$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dad64623-3749-3342-b0df-74cdbe160a48.roa File: dad64623-3749-3342-b0df-74cdbe160a48.roa (raw, json) Hash identifier: U6E9aFd4JCTyk9/Bxzli7/t5FA8tuGA06Cg6kcCqV9Y= Subject key identifier: 38:DB:98:D0:79:31:F7:9E:1A:10:2E:9F:57:74:3D:72:D9:E2:4B:0F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A9430B8F3E34407C45780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dad64623-3749-3342-b0df-74cdbe160a48.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 134.65.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:94:30:b8:f3:e3:44:07:c4:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=8903fb0e-522e-4677-a78a-cf997efbfa2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0f:b2:ee:d1:e1:b6:48:dc:e4:25:09:3d:c0: 21:ab:0c:78:a8:b5:2d:d8:20:70:2f:8b:52:12:0b: 60:aa:55:6e:35:eb:41:17:fe:00:8f:b5:ba:46:ec: ee:14:17:ad:d0:f8:97:07:a0:55:33:00:67:a4:eb: fd:b9:fe:a8:98:d3:02:cf:e7:a0:13:2f:df:ff:8a: 55:ae:e5:cd:fb:68:0d:7e:29:25:39:58:6a:d0:62: e1:5d:11:ec:d5:00:60:33:21:d0:e6:2c:06:29:20: 3e:23:3e:ec:61:a9:4f:43:f7:59:3f:fe:94:8a:53: 86:60:56:22:6f:08:40:4a:03:17:ee:0b:59:e4:9a: 35:81:05:43:bf:d5:95:af:9f:10:65:e4:b2:f4:59: cd:c8:b1:2b:a8:73:ae:3e:38:91:f7:eb:a3:48:2f: 69:53:5b:87:2d:da:02:d5:41:c5:17:cd:5c:11:8d: 44:d5:80:0a:fc:bd:d6:36:b3:7a:b4:1a:2d:65:ad: 0e:fd:02:60:66:33:6b:a7:e6:e2:23:46:4e:b2:a8: 7c:ce:6b:69:2c:3b:4c:7c:90:53:34:4e:65:73:7d: 6e:9e:b8:21:41:18:bf:bb:27:90:24:c8:74:25:5d: 9b:63:15:68:b6:0e:bb:fc:81:23:72:25:f7:a1:92: 44:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DB:98:D0:79:31:F7:9E:1A:10:2E:9F:57:74:3D:72:D9:E2:4B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dad64623-3749-3342-b0df-74cdbe160a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.65.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:aa:b5:31:ad:a6:cd:a6:63:36:32:0d:be:b3:a9:5f:46:c3: a1:8b:e6:d3:ce:14:57:e9:c9:bf:24:58:8e:a5:1c:f1:5c:8b: 86:b1:02:35:3f:4e:c6:e6:c1:5b:0c:cf:9d:73:89:47:71:b6: 34:71:d3:b5:86:d0:1f:ef:8b:49:84:59:2e:f1:3c:48:8c:f9: 5f:8e:a0:71:f3:a0:18:08:b2:c2:d1:d3:b4:be:0d:95:94:be: dc:6a:3a:0b:a3:91:01:73:99:b5:79:c9:5d:63:c5:bc:77:bb: 2e:ad:39:f1:13:32:a5:b4:07:35:d4:f4:25:c6:b0:8b:16:02: ef:c3:b2:4e:de:83:80:e8:53:bd:cf:5e:7b:99:93:94:a6:64: 42:5d:7d:11:9c:1d:12:37:4c:03:4b:ff:58:bb:99:79:25:d8: 55:c8:b5:43:53:c4:83:de:ed:4d:99:09:73:53:53:bd:ea:95: 32:01:9a:a8:af:5c:b6:c4:d7:71:92:26:c2:7a:b3:98:36:14: 2a:88:16:73:0d:ab:fc:fe:a4:35:f2:59:ff:53:b3:8e:af:8b: d8:89:fd:ee:f8:60:74:46:d4:37:d5:dd:35:ce:bf:31:cd:c4: 04:55:2d:b7:e3:c9:50:f7:d6:5d:d3:93:9b:24:ad:cd:e3:d6: ac:8f:9c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpQwuPPjRAfEV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ODkwM2ZiMGUtNTIyZS00Njc3LWE3OGEtY2Y5OTdlZmJmYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA+y7tHhtkjc5CUJPcAhqwx4qLUt2CBwL4tS EgtgqlVuNetBF/4Aj7W6RuzuFBet0PiXB6BVMwBnpOv9uf6omNMCz+egEy/f/4pV ruXN+2gNfiklOVhq0GLhXRHs1QBgMyHQ5iwGKSA+Iz7sYalPQ/dZP/6UilOGYFYi bwhASgMX7gtZ5Jo1gQVDv9WVr58QZeSy9FnNyLErqHOuPjiR9+ujSC9pU1uHLdoC 1UHFF81cEY1E1YAK/L3WNrN6tBotZa0O/QJgZjNrp+biI0ZOsqh8zmtpLDtMfJBT NE5lc31unrghQRi/uyeQJMh0JV2bYxVotg67/IEjciX3oZJEoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjbmNB5MfeeGhAun1d0PXLZ4ksPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGFkNjQ2MjMtMzc0OS0z MzQyLWIwZGYtNzRjZGJlMTYwYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChkE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaqtTGtps2mYzYyDb6zqV9Gw6GL5tPOFFfpyb8kWI6lHPFci4axAjU/ TsbmwVsMz51ziUdxtjRx07WG0B/vi0mEWS7xPEiM+V+OoHHzoBgIssLR07S+DZWU vtxqOgujkQFzmbV5yV1jxbx3uy6tOfETMqW0BzXU9CXGsIsWAu/Dsk7eg4DoU73P XnuZk5SmZEJdfRGcHRI3TANL/1i7mXkl2FXItUNTxIPe7U2ZCXNTU73qlTIBmqiv XLbE13GSJsJ6s5g2FCqIFnMNq/z+pDXyWf9Ts46vi9iJ/e74YHRG1DfV3TXOvzHN xARVLbfjyVD31l3Tk5skrc3j1qyPnL0= -----END CERTIFICATE-----Generated at Wed May 13 14:12:50 2026 by rpki-client