$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/34c70483-2380-380b-96e0-159964dfe223.roa File: 34c70483-2380-380b-96e0-159964dfe223.roa (raw, json) Hash identifier: np86fK2xsNTwlYDH5u/88BzQOhOx/51ogWfPIxf20Pw= Subject key identifier: 7A:AC:3B:F2:B8:02:DF:A5:76:5B:C7:18:BA:5F:67:DA:5F:2B:3B:3B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA7870F046BB0AF3E275D4100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/34c70483-2380-380b-96e0-159964dfe223.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 31898 IP address blocks: 157.137.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:0f:04:6b:b0:af:3e:27:5d:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4a415387-c57f-419c-8f63-fb4e874ec297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:e9:8a:fa:6f:10:20:96:80:81:26:06:b3: bc:62:01:b6:30:6f:1d:fc:97:8e:78:0f:54:83:47: 20:5a:7b:27:62:15:8c:e6:0e:2d:46:b4:c7:c6:24: 7f:4e:b3:0c:bf:18:b0:59:03:e5:ca:88:00:fc:0f: 44:c9:26:22:32:7b:2b:04:7b:3a:d4:a7:ba:08:b0: 49:5e:2b:f3:16:7a:68:99:39:2f:7a:46:54:94:cb: 7f:cc:5f:66:73:e8:06:8f:75:8c:41:32:f0:35:48: f8:f8:f6:bd:c7:73:50:99:25:52:1a:98:c7:7d:6c: 52:d5:82:40:78:90:5f:38:95:44:88:dc:18:83:6a: 7d:0b:ff:0e:7e:62:69:3e:f1:1b:4c:2b:07:ce:ed: 45:6b:6e:79:f0:24:cf:e2:eb:af:68:c0:84:fe:52: d7:77:37:2a:9d:8e:45:69:1b:e5:d0:2e:8e:10:19: 51:67:8a:97:ad:5b:e7:22:8a:61:0d:7f:9d:ec:01: e6:03:4e:1b:8d:70:bc:08:e1:dc:f2:51:4a:d8:e5: 2b:00:4b:ca:62:7e:5b:b7:82:ce:89:7e:9e:2d:4e: 16:fe:b2:36:4d:49:eb:e7:7b:fb:ce:4a:9b:67:ea: 5b:d8:aa:42:52:2e:21:3a:0e:3c:90:51:14:b0:1d: af:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AC:3B:F2:B8:02:DF:A5:76:5B:C7:18:BA:5F:67:DA:5F:2B:3B:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/34c70483-2380-380b-96e0-159964dfe223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c8:b3:07:2d:ba:23:45:28:f1:42:78:5e:f3:07:07:93:3f: ea:3a:52:52:6e:99:aa:18:c7:b6:98:78:c6:4e:30:2e:d9:36: d5:e9:52:fb:8d:0b:b2:95:b6:73:19:c3:c6:ea:72:db:ec:26: 1a:82:01:bb:64:c0:bc:2d:43:67:bf:49:f3:5e:c1:20:8a:8c: 56:81:2e:1c:b5:b7:7d:80:58:a2:05:9a:bd:d8:42:e5:2f:f4: e0:1d:25:dc:43:fe:36:ce:4a:9e:7c:47:ca:ef:30:2d:fa:d5: b1:4a:fe:13:4c:6f:84:e3:a6:11:6b:47:dc:98:31:03:a9:e2: dc:ad:d5:12:27:b2:5b:89:ae:87:30:22:23:45:6c:71:2b:65: 2e:5c:ab:8f:ed:82:04:d3:8f:2d:38:78:90:a9:16:53:2a:93: d9:f1:ca:b4:05:31:df:fc:97:6f:c4:89:dd:fd:0d:13:2c:2e: af:c7:39:ad:74:55:bd:37:1f:b3:75:31:49:1a:cf:cf:37:3b: 71:75:f8:78:eb:1d:2b:32:39:7f:dd:d7:1a:86:14:3c:ce:2f: 50:f1:1b:a3:62:d4:40:fc:0d:58:c2:e1:f3:89:53:6f:56:a6: ed:fe:f6:b9:3a:18:8a:8e:82:75:ca:78:c7:13:a3:a1:56:d8: b9:76:23:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhw8Ea7CvPiddQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGE0MTUzODctYzU3Zi00MTljLThmNjMtZmI0ZTg3NGVjMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviTpivpvECCWgIEmBrO8YgG2MG8d/JeOeA9U g0cgWnsnYhWM5g4tRrTHxiR/TrMMvxiwWQPlyogA/A9EySYiMnsrBHs61Ke6CLBJ XivzFnpomTkvekZUlMt/zF9mc+gGj3WMQTLwNUj4+Pa9x3NQmSVSGpjHfWxS1YJA eJBfOJVEiNwYg2p9C/8OfmJpPvEbTCsHzu1Fa2558CTP4uuvaMCE/lLXdzcqnY5F aRvl0C6OEBlRZ4qXrVvnIophDX+d7AHmA04bjXC8COHc8lFK2OUrAEvKYn5bt4LO iX6eLU4W/rI2TUnr53v7zkqbZ+pb2KpCUi4hOg48kFEUsB2vlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqsO/K4At+ldlvHGLpfZ9pfKzs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzRjNzA0ODMtMjM4MC0z ODBiLTk2ZTAtMTU5OTY0ZGZlMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYkqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3IswctuiNFKPFCeF7zBweTP+o6UlJumaoYx7aYeMZOMC7ZNtXpUvuN C7KVtnMZw8bqctvsJhqCAbtkwLwtQ2e/SfNewSCKjFaBLhy1t32AWKIFmr3YQuUv 9OAdJdxD/jbOSp58R8rvMC361bFK/hNMb4TjphFrR9yYMQOp4tyt1RInsluJrocw IiNFbHErZS5cq4/tggTTjy04eJCpFlMqk9nxyrQFMd/8l2/Eid39DRMsLq/HOa10 Vb03H7N1MUkaz883O3F1+HjrHSsyOX/d1xqGFDzOL1DxG6Ni1ED8DVjC4fOJU29W pu3+9rk6GIqOgnXKeMcTo6FW2Ll2I3k= -----END CERTIFICATE-----Generated at Thu Aug 27 07:13:26 2026 by rpki-client