$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e56a2d40-2165-304c-b503-3c283cae0c80.roa File: e56a2d40-2165-304c-b503-3c283cae0c80.roa (raw, json) Hash identifier: aw5ySis8h5kmOA3+nlRPO4Wa5OvEAWZmovU8VfYzrHE= Subject key identifier: B8:A8:E2:61:24:35:45:1C:C3:FF:07:F3:26:F7:6B:97:F4:2C:A0:81 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F768BC5E9E37292755E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e56a2d40-2165-304c-b503-3c283cae0c80.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 134.70.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:76:8b:c5:e9:e3:72:92:75:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=7e7bd8fb-0ff1-44e5-8e19-4da833dced68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:4f:bd:50:e1:d9:34:8f:c7:2d:b2:1b:1c: 6f:29:6e:3c:34:95:5e:ef:f2:a5:ff:d4:88:51:ea: 66:08:33:36:31:67:49:48:56:ec:fc:83:2b:e2:9f: a9:ac:86:5f:73:93:d1:ec:4f:0c:fe:94:54:fe:e4: 42:06:17:65:eb:e8:6c:a0:42:ca:c3:a8:02:a5:2d: fd:dd:b4:e8:23:a0:f1:50:16:b2:0e:25:33:0b:d9: fb:a2:50:56:95:ad:8f:cc:57:08:2a:14:20:4e:fc: 5d:9d:e3:6a:65:ee:5e:00:2c:56:09:5d:38:e7:01: 63:08:ce:70:2c:14:2d:95:98:f5:bb:3c:f1:02:94: f4:fd:2c:e5:e5:7c:17:53:9b:ba:de:4d:4d:aa:6e: 1f:75:2b:46:73:90:ac:a6:b9:15:bc:17:a4:83:8a: e0:24:68:5b:bb:ce:45:95:b4:f3:02:ad:d2:ad:e8: 17:ee:ae:9b:a4:30:62:c0:3a:44:da:28:ba:be:e3: 4a:a3:69:fe:13:c7:3f:de:af:ee:bd:c3:b3:2e:ea: 52:52:cd:6f:3b:80:da:2f:a4:29:89:8f:fe:a6:bd: 58:4c:34:ae:63:fb:e6:9f:7b:21:44:b3:37:04:fc: 67:54:6d:3f:19:a5:09:df:08:1c:47:3a:d9:35:03: fe:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A8:E2:61:24:35:45:1C:C3:FF:07:F3:26:F7:6B:97:F4:2C:A0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e56a2d40-2165-304c-b503-3c283cae0c80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ed:88:4e:e2:d9:3d:d1:88:61:43:34:c2:83:35:84:b1:17: ed:da:f8:09:f7:6c:87:c8:f3:a1:1b:7c:6f:5a:aa:32:f1:b6: ed:80:3b:32:dc:30:24:94:69:00:9a:fd:58:b4:e7:57:fc:af: 81:25:b1:0e:88:d9:ea:60:47:3d:c7:a9:a6:2f:d7:65:85:70: 80:78:c6:78:e9:37:70:74:f1:b7:57:41:7b:a9:13:ca:41:2a: e1:0c:20:a3:b0:47:02:07:dc:a1:9a:77:dd:ca:05:be:cc:54: 4b:c2:12:aa:dd:a4:3f:76:07:40:56:4f:53:2b:21:42:64:be: 02:d0:b9:b4:28:f3:a6:44:05:90:ea:59:e2:b9:6a:87:8f:de: f0:10:6d:24:68:b9:88:fd:db:c3:de:ee:db:ab:8a:e2:03:10: 18:86:48:07:80:d9:9d:d9:4b:c4:45:90:6d:6e:e2:1b:9e:21: 47:34:e6:0a:a5:17:db:f9:ed:c4:0e:15:25:16:eb:cf:ce:71: f0:43:59:95:11:ef:9d:12:1a:b8:27:9c:cb:a6:44:06:b0:70: 7b:b3:b6:dc:2c:0e:19:51:f6:e8:44:b6:32:2f:cf:5f:2b:6e: 48:39:6d:9d:d6:c0:58:66:6b:f1:af:7a:dd:66:fe:54:6d:c4: 10:de:1b:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3aLxenjcpJ1XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk N2U3YmQ4ZmItMGZmMS00NGU1LThlMTktNGRhODMzZGNlZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAFPvVDh2TSPxy2yGxxvKW48NJVe7/Kl/9SI UepmCDM2MWdJSFbs/IMr4p+prIZfc5PR7E8M/pRU/uRCBhdl6+hsoELKw6gCpS39 3bToI6DxUBayDiUzC9n7olBWla2PzFcIKhQgTvxdneNqZe5eACxWCV045wFjCM5w LBQtlZj1uzzxApT0/Szl5XwXU5u63k1Nqm4fdStGc5CsprkVvBekg4rgJGhbu85F lbTzAq3SregX7q6bpDBiwDpE2ii6vuNKo2n+E8c/3q/uvcOzLupSUs1vO4DaL6Qp iY/+pr1YTDSuY/vmn3shRLM3BPxnVG0/GaUJ3wgcRzrZNQP+ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLio4mEkNUUcw/8H8yb3a5f0LKCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTU2YTJkNDAtMjE2NS0z MDRjLWI1MDMtM2MyODNjYWUwYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjtiE7i2T3RiGFDNMKDNYSxF+3a+An3bIfI86EbfG9aqjLxtu2AOzLc MCSUaQCa/Vi051f8r4ElsQ6I2epgRz3HqaYv12WFcIB4xnjpN3B08bdXQXupE8pB KuEMIKOwRwIH3KGad93KBb7MVEvCEqrdpD92B0BWT1MrIUJkvgLQubQo86ZEBZDq WeK5aoeP3vAQbSRouYj928Pe7turiuIDEBiGSAeA2Z3ZS8RFkG1u4hueIUc05gql F9v57cQOFSUW68/OcfBDWZUR750SGrgnnMumRAawcHuzttwsDhlR9uhEtjIvz18r bkg5bZ3WwFhma/Gvet1m/lRtxBDeG2g= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:41 2026 by rpki-client