$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5df4b280-8016-3471-894a-2fe3f4d5a88c.roa File: 5df4b280-8016-3471-894a-2fe3f4d5a88c.roa (raw, json) Hash identifier: iThQueCR8MpO1l7JRXAym71dO+qBUymBh2QwQfG6BEU= Subject key identifier: 04:8A:26:15:CC:13:BC:1E:CD:61:52:BF:6C:FD:6F:58:F1:ED:2F:C8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E3FC46F7976F01FA390E82C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5df4b280-8016-3471-894a-2fe3f4d5a88c.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 46558 IP address blocks: 134.70.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:6f:79:76:f0:1f:a3:90:e8:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=7646ed30-2ae2-42cb-a7a4-4556f08a0027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d6:29:91:fe:69:ad:4a:ff:a5:f2:d3:ee:82: 67:25:14:75:96:7a:9a:50:5c:13:32:b9:47:7b:43: 07:a7:ae:5f:72:6d:44:9c:bf:99:54:35:4f:b8:87: 18:70:ed:ff:08:d9:6d:74:a7:0c:3d:6a:a9:2c:af: 54:cf:80:dd:69:40:52:bc:68:bf:6a:e5:97:f2:c2: 9d:5f:0d:8d:e5:b1:ee:e2:75:33:07:11:4d:60:37: ea:1a:a8:78:d4:5a:6b:55:83:cf:d8:fe:a7:53:9e: 97:17:11:9a:ea:3a:41:0e:36:82:e0:c2:fd:38:6c: f1:0d:59:c0:08:f5:60:04:21:0e:32:17:93:70:90: 49:fd:e3:52:ca:39:a2:67:e0:c1:49:11:56:b2:bb: 58:3d:2b:63:99:bd:57:ca:04:f2:85:6f:5a:15:f2: ea:7c:ab:ce:02:bb:ff:cf:f5:a3:6d:b2:b4:07:94: e2:e7:65:63:29:77:aa:fc:ab:3c:e6:a3:3a:3c:da: eb:e3:46:9c:9a:81:92:39:f7:8c:8c:8a:39:f5:c2: 63:21:66:a4:c8:3c:89:7e:fd:ec:3e:ff:2f:2a:41: 37:cf:5a:7e:04:c7:4f:bf:a9:05:b5:b4:86:d2:4d: db:61:b7:74:4f:fe:7a:5d:ca:a6:fd:d7:06:97:b7: 3d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:26:15:CC:13:BC:1E:CD:61:52:BF:6C:FD:6F:58:F1:ED:2F:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5df4b280-8016-3471-894a-2fe3f4d5a88c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bd:08:ff:a7:af:ac:ec:be:72:74:f2:ec:25:40:3f:b4:93: 9e:74:dd:b4:c7:e4:b5:f0:bf:ec:6b:49:68:a2:40:b0:7e:a7: d0:5f:a8:48:a9:c6:f9:fb:77:46:36:f3:36:4b:be:06:be:a9: f4:73:70:2e:d3:30:9c:ea:5f:3c:0f:c1:ee:5d:26:5b:2f:23: cf:bb:c3:2d:f9:66:5d:bd:5d:74:44:2e:ed:88:17:8e:bf:48: 72:8a:3e:36:71:28:8f:84:59:00:a8:87:30:fc:21:c0:11:40: 03:7a:06:72:32:71:18:4a:d5:62:55:6b:9d:d9:a7:86:ec:09: ef:2c:5a:4c:a3:88:34:c4:43:08:ab:2b:79:dc:ea:a4:55:b1: cf:b5:da:2c:22:8a:0e:fc:d9:ea:42:68:6a:dd:6b:75:e0:ba: 1b:1f:d9:1e:d8:18:ff:ef:1f:00:08:13:35:a5:c1:bf:3c:ed: 24:a0:ed:48:9d:7e:cb:f2:cd:c6:df:f7:f9:a2:f1:1f:89:53: ab:1f:42:57:d9:3b:23:22:8b:fe:94:0b:a5:39:b5:69:2c:3f: 25:ec:8b:98:18:9c:f1:51:a6:56:23:5a:0c:13:77:e4:c3:9d: 79:ca:e3:7e:e3:ae:a2:5d:f5:3d:49:e7:22:31:2e:b6:c5:32: d6:18:ed:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xG95dvAfo5DoLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk NzY0NmVkMzAtMmFlMi00MmNiLWE3YTQtNDU1NmYwOGEwMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NYpkf5prUr/pfLT7oJnJRR1lnqaUFwTMrlH e0MHp65fcm1EnL+ZVDVPuIcYcO3/CNltdKcMPWqpLK9Uz4DdaUBSvGi/auWX8sKd Xw2N5bHu4nUzBxFNYDfqGqh41FprVYPP2P6nU56XFxGa6jpBDjaC4ML9OGzxDVnA CPVgBCEOMheTcJBJ/eNSyjmiZ+DBSRFWsrtYPStjmb1XygTyhW9aFfLqfKvOArv/ z/WjbbK0B5Ti52VjKXeq/Ks85qM6PNrr40acmoGSOfeMjIo59cJjIWakyDyJfv3s Pv8vKkE3z1p+BMdPv6kFtbSG0k3bYbd0T/56Xcqm/dcGl7c9qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASKJhXME7wezWFSv2z9b1jx7S/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWRmNGIyODAtODAxNi0z NDcxLTg5NGEtMmZlM2Y0ZDVhODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu9CP+nr6zsvnJ08uwlQD+0k5503bTH5LXwv+xrSWiiQLB+p9BfqEip xvn7d0Y28zZLvga+qfRzcC7TMJzqXzwPwe5dJlsvI8+7wy35Zl29XXRELu2IF46/ SHKKPjZxKI+EWQCohzD8IcARQAN6BnIycRhK1WJVa53Zp4bsCe8sWkyjiDTEQwir K3nc6qRVsc+12iwiig782epCaGrda3Xguhsf2R7YGP/vHwAIEzWlwb887SSg7Uid fsvyzcbf9/mi8R+JU6sfQlfZOyMii/6UC6U5tWksPyXsi5gYnPFRplYjWgwTd+TD nXnK437jrqJd9T1J5yIxLrbFMtYY7Ws= -----END CERTIFICATE-----Generated at Mon Jul 6 22:14:38 2026 by rpki-client