$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db9df24f-e518-3142-aced-9dbaf6b43f10.roa File: db9df24f-e518-3142-aced-9dbaf6b43f10.roa (raw, json) Hash identifier: 2ML1D+yTiLrbsVffFUX85YBdPlIXPkwSmuMASfhHPOA= Subject key identifier: 35:B0:9C:7A:85:2D:D0:DC:F9:86:89:54:FE:1F:25:96:E1:8B:81:7B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A9FEC82EAC13734C32B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db9df24f-e518-3142-aced-9dbaf6b43f10.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 134.70.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9f:ec:82:ea:c1:37:34:c3:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=3a26b797-639b-4632-aad3-c8ca6924006a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:fe:69:1f:03:4e:ee:e1:69:1d:8b:d9:48: ec:4c:a8:73:86:f6:cd:18:a9:1a:c8:49:f1:c4:bb: bc:cc:83:03:f6:7c:5a:75:fb:a6:40:5e:cb:b6:72: d8:a1:16:5f:58:00:b0:ee:3a:11:22:6e:1c:5f:81: 81:6f:8f:a6:6c:c7:10:47:14:67:76:38:51:90:c2: b2:48:7f:c8:51:7c:b2:80:8b:28:70:cb:ee:39:50: dd:82:80:f7:6d:26:4a:8d:ab:19:b0:97:91:48:d8: 13:4b:1c:2d:16:ce:44:26:2f:db:12:f4:dc:cc:69: 8e:4a:8f:45:cc:c3:91:41:2d:0c:5b:fc:3b:48:b2: 40:20:0d:0a:52:48:c9:0f:e6:a6:92:3a:7b:74:0e: 62:51:a0:eb:09:ba:21:60:1c:60:41:8c:fa:13:89: 6a:af:8b:4f:4f:3d:22:f8:42:71:c3:8a:24:86:39: eb:c7:8f:da:6f:f8:ea:30:41:c7:6e:cb:bf:6e:f1: ca:a4:a6:8c:ae:9c:71:81:36:fa:61:a9:f1:3f:0e: a5:44:a5:73:04:3b:96:29:3f:0b:9b:ef:78:45:20: 20:f7:61:cb:28:d8:ac:05:4e:c8:11:73:a3:f8:18: ba:ef:4d:b1:5c:94:bf:cd:83:93:fd:f4:9f:dc:b7: f6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B0:9C:7A:85:2D:D0:DC:F9:86:89:54:FE:1F:25:96:E1:8B:81:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db9df24f-e518-3142-aced-9dbaf6b43f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ac:20:41:15:20:c1:8d:01:07:23:7c:41:76:ca:63:c9:42: d8:a9:11:0f:fa:ba:be:cf:f4:8b:12:09:4f:03:69:9b:6e:d4: 22:41:9a:54:71:b6:d5:8e:57:de:cc:5c:5f:eb:34:7d:24:4d: db:1d:ac:c2:3b:c6:1e:41:3a:56:a6:85:73:31:b1:78:1a:04: 5a:b5:bd:cc:65:64:cc:08:ee:53:ea:a8:76:d5:cb:fc:06:fa: bb:81:e3:f4:a3:2c:a4:a8:1a:60:38:10:d6:fe:77:7d:99:b6: fa:22:97:eb:41:f7:b6:1b:21:35:36:9b:35:54:db:5c:18:da: 6c:89:87:1f:66:10:5b:e8:b2:b6:2a:79:91:31:83:a5:68:7b: 4b:13:9f:2c:e6:b7:26:d0:f7:fe:fe:a7:0e:f0:45:e5:b7:7a: 51:af:15:ce:b5:36:1a:c9:d8:d3:76:da:da:0b:34:1c:d5:96: 00:a1:56:bc:e4:6d:8f:e5:4f:46:f7:bd:8a:c6:5b:22:9b:c5: 75:19:c0:7a:be:c5:e0:6e:ab:56:26:9a:64:e0:18:d1:7e:fd: 6a:c7:b9:a3:1f:c5:96:cf:f8:ac:44:51:21:88:5a:f8:e5:fb: 35:9a:cd:dc:29:dc:bc:af:3b:21:d6:dc:64:09:ea:fc:36:70: c5:fd:42:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWp/sgurBNzTDKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk M2EyNmI3OTctNjM5Yi00NjMyLWFhZDMtYzhjYTY5MjQwMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ/+aR8DTu7haR2L2UjsTKhzhvbNGKkayEnx xLu8zIMD9nxadfumQF7LtnLYoRZfWACw7joRIm4cX4GBb4+mbMcQRxRndjhRkMKy SH/IUXyygIsocMvuOVDdgoD3bSZKjasZsJeRSNgTSxwtFs5EJi/bEvTczGmOSo9F zMORQS0MW/w7SLJAIA0KUkjJD+amkjp7dA5iUaDrCbohYBxgQYz6E4lqr4tPTz0i +EJxw4okhjnrx4/ab/jqMEHHbsu/bvHKpKaMrpxxgTb6YanxPw6lRKVzBDuWKT8L m+94RSAg92HLKNisBU7IEXOj+Bi6702xXJS/zYOT/fSf3Lf26wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWwnHqFLdDc+YaJVP4fJZbhi4F7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGI5ZGYyNGYtZTUxOC0z MTQyLWFjZWQtOWRiYWY2YjQzZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2sIEEVIMGNAQcjfEF2ymPJQtipEQ/6ur7P9IsSCU8DaZtu1CJBmlRx ttWOV97MXF/rNH0kTdsdrMI7xh5BOlamhXMxsXgaBFq1vcxlZMwI7lPqqHbVy/wG +ruB4/SjLKSoGmA4ENb+d32Ztvoil+tB97YbITU2mzVU21wY2myJhx9mEFvosrYq eZExg6Voe0sTnyzmtybQ9/7+pw7wReW3elGvFc61NhrJ2NN22toLNBzVlgChVrzk bY/lT0b3vYrGWyKbxXUZwHq+xeBuq1YmmmTgGNF+/WrHuaMfxZbP+KxEUSGIWvjl +zWazdwp3LyvOyHW3GQJ6vw2cMX9Qm4= -----END CERTIFICATE-----Generated at Wed May 13 04:13:32 2026 by rpki-client