$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa File: c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa (raw, json) Hash identifier: 2I8xA2gAYuHr3UCds0aVDTNXORM0fizhos0KKNRtHts= Subject key identifier: 4D:50:67:F5:74:4E:8B:6F:B3:CE:88:89:2A:B9:F7:41:8F:76:3F:2D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF5685A02691912E2337F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 165.1.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:68:5a:02:69:19:12:e2:33:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f0362a90-8019-480f-84ee-23dd2e2d6a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:94:64:e6:d4:d8:fd:6e:8a:55:fb:83:1e: 7a:73:4a:d7:9b:f3:66:80:21:23:ef:f9:d5:fd:4a: bd:a6:0f:8f:5a:96:bf:cd:79:4b:a1:d1:b9:7d:1e: 3e:c9:15:99:61:54:f8:4b:79:96:50:ed:36:e3:24: b6:39:ef:63:c0:ef:37:14:da:80:2b:ca:88:4f:ef: ef:41:c1:b1:2b:3d:ab:0a:96:33:5f:96:4e:68:90: f9:3c:0d:e5:b4:8c:95:34:3b:80:24:56:7c:a1:d3: 3d:22:39:06:00:99:a8:83:0e:3b:55:7d:92:3b:b4: 5c:3e:ff:8e:10:b8:c6:71:99:f3:26:06:9f:04:f8: 99:f1:66:01:e4:f8:0a:93:a4:68:86:4a:3e:ad:a0: 68:46:6e:c8:34:98:4d:40:1d:be:a0:8b:53:f9:cc: 05:bd:07:72:9f:62:ef:e4:9e:17:b1:45:7e:98:86: 01:90:45:87:f6:2e:1c:dc:a8:5a:d2:42:ce:f3:29: 17:f8:ca:78:d8:13:ea:87:bf:ff:f7:5c:4b:29:1e: 41:3d:00:a3:a8:9a:70:90:03:99:da:09:49:ea:75: 8e:40:81:68:85:76:4f:8f:b1:c9:47:fe:a7:3e:a5: f1:fa:87:92:c6:7f:02:11:1f:ca:e3:03:a7:ed:dc: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:50:67:F5:74:4E:8B:6F:B3:CE:88:89:2A:B9:F7:41:8F:76:3F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 165.1.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b7:69:39:74:6a:53:71:ba:0c:33:5a:c7:d6:4a:c5:62:72: 0c:15:cf:cd:bf:7b:be:3e:0c:20:ec:55:ca:52:47:71:57:e7: 50:f9:f3:3c:ea:cb:ed:70:32:75:e9:2f:9e:c8:94:f0:96:3e: b0:f8:4a:6e:cf:32:2c:90:f7:9f:d4:11:d5:33:5e:06:4c:d4: d7:f3:0f:7c:08:47:37:88:27:d7:00:6e:a7:1e:b5:cc:71:46: 4f:5b:4f:04:0d:6c:8d:6a:d8:c4:9e:07:0e:b8:ce:b0:cb:d0: 89:b5:e5:79:4c:c0:ee:c8:5b:b4:34:27:68:b4:55:fc:1c:b3: 15:b5:5f:7c:2e:56:cf:f9:d2:d0:b5:69:00:25:1e:44:af:16: 0b:d8:1f:4c:fd:2b:7e:15:c4:61:01:5d:31:a5:8f:8e:28:8d: ee:fd:e5:93:33:68:48:6e:ea:bf:f4:d7:8a:84:b5:d8:71:fc: 4d:ed:f2:fc:b2:b1:54:43:90:4e:a6:3f:c1:82:e7:71:a9:f0: 45:fc:08:58:c9:bf:0e:ef:cb:19:37:54:ab:c5:bd:9d:1d:02: 9a:8d:db:b7:c3:8c:c7:d2:dc:e5:ea:ff:2b:87:d3:c4:56:9a: 6b:ce:7e:13:5c:2d:c2:bb:5b:cc:f7:27:17:6d:2c:34:e7:87: f4:94:50:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WhaAmkZEuIzfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjAzNjJhOTAtODAxOS00ODBmLTg0ZWUtMjNkZDJlMmQ2YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv6UZObU2P1uilX7gx56c0rXm/NmgCEj7/nV /Uq9pg+PWpa/zXlLodG5fR4+yRWZYVT4S3mWUO024yS2Oe9jwO83FNqAK8qIT+/v QcGxKz2rCpYzX5ZOaJD5PA3ltIyVNDuAJFZ8odM9IjkGAJmogw47VX2SO7RcPv+O ELjGcZnzJgafBPiZ8WYB5PgKk6Rohko+raBoRm7INJhNQB2+oItT+cwFvQdyn2Lv 5J4XsUV+mIYBkEWH9i4c3Kha0kLO8ykX+Mp42BPqh7//91xLKR5BPQCjqJpwkAOZ 2glJ6nWOQIFohXZPj7HJR/6nPqXx+oeSxn8CER/K4wOn7dz1qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1QZ/V0Totvs86IiSq590GPdj8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzlmMzgwNjktYmJiYy0z ZDY1LTg5ZGEtZjFjZmI4NGQ0Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpQF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq3aTl0alNxugwzWsfWSsVicgwVz82/e74+DCDsVcpSR3FX51D58zzq y+1wMnXpL57IlPCWPrD4Sm7PMiyQ95/UEdUzXgZM1NfzD3wIRzeIJ9cAbqcetcxx Rk9bTwQNbI1q2MSeBw64zrDL0Im15XlMwO7IW7Q0J2i0VfwcsxW1X3wuVs/50tC1 aQAlHkSvFgvYH0z9K34VxGEBXTGlj44oje795ZMzaEhu6r/014qEtdhx/E3t8vyy sVRDkE6mP8GC53Gp8EX8CFjJvw7vyxk3VKvFvZ0dApqN27fDjMfS3OXq/yuH08RW mmvOfhNcLcK7W8z3JxdtLDTnh/SUUPI= -----END CERTIFICATE-----Generated at Wed May 13 11:11:26 2026 by rpki-client