$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1dd371aa-b89f-3985-948c-e16febd916a9.roa File: 1dd371aa-b89f-3985-948c-e16febd916a9.roa (raw, json) Hash identifier: aiv/tne0eG4TSqdAbioZZEfATBCaz0MyFkwoIQ7rAEA= Subject key identifier: 57:34:5E:D8:12:44:A5:98:FC:19:94:F7:10:EB:9E:CB:39:03:23:E3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA5F74FA37F03F67420C66500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1dd371aa-b89f-3985-948c-e16febd916a9.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 192.29.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:4f:a3:7f:03:f6:74:20:c6:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=f59005cf-5fc1-4b75-81a2-7a98c95bdecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:82:c8:47:e5:ba:7e:17:13:c6:3c:49:0b:47: 2f:16:39:04:83:12:ca:02:0f:d8:50:91:2a:ad:5b: 8c:bc:b2:81:85:6d:32:7c:83:49:2b:51:9a:b6:0e: 34:15:76:37:63:f9:5a:cb:26:38:dc:c8:09:96:90: 3d:98:3b:0d:37:c1:ca:9a:9d:52:26:ef:b4:6e:07: d4:f2:11:85:91:0a:32:11:02:fa:d5:75:8f:0b:24: 41:27:9a:49:96:d9:a5:bb:f4:19:e5:63:df:30:7a: 6c:68:7f:9d:00:09:27:bf:46:3a:0d:cf:ca:88:b9: cc:61:9e:92:e9:5a:23:7a:6d:b0:2c:d8:87:fb:9c: a5:e8:cf:ca:e2:3a:83:e1:a5:24:7a:eb:fd:13:57: f0:a8:10:5c:79:b4:5b:85:ac:7a:e7:b9:c7:3a:c4: 1c:98:5f:a6:9c:eb:da:cf:97:b3:5a:c4:5d:f2:c3: 69:5e:0e:17:48:6d:f9:6f:8a:e1:a2:28:58:7c:f8: 37:97:d5:00:9e:b4:f4:8f:47:08:50:c7:a3:1d:87: d1:bb:65:16:a3:3c:b7:fe:50:21:f8:a9:06:33:79: 1c:eb:bf:94:5a:01:be:e6:0d:6d:88:64:30:d1:63: e9:5e:02:f9:96:57:08:c1:a5:1e:e2:ca:9b:3d:c3: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:34:5E:D8:12:44:A5:98:FC:19:94:F7:10:EB:9E:CB:39:03:23:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1dd371aa-b89f-3985-948c-e16febd916a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:90:1d:32:15:46:67:dd:e7:51:a0:00:21:0e:30:16:74:cb: 3d:db:65:01:1a:2e:d1:7c:9a:6d:4d:e3:9d:e5:2d:d7:0f:4d: 2b:b5:b0:ed:4c:11:03:91:3b:ec:c4:be:88:bc:5e:4a:bb:09: 9d:2d:f2:16:df:1f:5b:ee:fc:e4:1c:e8:a4:ba:47:1b:fb:b7: 4c:cb:11:a4:33:56:a5:fd:26:7d:29:04:7e:d2:a5:3c:27:4e: 9e:b6:a8:40:a4:59:5a:e7:5b:df:e3:23:b5:e8:49:9f:45:bd: cf:91:9c:17:c5:fb:8f:7e:05:58:26:db:8f:e8:4a:32:c1:22: 7a:65:41:ab:85:5c:fb:21:fa:de:e9:b2:c2:5c:e3:8b:89:90: ac:40:3f:c9:9c:83:8c:07:2c:47:f5:ae:90:e6:9a:64:86:01: 03:12:11:da:4a:f4:4d:8e:bb:b6:6c:a7:22:2e:e2:43:19:33: 04:a5:ad:23:30:a4:70:7b:97:e5:81:d5:8c:86:0b:b7:20:4a: f0:10:f9:1f:76:ea:96:6f:a8:67:e4:3e:12:dd:3b:31:ff:22: d9:03:2b:12:31:83:6d:b6:70:4e:78:b3:93:01:cd:f3:60:7e: 87:94:5d:68:1f:5b:09:8a:60:25:04:e3:d2:40:00:08:a2:e3: 9f:8c:b6:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90+jfwP2dCDGZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZjU5MDA1Y2YtNWZjMS00Yjc1LTgxYTItN2E5OGM5NWJkZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYLIR+W6fhcTxjxJC0cvFjkEgxLKAg/YUJEq rVuMvLKBhW0yfINJK1Gatg40FXY3Y/layyY43MgJlpA9mDsNN8HKmp1SJu+0bgfU 8hGFkQoyEQL61XWPCyRBJ5pJltmlu/QZ5WPfMHpsaH+dAAknv0Y6Dc/KiLnMYZ6S 6Vojem2wLNiH+5yl6M/K4jqD4aUkeuv9E1fwqBBcebRbhax657nHOsQcmF+mnOva z5ezWsRd8sNpXg4XSG35b4rhoihYfPg3l9UAnrT0j0cIUMejHYfRu2UWozy3/lAh +KkGM3kc67+UWgG+5g1tiGQw0WPpXgL5llcIwaUe4sqbPcO6mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc0XtgSRKWY/BmU9xDrnss5AyPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWRkMzcxYWEtYjg5Zi0z OTg1LTk0OGMtZTE2ZmViZDkxNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeQHTIVRmfd51GgACEOMBZ0yz3bZQEaLtF8mm1N453lLdcPTSu1sO1M EQORO+zEvoi8Xkq7CZ0t8hbfH1vu/OQc6KS6Rxv7t0zLEaQzVqX9Jn0pBH7SpTwn Tp62qECkWVrnW9/jI7XoSZ9Fvc+RnBfF+49+BVgm24/oSjLBInplQauFXPsh+t7p ssJc44uJkKxAP8mcg4wHLEf1rpDmmmSGAQMSEdpK9E2Ou7ZspyIu4kMZMwSlrSMw pHB7l+WB1YyGC7cgSvAQ+R926pZvqGfkPhLdOzH/ItkDKxIxg222cE54s5MBzfNg foeUXWgfWwmKYCUE49JAAAii45+Mtr4= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:22 2026 by rpki-client