$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa File: e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa (raw, json) Hash identifier: zD9ZrU1Qr7accSl0TPo4227SdahJUscFuKMK363mK3U= Subject key identifier: 5E:A9:92:19:80:8B:0E:24:8C:09:00:B1:60:89:B2:46:17:AB:8C:7A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F744DA5C21B7233D115C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 134.70.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:74:4d:a5:c2:1b:72:33:d1:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=40c8237b-543d-46c2-b717-6b6a4b82ffd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:40:df:3d:50:cf:e4:42:37:1b:7a:6d:c4: ef:0b:dc:7d:b0:56:c5:64:f9:37:cb:15:13:e5:5e: 59:f7:06:01:5f:07:5c:24:79:70:7d:e1:50:6b:6f: 20:e5:47:79:cf:e6:d1:42:9e:48:bb:05:fe:65:77: 5a:5a:68:a8:07:d7:e4:90:78:c6:e8:4a:6b:14:45: d4:82:1b:c8:26:f1:b1:a3:71:71:dc:d7:53:2a:df: df:d3:75:78:73:07:6a:f5:80:24:6c:4b:10:da:bf: c7:1b:d2:84:28:9f:cd:33:8f:b9:0b:b2:9d:93:00: 40:ea:d4:18:3b:1b:97:9c:fd:66:66:4b:7f:68:8b: c3:28:28:19:83:97:fc:85:08:1d:bd:e4:36:84:8d: c4:35:e7:39:64:74:88:94:fa:11:6f:eb:4f:49:d7: 54:51:c2:3c:d9:fc:c3:dd:ef:be:97:53:0d:67:82: 0e:94:a2:9c:b9:f0:0d:42:8e:1d:1f:6d:df:16:95: 4e:9f:35:c0:92:3d:0d:82:d7:79:18:42:81:23:df: f3:10:49:0e:94:47:87:47:19:d4:a5:2a:76:7e:dc: ff:59:ad:4b:6e:ae:f7:b7:cd:2f:3f:77:ae:9c:b1: 59:75:04:c9:86:ac:f0:f2:93:85:59:c8:d5:0f:80: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A9:92:19:80:8B:0E:24:8C:09:00:B1:60:89:B2:46:17:AB:8C:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:29:5c:b1:a4:1b:3a:09:83:74:e5:3c:0d:a3:98:03:d2:92: 42:e4:d3:35:9b:e0:0b:f5:7a:61:03:16:a6:74:bc:5a:bb:91: f9:6b:51:94:b5:36:2f:19:e1:d0:c5:70:62:2c:01:9a:35:cb: 5a:a4:4b:b0:5c:37:b9:50:ec:e2:33:ee:9b:b7:4d:cd:90:f9: 7a:11:65:69:c7:b1:c0:ff:a9:e4:89:50:8d:8b:fb:41:da:0d: fa:67:ab:28:4c:a1:06:e8:3b:2f:d1:d7:27:1a:81:e6:47:0e: 4a:1b:8a:04:aa:23:73:5f:b8:3b:fd:22:64:5c:82:53:83:77: c9:a5:a1:92:a1:5b:03:f2:16:e4:a1:3e:5a:14:e1:c0:c6:c4: 1f:f7:00:15:26:af:a9:6d:68:6c:ae:73:43:64:3e:e2:9b:1a: bd:3b:9d:2c:1c:43:4b:09:ba:77:fb:40:ad:61:dc:36:03:09: c5:be:52:c1:82:42:b8:9c:4a:69:dc:c3:c9:41:d4:4f:79:35: 81:c0:5a:31:df:39:9b:63:d9:7c:71:65:2c:e8:cf:45:fd:91: cd:68:91:64:33:9e:14:01:57:14:d5:b7:1a:bd:aa:79:76:a3: 8e:e2:b6:84:59:5b:55:15:ea:58:78:1e:a5:2a:e1:b0:48:05: dd:09:35:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3RNpcIbcjPRFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk NDBjODIzN2ItNTQzZC00NmMyLWI3MTctNmI2YTRiODJmZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp5A3z1Qz+RCNxt6bcTvC9x9sFbFZPk3yxUT 5V5Z9wYBXwdcJHlwfeFQa28g5Ud5z+bRQp5IuwX+ZXdaWmioB9fkkHjG6EprFEXU ghvIJvGxo3Fx3NdTKt/f03V4cwdq9YAkbEsQ2r/HG9KEKJ/NM4+5C7KdkwBA6tQY OxuXnP1mZkt/aIvDKCgZg5f8hQgdveQ2hI3ENec5ZHSIlPoRb+tPSddUUcI82fzD 3e++l1MNZ4IOlKKcufANQo4dH23fFpVOnzXAkj0Ngtd5GEKBI9/zEEkOlEeHRxnU pSp2ftz/Wa1Lbq73t80vP3eunLFZdQTJhqzw8pOFWcjVD4ANCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6pkhmAiw4kjAkAsWCJskYXq4x6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTgzMTVmNTctMTZiOC0z M2EzLWE2ZDItN2IyODU1YTIwYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEpXLGkGzoJg3TlPA2jmAPSkkLk0zWb4Av1emEDFqZ0vFq7kflrUZS1 Ni8Z4dDFcGIsAZo1y1qkS7BcN7lQ7OIz7pu3Tc2Q+XoRZWnHscD/qeSJUI2L+0Ha DfpnqyhMoQboOy/R1ycageZHDkobigSqI3NfuDv9ImRcglODd8mloZKhWwPyFuSh PloU4cDGxB/3ABUmr6ltaGyuc0NkPuKbGr07nSwcQ0sJunf7QK1h3DYDCcW+UsGC QricSmncw8lB1E95NYHAWjHfOZtj2XxxZSzoz0X9kc1okWQznhQBVxTVtxq9qnl2 o47itoRZW1UV6lh4HqUq4bBIBd0JNaw= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:21 2026 by rpki-client