$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcddb74d-0b99-3aeb-957f-89acfe284abf.roa File: dcddb74d-0b99-3aeb-957f-89acfe284abf.roa (raw, json) Hash identifier: 0RkUxW3vxqjBGguIGQK2JLRfDzCFUEftTlJS+hqhdVE= Subject key identifier: 00:9B:21:D3:4C:D8:EB:B8:78:F8:FF:13:A0:C1:E7:65:AA:BF:0B:5D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A7763DC1B079E96D35E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcddb74d-0b99-3aeb-957f-89acfe284abf.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 134.70.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:77:63:dc:1b:07:9e:96:d3:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=de07f3de-1ef2-4086-a738-a327574b6ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dc:c1:7e:93:1c:d2:95:f6:07:e6:bf:ad:d2: f1:29:95:42:e6:97:1f:ce:e9:e0:ed:2a:c7:97:d7: 20:b2:71:fc:e6:91:cd:18:26:85:8e:a5:fe:ce:d5: 79:c3:f0:c3:c6:be:0f:aa:df:37:f6:44:01:3c:0a: 49:f7:bf:82:f4:58:e1:ed:22:8d:ed:d6:60:d8:43: fb:af:a0:84:04:bd:3e:8e:8d:b5:c4:1b:e7:42:81: d3:fc:93:55:68:bf:c7:97:4a:17:40:6f:7a:da:5e: 8d:dd:50:37:54:22:d6:ce:94:9b:17:15:91:7e:1c: 02:8b:fa:bd:3a:7f:eb:11:88:bb:27:05:90:f2:25: 69:d7:33:7c:9c:a7:fa:f1:30:af:9f:ef:01:81:cd: 8b:fe:71:77:68:c2:ee:09:67:71:69:b1:bc:d5:88: 5f:d4:93:a0:ec:31:8a:be:1d:89:2f:7b:8e:38:93: 2f:8c:7d:f7:f0:32:78:93:30:02:66:1c:dd:dc:45: 62:86:14:a0:9a:ec:18:1e:7c:13:22:3b:b6:71:88: 7d:93:81:59:9b:8d:b1:b8:b4:ea:02:4f:26:e1:cb: 8c:46:d8:92:30:4c:14:b8:9b:5d:36:ea:72:c6:ba: f0:14:08:56:4f:b6:32:21:62:5f:1a:27:48:27:20: da:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9B:21:D3:4C:D8:EB:B8:78:F8:FF:13:A0:C1:E7:65:AA:BF:0B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcddb74d-0b99-3aeb-957f-89acfe284abf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:3a:ca:52:be:ec:89:98:2b:ab:73:39:32:bb:39:1f:cc:7d: b7:0c:6d:d7:93:a6:4f:fd:23:c5:ab:fa:e8:da:65:df:49:87: 4c:60:1e:8a:bd:d6:d2:42:3f:d2:20:8d:f6:83:df:da:0d:e4: 7e:e6:95:9a:70:9e:d1:cf:0c:ce:dd:04:57:fb:e5:03:7d:46: 5a:3e:2e:ef:3a:83:a0:9b:0a:32:e3:1d:93:de:dc:d0:23:7f: 9b:35:05:f5:c6:8f:65:dc:56:8a:9a:cd:df:4c:07:c1:09:d2: 93:06:0c:4a:fe:88:83:49:0c:db:ee:a0:03:cb:79:89:9b:f0: e0:39:fc:d0:7e:dd:37:bb:18:9d:e0:92:72:20:10:ad:20:dd: 09:e4:4e:2c:8b:5f:67:35:b9:bd:4d:f5:14:f9:0f:d1:fb:3a: 8e:1c:38:ca:c0:77:09:f8:f4:bb:49:82:45:9c:eb:95:08:65: 1b:38:1f:84:1b:0e:e8:ca:50:33:37:0a:56:f5:17:69:8a:c0: b7:98:78:4a:6d:a6:30:62:7c:6d:72:b6:a9:bc:5c:45:60:ea: 2d:13:6b:68:9e:03:b5:99:f1:d5:49:31:f5:ae:af:37:b6:a1: 28:8d:e7:15:bc:66:aa:d8:26:4b:0f:7b:3d:84:26:39:24:39: 87:d0:7f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mndj3BsHnpbTXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZGUwN2YzZGUtMWVmMi00MDg2LWE3MzgtYTMyNzU3NGI2YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdzBfpMc0pX2B+a/rdLxKZVC5pcfzung7SrH l9cgsnH85pHNGCaFjqX+ztV5w/DDxr4Pqt839kQBPApJ97+C9Fjh7SKN7dZg2EP7 r6CEBL0+jo21xBvnQoHT/JNVaL/Hl0oXQG962l6N3VA3VCLWzpSbFxWRfhwCi/q9 On/rEYi7JwWQ8iVp1zN8nKf68TCvn+8Bgc2L/nF3aMLuCWdxabG81Yhf1JOg7DGK vh2JL3uOOJMvjH338DJ4kzACZhzd3EVihhSgmuwYHnwTIju2cYh9k4FZm42xuLTq Ak8m4cuMRtiSMEwUuJtdNupyxrrwFAhWT7YyIWJfGidIJyDalQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACbIdNM2Ou4ePj/E6DB52WqvwtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGNkZGI3NGQtMGI5OS0z YWViLTk1N2YtODlhY2ZlMjg0YWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE6ylK+7ImYK6tzOTK7OR/MfbcMbdeTpk/9I8Wr+ujaZd9Jh0xgHoq9 1tJCP9IgjfaD39oN5H7mlZpwntHPDM7dBFf75QN9Rlo+Lu86g6CbCjLjHZPe3NAj f5s1BfXGj2XcVoqazd9MB8EJ0pMGDEr+iINJDNvuoAPLeYmb8OA5/NB+3Te7GJ3g knIgEK0g3QnkTiyLX2c1ub1N9RT5D9H7Oo4cOMrAdwn49LtJgkWc65UIZRs4H4Qb DujKUDM3Clb1F2mKwLeYeEptpjBifG1ytqm8XEVg6i0Ta2ieA7WZ8dVJMfWurze2 oSiN5xW8ZqrYJksPez2EJjkkOYfQf/o= -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:35 2026 by rpki-client