$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc5c0b41-79d9-3da1-887d-d2568410422d.roa File: bc5c0b41-79d9-3da1-887d-d2568410422d.roa (raw, json) Hash identifier: 9oM+Rt2W/gGotpAizowcw2OoTty+rvO6nacA6NfqBpY= Subject key identifier: A2:C5:10:92:CF:38:69:9E:ED:EC:F7:B9:71:47:3D:62:BF:94:CD:DA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D869537AEC3142F5408EE7E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc5c0b41-79d9-3da1-887d-d2568410422d.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 134.70.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:37:ae:c3:14:2f:54:08:ee:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=b3cc65b9-66a1-4a40-af00-621d963e90cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dd:51:87:98:48:1b:bd:77:fa:d1:f5:37:97: 2b:4e:c1:ff:a9:69:1a:3a:87:81:22:19:0f:a3:bb: 4d:aa:f9:d7:42:b6:28:8f:83:c4:5a:79:1a:08:5a: 1b:87:22:a9:dc:c0:50:d3:2b:ba:35:45:5f:32:6f: e4:ec:8d:a0:1e:24:5c:bb:3c:f7:39:da:b1:4c:57: 77:f9:e3:89:05:0a:64:c1:5d:f4:9c:b6:27:23:fc: 37:35:49:d1:0e:cd:1a:24:80:35:35:8d:1f:3c:85: 9a:d4:bd:ee:63:d9:6d:26:4a:37:85:8c:55:b6:8f: d3:a5:b0:e9:72:3d:02:fe:fd:97:0f:d1:bb:17:5e: cc:a6:80:26:d6:98:ed:9c:e8:ca:00:74:84:b2:31: e1:19:2a:e3:59:1a:c5:46:44:81:24:41:b2:bd:f2: 49:a3:ca:8b:df:7b:3e:d7:51:8e:a3:3e:59:78:dd: e5:79:61:1a:59:d3:c1:bc:6e:34:55:09:39:28:01: bd:17:53:5e:0c:74:13:9c:43:62:03:4e:dc:20:0f: 4e:8c:6d:7c:65:1d:12:c0:d2:27:75:57:f0:ab:8e: 7e:68:b0:57:2f:95:2c:db:e6:0e:80:8b:49:b8:7a: fa:c2:0b:d0:0f:91:33:f3:ee:c6:93:2c:42:05:7a: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C5:10:92:CF:38:69:9E:ED:EC:F7:B9:71:47:3D:62:BF:94:CD:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc5c0b41-79d9-3da1-887d-d2568410422d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b6:f1:15:98:25:99:c7:2b:3e:3b:1c:be:8f:89:8f:5f:54: 7c:25:a9:54:6d:eb:1f:79:78:dc:dc:18:4c:d2:a2:c9:b8:49: fb:22:84:71:e8:4a:b0:04:51:ed:31:2a:16:42:08:37:26:da: e8:e4:c7:83:55:66:6e:7d:01:d5:fb:ba:41:61:f9:7c:ba:2a: a7:aa:71:48:5a:70:ff:36:56:11:7a:03:39:d6:fe:c8:19:b5: ad:e0:05:f4:30:72:3d:88:a5:e4:23:e8:4c:b6:34:05:69:56: 9c:9d:3f:e5:10:05:88:26:06:a7:a1:f7:89:02:52:2e:48:2a: 4b:d5:c5:32:24:7c:52:09:0c:3f:61:9c:ff:9b:9f:02:6a:5e: 0a:5f:29:3f:7b:6d:f6:e9:bf:9a:93:f0:79:14:d9:e7:80:50: ba:34:df:32:45:93:e1:de:04:e9:37:91:fc:1f:0a:96:87:5d: 44:e7:94:0f:18:8e:30:9c:8f:f0:b9:d5:e6:53:de:65:c9:c2: ee:20:72:a0:1a:e3:b6:bb:0c:ab:23:ae:25:e6:48:09:ea:c3: 24:63:50:14:c3:91:23:16:a2:7b:76:d5:b7:21:6e:14:0d:b9: 82:bc:0f:9e:95:3c:d9:9e:d3:ef:f9:5e:99:c2:ff:4e:76:87: 87:de:8c:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlTeuwxQvVAjufoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YjNjYzY1YjktNjZhMS00YTQwLWFmMDAtNjIxZDk2M2U5MGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld1Rh5hIG713+tH1N5crTsH/qWkaOoeBIhkP o7tNqvnXQrYoj4PEWnkaCFobhyKp3MBQ0yu6NUVfMm/k7I2gHiRcuzz3OdqxTFd3 +eOJBQpkwV30nLYnI/w3NUnRDs0aJIA1NY0fPIWa1L3uY9ltJko3hYxVto/TpbDp cj0C/v2XD9G7F17MpoAm1pjtnOjKAHSEsjHhGSrjWRrFRkSBJEGyvfJJo8qL33s+ 11GOoz5ZeN3leWEaWdPBvG40VQk5KAG9F1NeDHQTnENiA07cIA9OjG18ZR0SwNIn dVfwq45+aLBXL5Us2+YOgItJuHr6wgvQD5Ez8+7GkyxCBXov/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLFEJLPOGme7ez3uXFHPWK/lM3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmM1YzBiNDEtNzlkOS0z ZGExLTg4N2QtZDI1Njg0MTA0MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW28RWYJZnHKz47HL6PiY9fVHwlqVRt6x95eNzcGEzSosm4SfsihHHo SrAEUe0xKhZCCDcm2ujkx4NVZm59AdX7ukFh+Xy6KqeqcUhacP82VhF6AznW/sgZ ta3gBfQwcj2IpeQj6Ey2NAVpVpydP+UQBYgmBqeh94kCUi5IKkvVxTIkfFIJDD9h nP+bnwJqXgpfKT97bfbpv5qT8HkU2eeAULo03zJFk+HeBOk3kfwfCpaHXUTnlA8Y jjCcj/C51eZT3mXJwu4gcqAa47a7DKsjriXmSAnqwyRjUBTDkSMWont21bchbhQN uYK8D56VPNme0+/5XpnC/052h4fejEo= -----END CERTIFICATE-----Generated at Fri Apr 17 15:21:03 2026 by rpki-client