$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25b948e6-d394-3ff3-9bd4-7a07a8272572.roa File: 25b948e6-d394-3ff3-9bd4-7a07a8272572.roa (raw, json) Hash identifier: gLmf7Fdw+bh7DkxWYdtO/0dV/C0ssU2s7fsc+e5MyjY= Subject key identifier: D0:8C:C4:21:03:ED:05:8F:D0:ED:4F:30:D8:B3:08:85:45:E5:E0:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1C60BF2E0BDD68F2A65C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25b948e6-d394-3ff3-9bd4-7a07a8272572.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 159.13.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c6:0b:f2:e0:bd:d6:8f:2a:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=f65dc773-e6e6-4672-9cdd-342a12241487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:01:73:90:1d:91:6c:f2:17:42:a4:be:f7: e0:c5:85:5a:92:2b:73:e5:35:18:d2:a2:7c:d4:3a: ac:a4:75:a2:f8:38:07:59:48:f4:32:ab:f8:fc:36: 47:6c:b4:94:2f:ea:13:86:39:22:b2:b6:14:d3:e7: 8d:26:a2:38:f3:1b:5b:80:fd:4d:20:42:55:d8:b9: 3b:f1:1e:04:3d:c3:8a:30:d1:08:2e:75:84:db:54: 3b:c6:34:7c:a8:f8:01:2a:3c:13:c0:88:d9:91:e0: 2e:5d:5b:27:06:75:09:5f:52:22:19:f4:49:da:9c: c6:b3:5e:f6:d3:6a:f5:28:6f:97:7a:2a:8b:14:bf: 79:7b:e9:3d:65:12:a9:2f:a2:27:17:df:4f:29:53: fc:22:27:b6:a4:df:96:2a:c4:7d:02:65:a7:1d:46: 60:8f:f6:8d:7e:48:29:32:7c:c7:ad:3e:d3:8d:79: 82:c5:a7:3e:ce:9f:bb:d3:bc:7b:1e:38:4a:49:ff: de:1a:76:58:f0:18:ec:cf:6d:b4:17:c6:9e:29:fe: ba:00:2b:26:dc:49:05:6d:4b:3a:72:35:6a:2f:c0: 2e:b9:5e:42:0f:c4:c0:41:82:2a:40:da:8b:22:2d: 50:87:60:4c:93:9d:62:c4:8c:b0:5a:69:11:2d:1c: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8C:C4:21:03:ED:05:8F:D0:ED:4F:30:D8:B3:08:85:45:E5:E0:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25b948e6-d394-3ff3-9bd4-7a07a8272572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.13.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d8:0c:b4:96:2d:61:a8:ab:d4:c2:ab:0f:dc:50:c4:9d:7a: 95:a3:4f:a1:8a:b1:82:52:e7:09:06:ee:72:43:d4:50:3d:c5: 71:e3:e6:a9:99:9a:a7:ac:32:99:c1:ef:72:d7:86:20:29:c1: 86:6d:55:bc:f5:46:ce:2d:ee:18:b7:4a:62:95:05:5d:6e:4c: 37:1a:04:de:f7:7d:e1:57:de:4c:77:22:33:bd:56:71:d2:15: e2:c4:72:93:a8:f5:65:51:b8:2c:ae:47:8a:1d:8c:23:da:42: be:ad:05:c1:57:76:71:88:72:5e:9f:49:a9:1a:8d:3e:a5:3f: 71:0e:14:96:12:38:6c:d5:bc:6e:f4:00:6e:c2:53:46:62:dd: 9a:df:ca:90:d7:b7:c7:5f:5f:9a:dd:0c:1e:bf:a8:85:0d:54: 9b:bb:23:f7:98:db:19:19:69:18:a9:33:91:2f:e0:8d:6f:66: 91:4d:b0:bb:0d:24:ca:ad:88:a8:6d:b9:df:ad:7a:af:e8:a7: a0:7d:82:d0:6f:13:13:cf:e4:de:3d:78:a3:e1:c5:ff:47:18: d4:54:44:35:85:0b:d8:af:80:59:7d:d5:d4:cb:e4:aa:50:dc: 9b:95:00:b1:4e:7f:5f:89:30:27:f9:44:93:e9:a9:b1:1c:98: 00:49:97:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cYL8uC91o8qZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk ZjY1ZGM3NzMtZTZlNi00NjcyLTljZGQtMzQyYTEyMjQxNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEABc5AdkWzyF0KkvvfgxYVakitz5TUY0qJ8 1DqspHWi+DgHWUj0Mqv4/DZHbLSUL+oThjkisrYU0+eNJqI48xtbgP1NIEJV2Lk7 8R4EPcOKMNEILnWE21Q7xjR8qPgBKjwTwIjZkeAuXVsnBnUJX1IiGfRJ2pzGs172 02r1KG+XeiqLFL95e+k9ZRKpL6InF99PKVP8Iie2pN+WKsR9AmWnHUZgj/aNfkgp MnzHrT7TjXmCxac+zp+707x7HjhKSf/eGnZY8Bjsz220F8aeKf66ACsm3EkFbUs6 cjVqL8AuuV5CD8TAQYIqQNqLIi1Qh2BMk51ixIywWmkRLRwP0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCMxCED7QWP0O1PMNizCIVF5eCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjViOTQ4ZTYtZDM5NC0z ZmYzLTliZDQtN2EwN2E4MjcyNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnw0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHYDLSWLWGoq9TCqw/cUMSdepWjT6GKsYJS5wkG7nJD1FA9xXHj5qmZ mqesMpnB73LXhiApwYZtVbz1Rs4t7hi3SmKVBV1uTDcaBN73feFX3kx3IjO9VnHS FeLEcpOo9WVRuCyuR4odjCPaQr6tBcFXdnGIcl6fSakajT6lP3EOFJYSOGzVvG70 AG7CU0Zi3ZrfypDXt8dfX5rdDB6/qIUNVJu7I/eY2xkZaRipM5Ev4I1vZpFNsLsN JMqtiKhtud+teq/op6B9gtBvExPP5N49eKPhxf9HGNRURDWFC9ivgFl91dTL5KpQ 3JuVALFOf1+JMCf5RJPpqbEcmABJl38= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:40 2026 by rpki-client