$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fab11a09-e886-3a21-b46f-3dca82eb9b29.roa File: fab11a09-e886-3a21-b46f-3dca82eb9b29.roa (raw, json) Hash identifier: vLh8PjqkndrnPGOVM9vZby1YOUCMaa+X9Qgk1qHC6dE= Subject key identifier: 1F:6C:FB:05:BF:02:81:5F:22:61:FA:96:37:7A:27:7B:81:DE:03:F5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF9987995C89A49B8836D76 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fab11a09-e886-3a21-b46f-3dca82eb9b29.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 134.70.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:98:79:95:c8:9a:49:b8:83:6d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=8a0cd2af-8f4b-408d-92f2-db10a64de305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:b1:7c:67:8c:0d:21:c3:65:28:ca:7b:b5: 24:a4:bf:70:33:1e:dd:3d:96:04:9c:e1:fb:f6:98: 78:cd:ed:b9:8b:d1:32:d3:24:ab:35:f2:a0:d6:b8: bf:ed:36:6e:df:20:10:ac:17:2b:c1:af:63:e6:aa: 1b:90:fd:4e:f2:14:6d:7e:fb:b1:09:2b:e2:c7:4f: a4:3c:d4:e8:1a:b6:6f:e6:24:92:7d:da:46:67:fb: 95:cd:80:aa:b3:f3:cb:7e:72:70:e8:f4:f2:a3:00: 16:6e:08:91:0b:3d:d0:f6:1b:1c:74:cb:f7:c5:f6: 5f:c9:d9:ee:a9:da:f2:80:74:de:6a:25:e4:69:30: 17:97:35:0c:10:62:d9:f5:a9:70:98:80:f8:ed:c2: 36:a6:2c:d9:5d:92:e4:ec:df:13:2e:e5:9f:60:95: 5f:4b:32:11:b2:f8:c3:fd:89:9e:4d:95:5f:7b:fe: 7f:ea:b0:17:97:88:08:ae:33:3a:4c:78:15:5b:16: a1:bc:be:4d:ea:11:1d:a8:2f:49:69:45:3a:f8:00: 75:88:91:cb:2d:7c:24:47:37:07:2d:25:a4:70:64: d3:55:b6:5f:76:c4:75:5f:7c:22:7b:bd:6e:57:39: a5:10:b2:96:22:84:ff:33:09:cc:f1:5b:3b:29:73: a4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6C:FB:05:BF:02:81:5F:22:61:FA:96:37:7A:27:7B:81:DE:03:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fab11a09-e886-3a21-b46f-3dca82eb9b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:90:0f:f8:11:80:c4:4b:16:57:c1:b1:87:08:66:1d:19:ba: fe:cf:94:8a:18:5e:3f:43:fe:a8:c6:8e:4b:50:8c:f4:df:e1: 07:a1:f5:bf:63:36:b4:38:e9:34:d0:bf:03:6a:c7:0a:42:1a: 62:fd:02:5f:e5:d3:88:0b:a2:ed:66:20:bd:41:48:ac:7a:5b: 27:3e:c1:13:7a:8d:27:2d:c3:66:45:d4:ca:de:28:f2:80:32: 65:df:72:af:3b:6f:bd:c4:1d:ee:55:70:59:eb:1b:24:5c:bf: 81:ac:40:b3:d8:f5:7a:76:91:dc:c2:50:68:19:fd:00:5d:15: b6:26:d7:d9:03:49:64:13:f8:d7:da:84:27:a3:b5:bb:f8:78: 5e:e4:2d:91:12:02:db:18:1e:38:0e:fe:fc:62:b5:11:fa:18: 21:ad:09:a4:ce:d6:1a:cf:e5:39:22:ee:17:18:40:85:83:bf: 41:8f:c9:e9:d3:b5:d5:7d:10:86:6e:93:14:aa:a9:04:6f:bf: 13:fc:ff:ab:f8:1d:ae:de:9b:0e:7a:3d:ef:41:55:7f:61:db: e9:80:0c:2a:05:6f:b7:b1:15:c2:56:49:2a:cf:96:7a:03:0f: d5:fc:60:1a:ee:80:87:ae:04:86:9a:98:13:c3:a0:e2:08:0b: d4:3f:a5:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Zh5lciaSbiDbXYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OGEwY2QyYWYtOGY0Yi00MDhkLTkyZjItZGIxMGE2NGRlMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc6xfGeMDSHDZSjKe7UkpL9wMx7dPZYEnOH7 9ph4ze25i9Ey0ySrNfKg1ri/7TZu3yAQrBcrwa9j5qobkP1O8hRtfvuxCSvix0+k PNToGrZv5iSSfdpGZ/uVzYCqs/PLfnJw6PTyowAWbgiRCz3Q9hscdMv3xfZfydnu qdrygHTeaiXkaTAXlzUMEGLZ9alwmID47cI2pizZXZLk7N8TLuWfYJVfSzIRsvjD /YmeTZVfe/5/6rAXl4gIrjM6THgVWxahvL5N6hEdqC9JaUU6+AB1iJHLLXwkRzcH LSWkcGTTVbZfdsR1X3wie71uVzmlELKWIoT/MwnM8Vs7KXOkuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9s+wW/AoFfImH6ljd6J3uB3gP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmFiMTFhMDktZTg4Ni0z YTIxLWI0NmYtM2RjYTgyZWI5YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGQD/gRgMRLFlfBsYcIZh0Zuv7PlIoYXj9D/qjGjktQjPTf4Qeh9b9j NrQ46TTQvwNqxwpCGmL9Al/l04gLou1mIL1BSKx6Wyc+wRN6jSctw2ZF1MreKPKA MmXfcq87b73EHe5VcFnrGyRcv4GsQLPY9Xp2kdzCUGgZ/QBdFbYm19kDSWQT+Nfa hCejtbv4eF7kLZESAtsYHjgO/vxitRH6GCGtCaTO1hrP5Tki7hcYQIWDv0GPyenT tdV9EIZukxSqqQRvvxP8/6v4Ha7emw56Pe9BVX9h2+mADCoFb7exFcJWSSrPlnoD D9X8YBrugIeuBIaamBPDoOIIC9Q/pZ4= -----END CERTIFICATE-----Generated at Wed May 13 03:37:35 2026 by rpki-client