$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa File: b9f5a37a-e848-3f03-9df0-961bca4da222.roa (raw, json) Hash identifier: RPpDL46RIjWi/ZXL5U2cNNgrqk5bTSq04QN3YYOp4I0= Subject key identifier: 92:D2:43:76:7D:5F:13:9C:5B:E8:B4:54:46:69:B5:0C:DD:99:25:E8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC6CAFAA2E2720145221E3540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 137.131.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:fa:a2:e2:72:01:45:22:1e:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=30dfbf3a-341e-4aba-9fd5-97180fcfccf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:06:01:c1:d3:0a:bd:10:ea:29:15:c8:54: d3:07:86:dc:bc:2f:53:f5:1e:9f:36:81:77:87:71: 84:42:e7:c8:0f:c1:ed:b4:73:21:31:88:8a:9a:a6: 73:91:48:b7:d9:19:53:e4:38:55:83:13:40:12:11: af:89:30:8d:cf:5e:12:91:79:77:30:f4:20:42:56: 26:bc:ff:51:a5:76:4b:dd:05:16:59:10:7c:34:ef: 90:bd:85:ae:b9:8e:cd:7a:41:f9:92:06:79:c0:18: 56:be:0e:a0:8d:5c:4b:3c:d0:22:e2:ff:1e:30:82: e3:7c:1e:c6:01:33:2a:1b:ba:fc:6d:fd:57:c4:f0: bd:4e:ce:13:9e:54:ee:49:d5:a2:1d:8d:90:42:c3: 27:7f:1a:64:60:8e:1a:73:ec:4d:d9:71:47:a9:af: f6:ab:19:63:af:4c:e3:4e:71:b4:d5:5d:65:ee:18: 0c:a3:e6:3e:17:f8:08:e4:0a:e2:ce:0e:ae:da:d7: 1a:8a:6f:45:bd:5a:9c:81:1a:c0:a5:36:04:10:56: 8a:6e:06:00:35:8e:46:b7:3b:c7:15:8f:75:7f:0a: 7d:29:cc:b8:86:31:aa:0a:26:76:e3:f9:54:4e:f3: 12:85:ff:f4:44:e0:b9:ab:18:d7:b9:1e:14:f4:bd: e7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D2:43:76:7D:5F:13:9C:5B:E8:B4:54:46:69:B5:0C:DD:99:25:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 137.131.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:65:b3:37:e2:8b:a2:d2:50:fd:8f:3c:ed:18:19:70:d3:4e: d2:b0:e4:d0:94:c1:d7:f9:d9:c6:ff:ca:8e:ea:27:c2:86:d4: c1:5e:9b:b3:99:ce:c8:c0:2c:79:f3:da:9d:9a:c9:f6:89:24: 7c:85:08:70:1c:9b:38:5a:83:0d:98:49:f8:88:89:dc:bf:54: 3a:da:a8:f1:74:3a:f5:1c:4b:26:f0:f6:71:ec:39:bb:03:c0: 61:a0:9b:cb:ae:32:c0:7e:08:7d:4d:71:e2:45:5a:ef:af:3b: 49:de:a0:08:e7:09:a2:b2:54:df:45:1d:cd:fa:c9:6b:21:03: 09:8c:a2:98:09:60:fc:5a:3c:3e:8f:7e:13:07:b1:ab:f3:69: 0b:cd:a0:ac:97:b5:c6:24:2f:b6:91:9c:dc:ce:d8:4f:51:92: c2:d8:ee:3e:09:e8:a1:4a:ae:5d:d6:98:ce:07:7e:9b:94:c9: b6:ea:5d:ef:ad:f9:64:64:33:d7:be:c3:3d:a8:4a:58:c6:9b: 15:02:b1:7a:60:6d:1b:c2:61:49:66:53:1a:5d:c4:7b:a0:59: e9:e9:a6:80:40:88:8a:15:35:80:76:26:91:34:0e:33:a8:06: 63:92:7b:e5:03:d2:71:14:94:b6:13:e2:f2:a5:ae:37:33:cc: 14:47:e8:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Gyvqi4nIBRSIeNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk MzBkZmJmM2EtMzQxZS00YWJhLTlmZDUtOTcxODBmY2ZjY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndgGAcHTCr0Q6ikVyFTTB4bcvC9T9R6fNoF3 h3GEQufID8HttHMhMYiKmqZzkUi32RlT5DhVgxNAEhGviTCNz14SkXl3MPQgQlYm vP9RpXZL3QUWWRB8NO+QvYWuuY7NekH5kgZ5wBhWvg6gjVxLPNAi4v8eMILjfB7G ATMqG7r8bf1XxPC9Ts4TnlTuSdWiHY2QQsMnfxpkYI4ac+xN2XFHqa/2qxljr0zj TnG01V1l7hgMo+Y+F/gI5Arizg6u2tcaim9FvVqcgRrApTYEEFaKbgYANY5GtzvH FY91fwp9Kcy4hjGqCiZ24/lUTvMShf/0ROC5qxjXuR4U9L3nPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLSQ3Z9XxOcW+i0VEZptQzdmSXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjlmNWEzN2EtZTg0OC0z ZjAzLTlkZjAtOTYxYmNhNGRhMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiYNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdlszfii6LSUP2PPO0YGXDTTtKw5NCUwdf52cb/yo7qJ8KG1MFem7OZ zsjALHnz2p2ayfaJJHyFCHAcmzhagw2YSfiIidy/VDraqPF0OvUcSybw9nHsObsD wGGgm8uuMsB+CH1NceJFWu+vO0neoAjnCaKyVN9FHc36yWshAwmMopgJYPxaPD6P fhMHsavzaQvNoKyXtcYkL7aRnNzO2E9RksLY7j4J6KFKrl3WmM4HfpuUybbqXe+t +WRkM9e+wz2oSljGmxUCsXpgbRvCYUlmUxpdxHugWenppoBAiIoVNYB2JpE0DjOo BmOSe+UD0nEUlLYT4vKlrjczzBRH6OU= -----END CERTIFICATE-----Generated at Wed May 13 06:25:10 2026 by rpki-client