$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b5cf17f1-a48c-369e-acb1-f07f37e89bee.roa File: b5cf17f1-a48c-369e-acb1-f07f37e89bee.roa (raw, json) Hash identifier: zUUn3up9Pk7zYoPdkvpP6/LqEEjOnzopcZFnYjO627c= Subject key identifier: 95:6D:49:60:4E:4F:44:F6:0C:1E:59:9D:E8:B0:DA:FD:98:A1:4B:54 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA445239AEC7233F21CA84D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b5cf17f1-a48c-369e-acb1-f07f37e89bee.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 54253 IP address blocks: 134.185.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:23:9a:ec:72:33:f2:1c:a8:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=fda658d8-edb8-4d10-adc8-209aabe05bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:d9:2c:09:f3:44:d2:dd:21:0f:03:67:e7: 75:99:67:f4:78:09:8a:2d:fd:2e:f3:f3:ad:02:7e: 6f:d8:35:98:09:76:f3:30:62:a8:85:3d:bd:c5:4e: 58:ce:20:58:89:38:96:89:a4:8e:b3:a7:51:58:60: 72:43:dd:2f:dd:3d:8d:c8:7e:c7:f6:7f:6b:a6:4e: 70:5e:92:5f:22:71:0e:f3:83:1e:ca:7b:7d:99:cf: b7:65:f3:e0:6b:76:1e:ad:80:92:ee:15:83:d0:bf: f6:c8:b1:f8:3b:3d:2f:68:67:86:68:03:0d:06:bf: b2:f3:a2:d1:5e:c9:71:f4:33:c1:d7:50:2b:55:58: 86:35:73:f8:cd:63:81:9d:da:2a:88:fc:0c:64:26: a5:c2:0a:cc:61:78:96:bd:27:04:9b:96:0d:12:b7: 70:1e:b9:28:9e:5f:9d:b4:36:df:95:8a:7d:e6:cb: cf:5e:b1:dc:4c:1f:21:5b:69:35:0a:8a:c8:0f:de: 2f:13:3c:d6:53:ad:aa:1a:57:74:67:00:74:c8:e3: d9:3e:ac:90:00:b7:b2:9a:3b:65:1b:11:89:83:0a: eb:dd:d2:2d:0f:2d:90:1b:fb:18:3d:ce:8b:e5:98: f9:7b:07:10:16:6d:ea:da:3e:c2:68:61:36:e0:c4: 56:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6D:49:60:4E:4F:44:F6:0C:1E:59:9D:E8:B0:DA:FD:98:A1:4B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b5cf17f1-a48c-369e-acb1-f07f37e89bee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:71:02:20:f4:1c:56:9f:b4:ce:b1:15:48:44:bc:9b:90:ba: 07:53:97:f2:ad:b3:f8:df:fe:41:87:50:aa:10:53:5b:5d:e0: 80:5e:3b:3e:99:a6:96:db:c8:4a:3e:ca:1a:64:65:c2:39:29: 8b:92:26:48:cb:48:8f:36:79:bb:77:37:73:14:3d:89:fc:4b: c0:6c:64:bf:96:2c:06:16:16:76:fd:8f:07:bb:24:b6:b1:81: cc:cd:0f:45:9b:33:dc:26:e1:08:a2:3f:09:0c:98:c8:b0:51: 1e:23:03:d8:c4:01:69:45:14:80:c0:21:5c:f5:99:d4:89:eb: a9:92:27:a7:13:9c:5f:53:3c:fb:54:38:f3:a9:1e:49:c1:96: 59:d5:4a:30:c8:8a:65:d0:27:e3:b9:24:b2:22:b0:a4:7a:a6: ae:da:61:b8:bc:f6:cc:cc:f9:1b:f9:99:2e:bd:af:b7:ab:b6: 34:a7:cc:34:fc:b4:48:59:5b:15:9c:ab:91:0f:ec:e4:62:58: e1:0a:df:b7:c2:c9:78:66:ff:57:9b:76:bc:f6:32:f9:47:e9: e3:63:ad:aa:e8:d3:71:cd:9c:18:38:cb:60:1d:5d:b0:6e:3a: 21:42:01:2f:50:f6:a3:46:20:49:13:c6:2d:d3:39:76:9b:1b: 69:c7:53:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRSOa7HIz8hyoTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk ZmRhNjU4ZDgtZWRiOC00ZDEwLWFkYzgtMjA5YWFiZTA1YmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAperZLAnzRNLdIQ8DZ+d1mWf0eAmKLf0u8/Ot An5v2DWYCXbzMGKohT29xU5YziBYiTiWiaSOs6dRWGByQ90v3T2NyH7H9n9rpk5w XpJfInEO84Meynt9mc+3ZfPga3YerYCS7hWD0L/2yLH4Oz0vaGeGaAMNBr+y86LR Xslx9DPB11ArVViGNXP4zWOBndoqiPwMZCalwgrMYXiWvScEm5YNErdwHrkonl+d tDbflYp95svPXrHcTB8hW2k1CorID94vEzzWU62qGld0ZwB0yOPZPqyQALeymjtl GxGJgwrr3dItDy2QG/sYPc6L5Zj5ewcQFm3q2j7CaGE24MRWqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVtSWBOT0T2DB5Zneiw2v2YoUtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjVjZjE3ZjEtYTQ4Yy0z NjllLWFjYjEtZjA3ZjM3ZTg5YmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhrmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJxAiD0HFaftM6xFUhEvJuQugdTl/Kts/jf/kGHUKoQU1td4IBeOz6Z ppbbyEo+yhpkZcI5KYuSJkjLSI82ebt3N3MUPYn8S8BsZL+WLAYWFnb9jwe7JLax gczND0WbM9wm4QiiPwkMmMiwUR4jA9jEAWlFFIDAIVz1mdSJ66mSJ6cTnF9TPPtU OPOpHknBllnVSjDIimXQJ+O5JLIisKR6pq7aYbi89szM+Rv5mS69r7ertjSnzDT8 tEhZWxWcq5EP7ORiWOEK37fCyXhm/1ebdrz2MvlH6eNjraro03HNnBg4y2AdXbBu OiFCAS9Q9qNGIEkTxi3TOXabG2nHU3A= -----END CERTIFICATE-----Generated at Tue Jul 28 23:42:57 2026 by rpki-client