$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9da47e8-35d6-371f-9d24-c5352f846da5.roa File: b9da47e8-35d6-371f-9d24-c5352f846da5.roa (raw, json) Hash identifier: Lv62+1P39S/N9MXHsTaV1gtSD6ET5VbSTd21wKXq4JU= Subject key identifier: 95:D9:07:A5:6D:81:B4:20:D9:B1:A8:6D:E3:DB:8A:3C:B7:44:CE:D2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7CCFE047CBEADEFD6BF5A380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9da47e8-35d6-371f-9d24-c5352f846da5.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 134.70.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:e0:47:cb:ea:de:fd:6b:f5:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=dc7c6603-843a-404d-b0a5-813031688239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f3:f8:69:a0:34:c5:02:92:23:ac:c5:e4:43: 82:54:14:6b:98:1f:92:3d:46:30:8a:f7:40:18:cf: c9:13:2f:dd:58:9a:22:5e:3b:38:00:53:6c:d7:13: 8e:0e:91:27:67:d4:8a:e0:5e:24:7c:fa:42:50:26: 94:aa:2a:63:be:ee:fe:32:6d:0a:07:08:0e:e4:65: 76:7a:7e:4a:86:61:1c:b7:82:bf:67:64:34:b2:5e: a6:b4:f2:92:e3:7d:56:9c:79:69:36:ca:98:5b:8e: 64:d8:46:8f:c7:d1:ac:3b:13:67:4f:5c:d9:bb:ac: 41:76:c0:72:0d:61:11:a2:d1:4e:2b:62:4e:fd:c9: 78:90:53:fa:04:c2:17:d2:5e:a1:b3:2c:57:1d:74: 96:94:81:00:49:71:9f:39:59:4a:55:98:c8:51:eb: ea:5a:dc:1d:a5:7b:f6:4d:79:b4:7b:c9:f2:97:46: 60:71:43:88:a6:14:b9:d7:c6:a4:30:d5:30:b5:b7: d5:ae:97:d9:5c:0d:9c:84:1e:3b:f7:4e:42:56:a8: 62:f9:8c:b3:9c:5c:44:ab:d6:c5:ce:ea:e3:61:fd: 83:f5:68:fd:47:a0:64:2b:ab:97:37:74:f1:3f:76: 6c:4e:1e:ab:fe:b1:97:7a:1b:c6:20:72:3e:f6:77: 1c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D9:07:A5:6D:81:B4:20:D9:B1:A8:6D:E3:DB:8A:3C:B7:44:CE:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9da47e8-35d6-371f-9d24-c5352f846da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:73:d9:92:1b:71:11:d8:59:3a:4a:18:e9:fc:bc:4e:0b:bd: fd:2d:e8:c3:d9:5f:d0:0a:73:25:1b:1e:96:6d:de:cb:36:5a: bc:20:95:f2:e2:a1:90:7e:8b:31:4e:3b:7f:c6:88:3d:0f:3a: 11:56:98:ff:88:94:df:82:c5:58:a9:87:72:e6:18:74:9f:e4: 7c:de:33:02:98:66:d7:d6:56:5b:11:f3:40:2a:c7:21:ee:0a: d3:82:69:c8:ea:47:0c:e5:3e:60:30:79:40:df:5a:0b:c6:2b: ab:42:65:11:54:7a:f2:5e:71:33:b8:cf:90:8c:ae:45:6e:30: 13:d9:e8:05:24:2f:d6:a8:32:f3:2e:ed:59:c9:b0:40:96:c2: e8:44:b4:77:cd:11:7c:0d:f1:cf:c4:68:f5:31:56:42:c8:d0: 0b:84:9e:8b:ef:44:d5:40:f8:7a:34:40:98:fe:72:cb:40:0a: 45:97:e7:66:3c:27:d3:c0:da:c2:d5:9b:1c:e8:b7:54:52:ac: d0:7e:c2:9c:26:0f:84:f6:67:bd:0c:bd:a3:ab:01:5a:db:2a: 11:5f:fa:50:55:e0:78:33:25:3d:16:2e:86:b9:76:cd:45:03: 1a:d5:c0:93:af:e7:d5:23:9a:7c:3e:2b:1b:14:47:22:e5:24: 91:26:76:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z+BHy+re/Wv1o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZGM3YzY2MDMtODQzYS00MDRkLWIwYTUtODEzMDMxNjg4MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPP4aaA0xQKSI6zF5EOCVBRrmB+SPUYwivdA GM/JEy/dWJoiXjs4AFNs1xOODpEnZ9SK4F4kfPpCUCaUqipjvu7+Mm0KBwgO5GV2 en5KhmEct4K/Z2Q0sl6mtPKS431WnHlpNsqYW45k2EaPx9GsOxNnT1zZu6xBdsBy DWERotFOK2JO/cl4kFP6BMIX0l6hsyxXHXSWlIEASXGfOVlKVZjIUevqWtwdpXv2 TXm0e8nyl0ZgcUOIphS518akMNUwtbfVrpfZXA2chB47905CVqhi+YyznFxEq9bF zurjYf2D9Wj9R6BkK6uXN3TxP3ZsTh6r/rGXehvGIHI+9ncczwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXZB6VtgbQg2bGobePbijy3RM7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjlkYTQ3ZTgtMzVkNi0z NzFmLTlkMjQtYzUzNTJmODQ2ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFz2ZIbcRHYWTpKGOn8vE4Lvf0t6MPZX9AKcyUbHpZt3ss2WrwglfLi oZB+izFOO3/GiD0POhFWmP+IlN+CxViph3LmGHSf5HzeMwKYZtfWVlsR80AqxyHu CtOCacjqRwzlPmAweUDfWgvGK6tCZRFUevJecTO4z5CMrkVuMBPZ6AUkL9aoMvMu 7VnJsECWwuhEtHfNEXwN8c/EaPUxVkLI0AuEnovvRNVA+Ho0QJj+cstACkWX52Y8 J9PA2sLVmxzot1RSrNB+wpwmD4T2Z70MvaOrAVrbKhFf+lBV4HgzJT0WLoa5ds1F AxrVwJOv59Ujmnw+KxsURyLlJJEmduc= -----END CERTIFICATE-----Generated at Mon Apr 13 14:42:14 2026 by rpki-client