:f9:a4:f4:0a:f0:7a:6f:aa: 49:e4:52:7d:0c:28:9f:18:47:72:c9:b2:24:e4:16:45:d9:fe: 07:b1:38:cf:2c:86:09:25:29:cc:04:4d:ea:97:db:c4:c3:16: 2a:70:f8:f4:0d:f2:48:88:aa:c9:c5:0b:73:2d:6f:38:b9:19: 2e:60:2d:c9:ae:02:d0:ea:bc:3e:cd:50:17:99:9f:50:ac:50: f2:9f:42:01:05:f0:7f:2e:09:c0:f4:22:fe:eb:36:fe:55:9c: 41:0c:32:f9:fd:68:db:2f:4f:d7:99:56:7b:1d:a9:a8:06:7f: 45:9c:74:90:da:fe:5e:6e:78:63:c3:df:3d:4d:73:15:2c:51: 64:76:7e:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOChM30sqO4cXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MGJlNTcwOWEtYTYwMy00NDQ0LWE1YjMtMTJhZGZmYmE2NzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hohN0wNVPj1TlL2du9w7S9y6IcIzoRCZvhS 1u8A6pduOPk2zm31gxhNNX1Nvyn3/RrQwXH6jkwDqurMWGKxUjNlqsS5vhJDHPjn ID90iYtozeJiiKGcKSHuefTBRakc0YKPNZtT7RJR4ZYKOiV4C2AMvev89ExVET7F UV1h2OYb/V9CQFXNDz1aLuEejhBu/mOIrKp4J1VjqhIKVqeZMUDWV2MLdFbg6q8M jEKwOtAF20ULl0eSwRz5P2cwCStuNN83sNIKGIP02LnjJnOSkHPTdiViQK+pmOom e0bYkZlZYps02loGVaAyuS+lcUWdJYBQ4kpQiYtWAenfqFUGOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOE2vMAvCx8vbgllaUmWCmf4hSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjQzNGI0MDAtYjFhNi0z OTY4LTk5MTEtNzJhYjE2N2U5YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCJ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkTg4Tg3UBD9F9e9ivdmY5kP+NyQc3iFmWX9byvEMgEgH0/W7SPYaNG 8G2ECBQnHDVJqrFwti7u7pKivjNcIYBxeYUSX6ipD/RyzWEHDE2M6FyjlOgYnx4s I/BSBO8IbR8P0JrfKMfa2EQd+WhBFF/WhpL9Pcb5pPQK8HpvqknkUn0MKJ8YR3LJ siTkFkXZ/gexOM8shgklKcwETeqX28TDFipw+PQN8kiIqsnFC3Mtbzi5GS5gLcmu AtDqvD7NUBeZn1CsUPKfQgEF8H8uCcD0Iv7rNv5VnEEMMvn9aNsvT9eZVnsdqagG f0WcdJDa/l5ueGPD3z1NcxUsUWR2fpM= -----END CERTIFICATE-----Generated at Fri Jul 24 12:21:43 2026 by rpki-client