$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/129596f2-d342-390e-83e7-2de9a0526aed.roa File: 129596f2-d342-390e-83e7-2de9a0526aed.roa (raw, json) Hash identifier: HXVJrhhu2KmYzbfyowmtyFV0J4TaM6nfuNfv9aH7V88= Subject key identifier: 50:14:BB:6B:0A:BE:E8:EB:D0:85:5D:4A:F9:2A:17:37:21:02:91:E1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E5B7C26736B5447AE1080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/129596f2-d342-390e-83e7-2de9a0526aed.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 134.70.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:5b:7c:26:73:6b:54:47:ae:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7ba7a74b-c9ad-413e-b96e-064ce4240310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:93:f8:3a:07:ea:e8:70:48:52:e2:32:90:95: 5c:15:18:25:cb:ea:cf:8f:93:01:9b:7d:63:92:3a: ac:9c:0c:55:3d:19:dd:bb:2b:7e:15:24:a9:20:43: 19:ee:7a:7f:12:bc:3d:d9:48:90:22:96:36:49:e1: 48:2a:ff:3a:b3:a1:3e:c3:45:8d:34:17:59:eb:86: b8:91:f4:5e:b6:13:2b:a0:e1:b1:cf:40:07:7d:2e: 5d:44:d0:3a:bb:80:33:cc:3b:52:a0:b9:e7:d5:0e: a0:55:1a:a0:43:44:f1:da:11:b8:ed:9d:60:af:92: e6:17:d4:b6:4e:7a:ee:9e:fd:11:0a:be:3e:be:28: 1d:68:a6:24:86:58:b7:02:28:55:16:12:a4:f2:80: 5f:74:c9:d1:75:9b:49:eb:fd:76:24:1b:56:fd:0a: 97:39:d3:f9:1d:d5:91:7b:2b:6d:a0:65:e8:f2:9a: 51:bb:76:94:40:34:1f:70:5a:90:3d:69:47:1c:6a: 77:af:a6:6d:ac:ef:85:1f:6e:51:37:79:fd:d8:4d: f6:3b:b3:81:5f:64:98:df:5f:ae:6a:c2:cb:39:00: 07:f1:0b:d9:f7:87:fa:15:cf:7b:92:3c:6d:66:a1: fd:e7:5d:87:2b:36:f0:bc:ca:af:6d:e2:f8:81:20: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:14:BB:6B:0A:BE:E8:EB:D0:85:5D:4A:F9:2A:17:37:21:02:91:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/129596f2-d342-390e-83e7-2de9a0526aed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:63:dd:75:81:b7:78:e9:90:44:ea:ea:00:91:f4:e3:af:a4: 6a:6a:41:5d:ef:e4:b4:a5:6b:3e:e6:78:e7:5f:cf:79:a3:e0: a9:b4:6f:5b:0e:bd:f4:4a:5b:cc:19:b3:fe:45:c4:86:35:c8: 72:e5:1e:18:e0:2a:e4:19:9a:e7:e3:c1:0b:ab:59:64:9c:c5: 36:2f:89:c4:a1:17:73:b9:52:e9:ec:35:82:04:a6:d6:c3:a9: 66:c7:4b:59:73:35:f0:ac:91:61:a0:ef:99:65:fb:fb:1b:dc: 2e:2e:4b:28:0a:8f:2b:7c:e5:18:cf:ba:90:d6:ac:cd:98:5e: 3d:11:23:28:4e:50:f1:ea:6e:ff:63:f8:cf:cd:f3:f1:6f:99: 93:bf:3a:ec:ca:72:68:7a:88:fb:57:96:25:41:3a:15:5a:31: 18:34:da:e2:d5:b3:78:3c:2e:de:49:df:5f:7d:00:57:87:2c: c1:10:4b:8e:1c:e7:e1:ee:88:36:a9:b3:7e:97:ce:95:96:75: 2c:00:96:90:0f:4e:ef:d6:3f:d5:5d:cf:3c:25:4e:87:32:6d: d6:4a:ea:7e:e6:e2:d0:32:09:e1:1f:9c:78:de:ee:e3:7b:ed: ac:38:5f:82:ec:14:12:7b:51:ba:98:2c:1e:80:41:96:5e:30: c4:8c:c2:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXlt8JnNrVEeuEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2JhN2E3NGItYzlhZC00MTNlLWI5NmUtMDY0Y2U0MjQwMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJP4Ogfq6HBIUuIykJVcFRgly+rPj5MBm31j kjqsnAxVPRnduyt+FSSpIEMZ7np/Erw92UiQIpY2SeFIKv86s6E+w0WNNBdZ64a4 kfRethMroOGxz0AHfS5dRNA6u4AzzDtSoLnn1Q6gVRqgQ0Tx2hG47Z1gr5LmF9S2 Tnrunv0RCr4+vigdaKYkhli3AihVFhKk8oBfdMnRdZtJ6/12JBtW/QqXOdP5HdWR eyttoGXo8ppRu3aUQDQfcFqQPWlHHGp3r6ZtrO+FH25RN3n92E32O7OBX2SY31+u asLLOQAH8QvZ94f6Fc97kjxtZqH9512HKzbwvMqvbeL4gSB3CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAUu2sKvujr0IVdSvkqFzchApHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTI5NTk2ZjItZDM0Mi0z OTBlLTgzZTctMmRlOWEwNTI2YWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdj3XWBt3jpkETq6gCR9OOvpGpqQV3v5LSlaz7meOdfz3mj4Km0b1sO vfRKW8wZs/5FxIY1yHLlHhjgKuQZmufjwQurWWScxTYvicShF3O5UunsNYIEptbD qWbHS1lzNfCskWGg75ll+/sb3C4uSygKjyt85RjPupDWrM2YXj0RIyhOUPHqbv9j +M/N8/FvmZO/OuzKcmh6iPtXliVBOhVaMRg02uLVs3g8Lt5J3199AFeHLMEQS44c 5+HuiDaps36XzpWWdSwAlpAPTu/WP9VdzzwlTocybdZK6n7m4tAyCeEfnHje7uN7 7aw4X4LsFBJ7UbqYLB6AQZZeMMSMwqw= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:26 2026 by rpki-client