$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1edfb50-fd50-3ec8-8924-890baac09491.roa File: f1edfb50-fd50-3ec8-8924-890baac09491.roa (raw, json) Hash identifier: dLftkamVgX/kz4xFmE4Ii/KPKD3JyWoWVOQpOxdiAI0= Subject key identifier: 55:EA:89:A2:EB:F6:D5:D6:5F:B5:73:06:DD:B0:85:6C:34:D4:B3:9F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC5555ABB810875CBA1A540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1edfb50-fd50-3ec8-8924-890baac09491.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 134.185.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:55:5a:bb:81:08:75:cb:a1:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=176591c9-e278-45bb-af9e-25cf1f72302a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:12:c0:5f:96:61:41:7c:28:76:9d:e8:e0: b4:e8:ae:bc:21:d3:40:8a:84:70:07:c5:d7:00:92: b3:5b:38:e6:2a:5f:36:a6:ba:bc:77:c4:a6:65:f2: f4:4e:ab:8e:3a:84:c5:06:33:63:9c:1a:96:d4:74: b4:fa:53:4e:b9:21:42:fd:82:6d:6b:e5:ce:46:94: a9:79:1e:2a:7a:23:fe:87:58:b7:9a:93:06:fc:43: ba:a3:ff:7b:b1:cb:b1:8c:26:ec:8f:40:70:56:3e: 00:fb:4f:20:a2:14:c7:02:b5:c2:c0:df:6c:b5:b5: 98:8c:6e:bb:4e:78:e8:bd:ec:55:57:7f:f2:25:14: e1:12:ca:e0:94:7c:ac:8d:55:55:9a:70:43:a8:2d: 9a:fd:b8:ef:71:ad:b7:14:85:e8:c6:46:59:ef:bd: ec:84:c4:47:9d:1f:7c:29:7b:62:72:b5:d2:e9:65: 62:cd:9f:e7:5f:08:3c:f8:8d:79:bd:ed:fb:30:66: dc:7a:67:f0:96:38:2f:9e:d0:a1:1b:4c:e3:e3:88: d7:6c:21:68:8a:c3:c0:e2:c5:46:54:26:5b:2c:80: 6f:14:f1:a6:dc:f0:4f:7a:c4:82:e5:fe:07:21:f0: 86:dd:68:86:f2:4a:70:7f:c8:2b:5f:7b:c9:66:31: 68:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EA:89:A2:EB:F6:D5:D6:5F:B5:73:06:DD:B0:85:6C:34:D4:B3:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1edfb50-fd50-3ec8-8924-890baac09491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:95:7b:1e:40:4b:41:62:11:8e:bd:b9:5f:a9:6f:20:e6:7b: d1:a2:66:fd:4e:6a:73:fc:28:04:24:5f:a2:97:3e:47:22:46: 16:98:eb:20:c6:cd:d7:57:9c:1a:72:0f:e0:b4:99:3a:49:58: 9b:10:95:95:83:99:22:57:8f:f3:0e:1f:f8:4f:74:ef:8d:0d: 91:75:31:e7:53:21:24:d5:6b:68:00:17:75:e5:8a:e4:6f:bd: 8c:31:ac:58:f3:09:70:84:fb:19:f3:40:06:1c:82:2b:9b:c7: 01:42:d1:e0:7a:34:cc:90:80:88:be:e7:52:86:e7:79:6c:d2: bb:e1:db:5f:c9:d9:58:48:30:9a:2c:0f:4d:5e:87:96:30:6d: 89:88:4a:78:1d:76:ca:a7:af:7b:bb:94:c2:25:c0:6c:46:21: 63:08:74:a8:5f:22:1a:2e:70:2f:e6:d9:95:f2:59:a1:c8:04: 3d:96:37:60:3f:04:0d:df:61:18:9e:50:97:c8:9c:a7:ac:42: 47:00:67:7a:5a:d7:31:c7:78:e1:ad:48:38:b6:6a:10:94:ea: 0f:21:fc:b4:09:7c:33:cd:b2:74:c9:62:5b:58:aa:d4:2d:e6: 3f:b1:bd:fb:d8:64:93:26:93:59:fe:79:ab:ed:40:e9:54:d9: df:4f:b9:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVVau4EIdcuhpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MTc2NTkxYzktZTI3OC00NWJiLWFmOWUtMjVjZjFmNzIzMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4MSwF+WYUF8KHad6OC06K68IdNAioRwB8XX AJKzWzjmKl82prq8d8SmZfL0TquOOoTFBjNjnBqW1HS0+lNOuSFC/YJta+XORpSp eR4qeiP+h1i3mpMG/EO6o/97scuxjCbsj0BwVj4A+08gohTHArXCwN9stbWYjG67 TnjovexVV3/yJRThEsrglHysjVVVmnBDqC2a/bjvca23FIXoxkZZ773shMRHnR98 KXticrXS6WVizZ/nXwg8+I15ve37MGbcemfwljgvntChG0zj44jXbCFoisPA4sVG VCZbLIBvFPGm3PBPesSC5f4HIfCG3WiG8kpwf8grX3vJZjFoHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXqiaLr9tXWX7VzBt2whWw01LOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjFlZGZiNTAtZmQ1MC0z ZWM4LTg5MjQtODkwYmFhYzA5NDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChrlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyVex5AS0FiEY69uV+pbyDme9GiZv1OanP8KAQkX6KXPkciRhaY6yDG zddXnBpyD+C0mTpJWJsQlZWDmSJXj/MOH/hPdO+NDZF1MedTISTVa2gAF3XliuRv vYwxrFjzCXCE+xnzQAYcgiubxwFC0eB6NMyQgIi+51KG53ls0rvh21/J2VhIMJos D01eh5YwbYmISngddsqnr3u7lMIlwGxGIWMIdKhfIhoucC/m2ZXyWaHIBD2WN2A/ BA3fYRieUJfInKesQkcAZ3pa1zHHeOGtSDi2ahCU6g8h/LQJfDPNsnTJYltYqtQt 5j+xvfvYZJMmk1n+eavtQOlU2d9PuSo= -----END CERTIFICATE-----Generated at Wed May 13 11:41:40 2026 by rpki-client