$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa File: ddc05ad9-535b-34bf-991f-d027fed482d3.roa (raw, json) Hash identifier: nLPBRXDuU9UgFbFZwwbqtSYb1mnJ5nmzI0HoP5YsHgA= Subject key identifier: 42:35:DA:AB:FC:E0:75:7A:1D:58:CF:DA:80:27:AB:77:BA:04:BA:58 Certificate issuer: /CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Certificate serial: 010D0C9F4328584DD78B1B34B8B4C5201F567700 Authority key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa Signing time: Fri 15 May 2026 13:00:30 +0000 ROA not before: Fri 15 May 2026 13:00:30 +0000 ROA not after: Thu 13 Aug 2026 13:00:30 +0000 asID: 14702 IP address blocks: 134.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d7:8b:1b:34:b8:b4:c5:20:1f:56:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Validity Not Before: May 15 13:00:30 2026 GMT Not After : Aug 13 13:00:30 2026 GMT Subject: CN=158fae93-bed4-4bea-b781-0b7044f84a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:40:d0:a2:21:42:98:86:56:c8:5f:25:f4: 99:15:81:12:01:e8:59:05:9a:7c:31:ce:92:e1:6d: 32:40:5e:60:95:36:aa:fa:db:d6:1f:52:2f:bd:ed: 13:47:d1:21:d3:64:53:99:b0:b7:e6:e5:95:ab:dc: 2a:5c:23:08:7a:0b:e8:f9:c0:45:cb:2f:20:34:42: 28:6a:ce:0f:19:fa:f6:7e:5d:31:d5:fc:81:1f:5e: 7e:32:ad:70:d8:13:15:22:d1:24:99:a7:01:76:5d: 02:86:e1:c8:89:e4:6a:44:3d:be:d9:81:12:9c:f2: 4d:a7:f7:60:c5:83:13:93:32:2a:1c:c4:b9:ad:7f: 3e:b1:cb:e5:b8:9e:21:dc:3a:a2:ad:3f:e6:a5:53: 2d:c4:8a:43:15:23:2f:00:5d:16:75:b4:54:b4:70: 68:4f:6b:52:4d:88:f4:75:8f:4f:a9:14:e8:0c:86: bd:35:52:c1:73:1f:42:02:9b:a6:1a:c2:dc:cc:37: 47:7f:e5:26:ac:54:48:9e:eb:7e:62:8f:56:c4:4f: b7:a4:d5:49:27:09:3f:c5:d3:f1:d2:69:e8:79:6f: 53:98:85:16:1e:6a:c4:e2:a6:16:b1:60:a8:61:8a: d9:64:1b:3f:72:29:14:e5:03:c4:9f:87:96:28:f2: 8e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:35:DA:AB:FC:E0:75:7A:1D:58:CF:DA:80:27:AB:77:BA:04:BA:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl X509v3 Authority Key Identifier: keyid:F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer sbgp-ipAddrBlock: critical IPv4: 134.20.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:33:b3:d2:db:e0:53:06:47:df:16:5d:e5:35:c2:e0:fc:ae: 1d:4b:40:2c:5e:1c:f3:84:0c:d6:b7:cf:07:27:21:1c:12:bc: 12:68:9c:5c:ea:63:aa:84:be:e3:2f:fb:8e:01:20:4d:6b:c9: 6c:51:a9:05:00:0b:83:4d:d4:34:d5:1d:7d:a8:44:1e:b9:a8: a3:a9:b1:26:fc:ef:b1:4e:77:10:ba:43:54:09:9c:41:b8:c2: 0e:b8:75:c3:cb:af:b1:11:aa:dd:db:a0:38:99:d8:fc:34:66: 7d:a6:67:fe:d9:4f:02:a3:8d:fe:82:3e:a5:57:af:90:29:ae: 4f:37:94:f8:5c:0e:11:04:75:4d:62:59:cd:4d:6f:15:8a:4a: af:b1:f6:7f:6b:d0:32:a8:36:58:5c:bc:02:a0:92:ec:04:71: 63:4f:98:c7:dc:67:e4:7f:29:09:5b:a3:a8:e4:9e:b9:be:de: 55:85:fa:e3:50:f9:16:27:98:81:e6:0e:de:5d:a0:e1:dd:82: 9e:d7:72:40:1b:ac:24:3a:e2:ca:47:da:4d:dd:36:31:88:9c: b7:c9:3f:78:68:ea:55:2a:ad:6b:b2:80:02:51:d8:db:82:1a: 33:38:98:2a:53:bc:20:4a:bd:61:d5:f0:a0:65:1f:92:11:d2: f5:32:4f:30 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3Xixs0uLTFIB9WdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI4YjIwY2EtMmExZS00NzQyLWI2M2MtNGIzYjFkMTUx ZjE1MB4XDTI2MDUxNTEzMDAzMFoXDTI2MDgxMzEzMDAzMFowLzEtMCsGA1UEAxMk MTU4ZmFlOTMtYmVkNC00YmVhLWI3ODEtMGI3MDQ0Zjg0YTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dNA0KIhQpiGVshfJfSZFYESAehZBZp8Mc6S 4W0yQF5glTaq+tvWH1Ivve0TR9Eh02RTmbC35uWVq9wqXCMIegvo+cBFyy8gNEIo as4PGfr2fl0x1fyBH15+Mq1w2BMVItEkmacBdl0ChuHIieRqRD2+2YESnPJNp/dg xYMTkzIqHMS5rX8+scvluJ4h3DqirT/mpVMtxIpDFSMvAF0WdbRUtHBoT2tSTYj0 dY9PqRToDIa9NVLBcx9CApumGsLczDdHf+UmrFRInut+Yo9WxE+3pNVJJwk/xdPx 0mnoeW9TmIUWHmrE4qYWsWCoYYrZZBs/cikU5QPEn4eWKPKOmwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEI12qv84HV6HVjP2oAnq3e6BLpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjhi MjBjYS0yYTFlLTQ3NDItYjYzYy00YjNiMWQxNTFmMTUvZGRjMDVhZDktNTM1Yi0z NGJmLTk5MWYtZDAyN2ZlZDQ4MmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGI4YjIwY2EtMmExZS00NzQyLWI2 M2MtNGIzYjFkMTUxZjE1LzBiOGIyMGNhLTJhMWUtNDc0Mi1iNjNjLTRiM2IxZDE1 MWYxNS5jcmwwHwYDVR0jBBgwFoAU8/9YqkABXh3QXRC3eKj4ZdKdQgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjhiMjBjYS0yYTFlLTQ3NDItYjYzYy00YjNi MWQxNTFmMTUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhhQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVDOz0tvgUwZH3xZd5TXC4PyuHUtALF4c84QM1rfPBychHBK8EmicXOpj qoS+4y/7jgEgTWvJbFGpBQALg03UNNUdfahEHrmoo6mxJvzvsU53ELpDVAmcQbjC Drh1w8uvsRGq3dugOJnY/DRmfaZn/tlPAqON/oI+pVevkCmuTzeU+FwOEQR1TWJZ zU1vFYpKr7H2f2vQMqg2WFy8AqCS7ARxY0+Yx9xn5H8pCVujqOSeub7eVYX641D5 FieYgeYO3l2g4d2CntdyQBusJDriykfaTd02MYict8k/eGjqVSqta7KAAlHY24Ia MziYKlO8IEq9YdXwoGUfkhHS9TJPMA== -----END CERTIFICATE-----Generated at Sun May 24 06:44:36 2026 by rpki-client