$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c7f59d6-de4e-3640-8107-95106f12eb2b.roa File: 9c7f59d6-de4e-3640-8107-95106f12eb2b.roa (raw, json) Hash identifier: KHazXBvpQNJW28UAqZQwtQk8XB8hvuN7SAthKySVWYA= Subject key identifier: 2D:25:C1:56:CD:CA:2A:7B:A7:BA:B7:28:06:4B:8D:CD:46:7D:E0:40 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6AAA7DAFA81B9266DB93D980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c7f59d6-de4e-3640-8107-95106f12eb2b.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 134.65.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:7d:af:a8:1b:92:66:db:93:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=1e17178c-785f-46df-857e-06e88f943159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:9f:57:55:21:5e:12:c0:40:35:3f:9f:70: 82:5b:53:e4:97:c4:6d:56:40:14:2c:14:ed:ec:a4: 20:f8:d2:78:d2:84:a4:69:12:89:40:84:34:51:39: 34:a5:56:f7:05:3c:7c:d8:1b:17:7d:84:34:9e:4b: 35:a3:d6:af:2b:7e:f2:d3:85:77:fd:bd:d2:86:3b: 47:07:7b:5d:02:57:bb:d6:59:36:e7:7d:a0:0b:bd: 41:77:3d:84:5c:05:6f:9a:d8:b9:ed:09:ff:00:30: 20:9c:cf:af:b4:68:27:45:6c:c0:74:97:e2:79:b7: c8:38:9c:f2:8c:85:3a:9c:fb:86:ef:7e:b7:da:8e: a6:44:33:de:16:e4:0a:d3:80:e0:22:c2:c9:ef:a0: 12:12:6b:90:c8:34:88:d7:3d:b9:50:5d:38:80:a4: 03:8e:29:da:b4:f6:50:96:44:f4:a1:db:89:7b:ae: 4e:9c:04:82:54:9f:23:22:d5:8c:82:15:d3:e2:da: aa:60:61:4e:39:bd:c1:ca:b9:9e:a3:7f:e6:f9:b4: 80:c2:d7:be:b8:1b:00:63:5c:63:97:6a:e7:5b:af: 06:b9:41:cb:36:f7:cf:55:e4:f0:65:3d:12:d2:fc: ae:c4:93:ba:a9:b4:de:b5:dd:5e:b9:e6:9e:e3:d3: 53:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:25:C1:56:CD:CA:2A:7B:A7:BA:B7:28:06:4B:8D:CD:46:7D:E0:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c7f59d6-de4e-3640-8107-95106f12eb2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.65.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:88:70:14:92:cb:3a:8c:42:b5:de:44:fb:32:7b:c0:08:3d: 12:56:b3:de:6d:1b:94:c7:14:c8:d6:ba:20:54:2d:f7:a2:7e: d9:21:da:60:f5:76:28:62:d3:92:ed:40:ed:bb:7c:c8:10:d1: d8:cd:91:cd:a5:4f:c5:0e:61:7d:8f:d1:80:4b:7e:d1:56:68: 1f:9b:20:0d:82:48:72:8a:f2:36:28:6b:47:3d:9c:05:a1:bd: 5f:09:7d:af:2f:d6:7c:72:dd:1c:5d:9a:10:54:84:9e:b7:a4: c4:c7:4d:14:84:02:a3:e0:3c:c7:24:2d:ea:8e:b3:57:45:0b: a0:86:51:a0:69:56:2c:df:cf:ad:d1:e4:68:c3:f2:d6:ea:d9: 32:93:41:99:c0:14:68:86:54:14:32:fc:5e:db:8f:54:86:28: 7a:96:e2:4e:e1:28:37:6b:d4:cd:03:a8:9b:cf:70:fa:9e:1c: cb:d4:5a:75:c6:df:4e:d8:67:1c:9c:4a:2b:4b:aa:28:a3:91: 88:1e:22:3c:6a:68:d1:97:cd:4d:e7:fc:92:9e:2d:89:5f:23: 11:b0:f2:68:e8:8d:e0:fc:bb:c4:9a:54:53:5c:cd:f9:7b:f3: db:a9:c5:b3:c1:21:21:b0:dc:aa:05:53:f3:1c:29:79:ab:46: 6d:54:00:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqn2vqBuSZtuT2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MWUxNzE3OGMtNzg1Zi00NmRmLTg1N2UtMDZlODhmOTQzMTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+CfV1UhXhLAQDU/n3CCW1Pkl8RtVkAULBTt 7KQg+NJ40oSkaRKJQIQ0UTk0pVb3BTx82BsXfYQ0nks1o9avK37y04V3/b3ShjtH B3tdAle71lk2532gC71Bdz2EXAVvmti57Qn/ADAgnM+vtGgnRWzAdJfiebfIOJzy jIU6nPuG73632o6mRDPeFuQK04DgIsLJ76ASEmuQyDSI1z25UF04gKQDjinatPZQ lkT0oduJe65OnASCVJ8jItWMghXT4tqqYGFOOb3Byrmeo3/m+bSAwte+uBsAY1xj l2rnW68GuUHLNvfPVeTwZT0S0vyuxJO6qbTetd1eueae49NT8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0lwVbNyip7p7q3KAZLjc1GfeBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWM3ZjU5ZDYtZGU0ZS0z NjQwLTgxMDctOTUxMDZmMTJlYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhkE4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGIcBSSyzqMQrXeRPsye8AIPRJWs95tG5THFMjWuiBULfeiftkh2mD1 dihi05LtQO27fMgQ0djNkc2lT8UOYX2P0YBLftFWaB+bIA2CSHKK8jYoa0c9nAWh vV8Jfa8v1nxy3RxdmhBUhJ63pMTHTRSEAqPgPMckLeqOs1dFC6CGUaBpVizfz63R 5GjD8tbq2TKTQZnAFGiGVBQy/F7bj1SGKHqW4k7hKDdr1M0DqJvPcPqeHMvUWnXG 307YZxycSitLqiijkYgeIjxqaNGXzU3n/JKeLYlfIxGw8mjojeD8u8SaVFNczfl7 89upxbPBISGw3KoFU/McKXmrRm1UAPw= -----END CERTIFICATE-----Generated at Mon Apr 13 14:36:34 2026 by rpki-client