$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5df4b280-8016-3471-894a-2fe3f4d5a88c.roa File: 5df4b280-8016-3471-894a-2fe3f4d5a88c.roa (raw, json) Hash identifier: MJSDzHUJXsgbIjOcYU+ZQYJI2DpJLFWV4fH8DUqtxaQ= Subject key identifier: E3:71:83:6A:89:92:AD:13:8B:56:8E:D4:65:CB:BF:BA:42:20:B7:F6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D5F7FA2D0C98CDEBFD6540100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5df4b280-8016-3471-894a-2fe3f4d5a88c.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 46558 IP address blocks: 134.70.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:a2:d0:c9:8c:de:bf:d6:54:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=e85455e1-ddc7-4a40-86de-5ed4c7910996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a0:4c:16:f1:a5:84:c1:ea:6c:26:f6:b7:17: 13:9a:9e:94:1e:af:a4:e1:66:5e:77:e5:b2:33:f8: 7c:ba:c7:bd:cf:6f:77:73:81:67:45:b0:ec:8a:d1: 35:39:11:d7:5b:fc:ae:e6:cd:f3:7d:e4:a7:1d:d6: 57:d5:1a:39:2b:8e:4f:57:b5:46:3a:d6:60:91:22: a2:f5:98:8a:e4:04:27:51:51:9e:58:1c:bb:7b:84: a5:97:f3:18:ad:b8:82:85:3a:16:a8:52:eb:06:0e: 0f:6f:24:25:b7:bb:6f:1d:69:39:70:1f:99:e6:df: be:cb:08:71:57:c5:10:dd:ea:c2:c5:94:de:44:fe: f4:ac:bf:24:62:b6:cd:8f:2a:93:fa:df:7c:0a:99: 4f:25:ad:c1:9b:cc:6e:17:04:bc:db:79:1b:fb:88: 4d:da:04:65:1a:be:28:a8:a4:12:0f:00:d1:d0:5a: ac:be:3f:70:9e:4a:a2:7b:6c:c2:c1:34:81:34:a6: 28:44:7a:50:f5:71:c4:19:c5:b3:56:d9:d8:5a:9f: f3:91:34:1e:71:6b:d6:bd:aa:38:d8:ea:c5:b5:8f: 32:36:29:96:3a:82:22:e4:09:b7:40:6f:b5:ef:f9: 7f:f9:8e:b8:44:61:34:4a:5c:f1:7a:de:af:a9:fc: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:71:83:6A:89:92:AD:13:8B:56:8E:D4:65:CB:BF:BA:42:20:B7:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5df4b280-8016-3471-894a-2fe3f4d5a88c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:78:0f:ea:fe:78:55:c1:0d:59:fd:96:44:f8:ac:7b:6c:75: 46:66:c3:f2:f3:a6:f1:69:1d:a5:de:2f:10:65:b5:88:bf:4b: cd:8a:ee:50:db:7c:ea:af:fe:a2:7e:0b:b9:da:c3:89:56:3c: b6:06:f5:b2:39:1c:1f:ba:5e:64:da:7b:4e:2d:32:28:ec:cb: 71:4f:b5:12:c6:0a:8b:90:fa:64:42:92:d4:6a:76:3e:85:93: cc:df:ec:2b:67:b0:d7:1a:40:17:4b:a8:ce:a8:2a:60:5b:a9: 5d:cf:40:9c:45:86:e1:8e:bc:d4:ae:f0:cf:06:72:ca:1a:74: 8e:ce:3d:ec:e4:23:6b:ec:b1:0b:1b:cf:7d:13:cd:ac:9f:48: 49:4b:1c:f8:7b:c2:a5:24:f4:18:5c:e3:28:d8:54:e1:2b:3c: 6f:e4:0d:8f:b9:24:0b:9e:2a:a6:0c:7a:e2:ac:7c:b2:34:d7: 76:ed:98:5f:85:89:94:76:74:a4:b0:ee:ef:b0:bc:c7:a7:49: f9:46:d0:27:97:ee:02:3b:22:55:2c:81:29:3a:96:1f:d7:8b: b6:12:8a:f9:4d:03:72:f1:38:db:c0:42:41:35:d1:4f:04:b5: 23:8f:34:fb:f3:19:49:bd:34:89:89:62:93:7a:19:8a:79:63: eb:bd:08:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff6LQyYzev9ZUAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk ZTg1NDU1ZTEtZGRjNy00YTQwLTg2ZGUtNWVkNGM3OTEwOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaBMFvGlhMHqbCb2txcTmp6UHq+k4WZed+Wy M/h8use9z293c4FnRbDsitE1ORHXW/yu5s3zfeSnHdZX1Ro5K45PV7VGOtZgkSKi 9ZiK5AQnUVGeWBy7e4Sll/MYrbiChToWqFLrBg4PbyQlt7tvHWk5cB+Z5t++ywhx V8UQ3erCxZTeRP70rL8kYrbNjyqT+t98CplPJa3Bm8xuFwS823kb+4hN2gRlGr4o qKQSDwDR0Fqsvj9wnkqie2zCwTSBNKYoRHpQ9XHEGcWzVtnYWp/zkTQecWvWvao4 2OrFtY8yNimWOoIi5Am3QG+17/l/+Y64RGE0Slzxet6vqfwjAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONxg2qJkq0Ti1aO1GXLv7pCILf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWRmNGIyODAtODAxNi0z NDcxLTg5NGEtMmZlM2Y0ZDVhODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx4D+r+eFXBDVn9lkT4rHtsdUZmw/LzpvFpHaXeLxBltYi/S82K7lDb fOqv/qJ+C7naw4lWPLYG9bI5HB+6XmTae04tMijsy3FPtRLGCouQ+mRCktRqdj6F k8zf7CtnsNcaQBdLqM6oKmBbqV3PQJxFhuGOvNSu8M8GcsoadI7OPezkI2vssQsb z30TzayfSElLHPh7wqUk9Bhc4yjYVOErPG/kDY+5JAueKqYMeuKsfLI013btmF+F iZR2dKSw7u+wvMenSflG0CeX7gI7IlUsgSk6lh/Xi7YSivlNA3LxONvAQkE10U8E tSOPNPvzGUm9NImJYpN6GYp5Y+u9CGw= -----END CERTIFICATE-----Generated at Mon Apr 13 19:32:49 2026 by rpki-client