$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa File: 23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa (raw, json) Hash identifier: Gdkn9XewGZljxtNS5ggiOCtApc39W3LNsA+20IAVvRc= Subject key identifier: B6:EC:44:A5:51:70:E4:F5:D6:E2:5A:7C:52:4A:8D:E9:7E:E4:E8:5E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A9E9596C308D88D730C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 134.70.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:9e:95:96:c3:08:d8:8d:73:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=a89754ee-08f7-4456-b3ec-1b135c2f6875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:5f:0e:20:75:49:8c:80:66:9b:59:3c:82: 11:6f:91:19:c8:c3:00:54:99:ab:83:97:53:08:0d: a3:c4:da:e3:de:2e:9d:e4:1d:da:ef:80:87:7f:8b: 06:03:82:e6:52:67:9b:c7:54:e4:aa:10:15:6d:5a: 40:40:46:47:60:60:5e:bd:59:07:68:23:4f:30:45: 3a:a1:f9:d1:83:e0:73:49:a3:47:bd:f8:6d:fe:59: e4:f1:08:60:15:b7:a8:f0:73:1e:d2:fa:f8:63:18: e6:9f:34:37:09:a1:85:8a:4a:4c:57:9a:11:0d:b2: a7:2a:5d:7d:e2:fb:4b:fc:25:e1:d2:78:c0:61:a7: 3b:5b:7d:7b:f0:c8:94:b3:30:f7:8e:8d:3a:c1:0f: a1:70:04:84:ff:5b:6b:77:5e:09:4f:a4:45:93:3d: 8e:21:57:65:a0:8a:16:e9:8b:69:4b:82:34:b8:7a: c0:0b:38:2c:eb:01:66:01:ba:7b:0f:55:0b:50:ee: 8f:0d:73:63:79:86:ab:2f:f7:9f:94:5b:bd:08:08: c6:cc:77:47:c7:5c:97:8e:52:7e:a3:38:c3:b7:6d: c9:ca:19:94:a6:0a:db:70:95:20:e4:a0:33:86:44: 6e:d5:64:45:8b:2a:b0:b6:c6:69:7c:89:0e:c5:5c: db:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EC:44:A5:51:70:E4:F5:D6:E2:5A:7C:52:4A:8D:E9:7E:E4:E8:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:f3:5f:f9:75:7b:9b:0f:97:7d:fb:96:d5:76:10:e0:cc:9d: d8:48:d4:1b:d6:22:05:dd:fd:a8:b7:53:38:df:fd:e9:6c:79: ae:e8:27:24:df:04:e1:7c:a6:13:ed:43:95:61:76:e4:e6:82: c7:cc:1b:13:6c:f4:de:ba:a1:bd:d0:f3:e4:59:31:96:1f:de: e5:09:74:37:a6:85:81:c4:6a:92:76:d8:d7:35:a4:0a:9c:25: f0:19:32:5a:69:a6:eb:52:18:6e:79:e9:e6:90:61:b0:4c:27: 48:d9:24:30:81:f6:93:17:f4:93:fa:9e:b7:bc:a0:04:cd:91: 12:3d:77:7a:99:06:49:23:06:58:97:4a:84:9c:fc:b2:03:d0: 07:5d:63:fb:d7:46:39:2a:b9:a8:a5:13:28:71:e2:3c:97:97: e9:46:8c:a5:89:2b:01:1d:a9:31:60:44:c9:a5:c5:7f:c7:8a: 49:a5:76:a2:c4:e1:f4:c0:1c:77:84:10:c9:33:79:0f:26:57: 6a:90:90:ca:c1:ff:eb:aa:e1:41:b5:e2:7e:7c:0e:ae:d9:d4: b7:ce:47:7d:dd:6c:a4:f5:b5:e2:85:77:b1:cd:90:f5:c7:80: 24:95:88:2f:78:0c:2b:0c:b5:9e:8b:82:2b:fb:ef:6c:4c:6f: 18:34:8a:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mp6VlsMI2I1zDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YTg5NzU0ZWUtMDhmNy00NDU2LWIzZWMtMWIxMzVjMmY2ODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqNfDiB1SYyAZptZPIIRb5EZyMMAVJmrg5dT CA2jxNrj3i6d5B3a74CHf4sGA4LmUmebx1TkqhAVbVpAQEZHYGBevVkHaCNPMEU6 ofnRg+BzSaNHvfht/lnk8QhgFbeo8HMe0vr4YxjmnzQ3CaGFikpMV5oRDbKnKl19 4vtL/CXh0njAYac7W3178MiUszD3jo06wQ+hcASE/1trd14JT6RFkz2OIVdloIoW 6YtpS4I0uHrACzgs6wFmAbp7D1ULUO6PDXNjeYarL/eflFu9CAjGzHdHx1yXjlJ+ ozjDt23JyhmUpgrbcJUg5KAzhkRu1WRFiyqwtsZpfIkOxVzb2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbsRKVRcOT11uJafFJKjel+5OheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjNmNmMxMzktNjViNS0z YWIyLWEzYTYtNjJmYjAzNTAzYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/zX/l1e5sPl337ltV2EODMndhI1BvWIgXd/ai3Uzjf/elsea7oJyTf BOF8phPtQ5VhduTmgsfMGxNs9N66ob3Q8+RZMZYf3uUJdDemhYHEapJ22Nc1pAqc JfAZMlppputSGG556eaQYbBMJ0jZJDCB9pMX9JP6nre8oATNkRI9d3qZBkkjBliX SoSc/LID0AddY/vXRjkquailEyhx4jyXl+lGjKWJKwEdqTFgRMmlxX/HikmldqLE 4fTAHHeEEMkzeQ8mV2qQkMrB/+uq4UG14n58Dq7Z1LfOR33dbKT1teKFd7HNkPXH gCSViC94DCsMtZ6Lgiv772xMbxg0in8= -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:54 2026 by rpki-client