$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba3f71ac-75d6-3352-a412-f8edf007c36e.roa File: ba3f71ac-75d6-3352-a412-f8edf007c36e.roa (raw, json) Hash identifier: IwaTay1x29ntHEsIEbJMwdT75b3nwW2RG2j0vXDEfGw= Subject key identifier: 61:8A:8B:59:A8:4F:CA:57:C5:D8:C3:8E:E2:F1:B7:1F:C3:86:89:F5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC6CB131FBB03B8103AF65728 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba3f71ac-75d6-3352-a412-f8edf007c36e.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 159.13.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:13:1f:bb:03:b8:10:3a:f6:57:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=9f9c6495-cf52-4428-9bc5-9dd85ca8c411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:57:fa:3f:be:3d:4c:18:67:d0:bf:b7:d4: 30:08:93:a9:60:57:16:98:5f:ea:e3:1c:5f:f4:33: 33:c5:45:00:fb:59:52:0d:81:b6:65:c2:86:80:c2: 80:5a:c3:11:3f:4f:1b:77:db:5f:58:68:b8:5a:da: 92:12:1b:a4:12:1f:ec:d1:79:c3:c8:61:77:13:81: ab:1d:84:bd:3d:30:85:9f:d8:b4:81:ab:3e:46:0f: a6:0e:d6:c2:5f:ac:4d:88:7e:fc:9b:df:42:0b:24: 7c:d3:db:60:1c:d4:75:ec:35:84:3e:30:56:2b:6d: 18:8c:02:00:ef:42:59:f1:56:13:64:cb:3c:47:2c: de:2f:2c:6e:02:ba:4f:af:31:5f:c6:a7:14:62:35: 5e:27:f6:bc:8f:43:39:74:c1:8f:9a:05:8f:bd:4d: b1:eb:e7:01:a5:96:b3:ff:e4:62:56:6c:68:d1:11: ec:7e:44:76:a5:b7:d5:ab:7c:83:d4:bc:d3:33:d1: f6:05:c5:83:6a:f1:dc:4f:e9:80:49:d9:c9:4c:a0: 56:b9:d8:cb:c3:1d:6a:13:47:be:04:da:7a:2f:e4: 82:9b:e9:af:b5:3e:2d:33:66:36:71:d2:9c:52:af: ae:aa:ba:1a:79:30:1d:09:da:ee:cd:72:79:35:04: 44:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8A:8B:59:A8:4F:CA:57:C5:D8:C3:8E:E2:F1:B7:1F:C3:86:89:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba3f71ac-75d6-3352-a412-f8edf007c36e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.13.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e2:19:1e:de:d2:21:33:75:6d:f8:db:44:fc:e1:dc:2e:26: a4:84:3e:42:9f:79:b4:f2:fa:8c:b0:f5:47:32:9c:b7:7f:42: 92:e8:07:c8:2d:aa:4b:c3:c3:46:8a:1e:94:13:ef:30:e1:11: 09:98:1f:5d:3e:98:0b:21:c0:40:4d:7f:7a:8f:24:77:0f:a8: 03:10:5b:6f:ba:8f:fd:9c:ec:2a:65:70:da:15:9a:60:be:7f: 05:2c:b5:84:ff:5b:42:e6:d9:4d:ee:e7:a3:86:4b:d9:9a:c8: 13:7e:46:9a:57:57:e0:a8:e4:49:33:9b:64:49:4d:d2:c2:89: f3:dd:c4:de:05:09:dc:4d:b3:bf:37:51:05:35:7b:bb:80:85: 2a:77:e0:de:06:12:99:fa:bc:24:9f:1b:6b:62:74:02:57:fd: ea:d1:60:67:b4:d4:dc:1a:f2:8a:ac:cf:35:c0:b7:20:5b:51: 69:3a:0a:c1:29:27:1c:22:59:f1:70:24:cc:cc:5c:a4:ba:95: 98:e1:98:bd:78:3b:8c:62:c4:7d:14:52:e8:08:d1:f6:22:d0: 4a:37:7f:98:0b:c5:98:ec:3b:89:37:5b:9e:da:5b:c2:d9:cf: b6:3c:63:a8:68:54:e7:57:45:84:4f:ed:ca:b7:32:4a:2e:73: 9d:18:7e:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GyxMfuwO4EDr2VygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk OWY5YzY0OTUtY2Y1Mi00NDI4LTliYzUtOWRkODVjYThjNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgJX+j++PUwYZ9C/t9QwCJOpYFcWmF/q4xxf 9DMzxUUA+1lSDYG2ZcKGgMKAWsMRP08bd9tfWGi4WtqSEhukEh/s0XnDyGF3E4Gr HYS9PTCFn9i0gas+Rg+mDtbCX6xNiH78m99CCyR809tgHNR17DWEPjBWK20YjAIA 70JZ8VYTZMs8RyzeLyxuArpPrzFfxqcUYjVeJ/a8j0M5dMGPmgWPvU2x6+cBpZaz /+RiVmxo0RHsfkR2pbfVq3yD1LzTM9H2BcWDavHcT+mASdnJTKBWudjLwx1qE0e+ BNp6L+SCm+mvtT4tM2Y2cdKcUq+uqroaeTAdCdruzXJ5NQRE7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGKi1moT8pXxdjDjuLxtx/Dhon1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmEzZjcxYWMtNzVkNi0z MzUyLWE0MTItZjhlZGYwMDdjMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnw1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFziGR7e0iEzdW3420T84dwuJqSEPkKfebTy+oyw9UcynLd/QpLoB8gt qkvDw0aKHpQT7zDhEQmYH10+mAshwEBNf3qPJHcPqAMQW2+6j/2c7CplcNoVmmC+ fwUstYT/W0Lm2U3u56OGS9mayBN+RppXV+Co5Ekzm2RJTdLCifPdxN4FCdxNs783 UQU1e7uAhSp34N4GEpn6vCSfG2tidAJX/erRYGe01Nwa8oqszzXAtyBbUWk6CsEp JxwiWfFwJMzMXKS6lZjhmL14O4xixH0UUugI0fYi0Eo3f5gLxZjsO4k3W57aW8LZ z7Y8Y6hoVOdXRYRP7cq3Mkouc50YflE= -----END CERTIFICATE-----Generated at Wed May 13 11:08:50 2026 by rpki-client