$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/340b38ee-cbd6-39c2-947b-506311bd6a17.roa File: 340b38ee-cbd6-39c2-947b-506311bd6a17.roa (raw, json) Hash identifier: AOIOCem9N04naygSz2pmZz5qPWnsCHRwlkZMqcp7QmQ= Subject key identifier: C9:E7:AF:B1:21:19:00:3B:D5:89:C3:FB:A6:B1:D5:36:52:72:F7:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E55DAAB3E5C7009C97A00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/340b38ee-cbd6-39c2-947b-506311bd6a17.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 168.129.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:55:da:ab:3e:5c:70:09:c9:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4631c911-6ed0-4ac6-8950-63da74a77c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:a6:1b:6a:67:2c:8d:e8:3f:c4:a1:0b:78: 36:50:a7:c2:58:0e:cd:ef:5f:3a:e5:e4:97:ad:22: f6:d3:78:ac:58:ee:ad:87:5e:70:8d:75:4b:93:bc: a5:c4:54:f5:9f:93:f0:43:b8:91:11:d8:19:02:5e: 72:ce:e6:c8:ac:ff:45:d0:92:e4:ba:7d:a9:6b:f9: 9e:65:ab:b7:cb:24:57:37:3a:18:b4:e6:66:76:20: c5:02:b0:12:59:2a:96:da:af:18:70:1d:b5:6a:76: 39:09:f8:2d:f6:3d:d6:6c:36:7b:82:45:f3:69:f4: ed:53:83:29:96:4b:da:f4:00:fd:3d:da:a0:24:37: fc:33:2e:f1:f2:cd:b7:08:00:f5:d9:b6:59:49:58: 86:72:f5:77:44:c7:4a:db:63:5e:38:52:ee:04:ce: 21:62:4a:7a:29:ae:c8:ba:d3:4d:2f:72:e6:85:8a: d5:b5:26:07:d1:86:21:22:33:9c:4c:7b:21:8e:98: c5:71:7b:da:a1:23:fc:4a:2d:5b:5e:52:19:a3:39: 95:9e:5d:e7:d0:89:f3:45:49:07:e6:fc:80:4a:14: b2:3a:9a:9d:28:37:2d:80:06:dc:2d:8f:e3:f9:67: d3:4b:37:0b:2f:bc:dd:ff:1b:0a:f1:0d:ce:e3:37: 14:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E7:AF:B1:21:19:00:3B:D5:89:C3:FB:A6:B1:D5:36:52:72:F7:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/340b38ee-cbd6-39c2-947b-506311bd6a17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:70:53:ee:6e:3c:0c:d7:6c:fb:51:3c:1d:0c:b9:a2:e7:15: f5:33:80:0e:37:b0:a9:0b:23:11:fc:44:49:5b:03:ec:d0:11: 47:86:17:cc:6c:68:e6:6b:39:03:4f:d5:ef:96:f5:84:de:0f: 6b:64:d1:26:a5:b6:3b:91:e2:5d:57:40:01:05:fe:7f:a4:e8: 91:03:bf:c2:2c:0e:0d:d0:05:60:fd:b3:e6:98:61:b2:47:43: 86:5e:a8:2f:c3:65:72:96:83:58:f8:a5:1f:ff:8d:97:41:8e: f8:1f:aa:52:28:17:ee:82:27:b3:b7:14:93:4b:75:e7:45:e8: dc:a7:99:2e:9c:34:01:88:ba:ab:cf:34:1a:55:79:90:59:99: 22:9e:f2:43:fb:5a:66:c5:79:22:54:19:b5:49:e3:3c:95:fc: 65:1e:f5:0b:2d:d7:b4:63:72:2a:7b:f9:2b:6e:e5:f9:66:6b: b8:2d:2f:dd:47:b6:6d:27:73:a4:f7:4f:14:9d:4e:63:c1:92: 09:23:59:19:8a:a0:81:08:80:c4:c9:f5:00:9e:7c:6d:14:ed: 60:ba:31:f7:0b:7f:0f:d8:41:5a:8c:09:c4:80:cf:c8:1e:7f: 95:11:c2:60:6b:75:aa:17:2d:5b:9d:50:12:50:f9:dd:ab:3b: 73:90:93:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXlXaqz5ccAnJegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDYzMWM5MTEtNmVkMC00YWM2LTg5NTAtNjNkYTc0YTc3Yzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo+mG2pnLI3oP8ShC3g2UKfCWA7N71865eSX rSL203isWO6th15wjXVLk7ylxFT1n5PwQ7iREdgZAl5yzubIrP9F0JLkun2pa/me Zau3yyRXNzoYtOZmdiDFArASWSqW2q8YcB21anY5Cfgt9j3WbDZ7gkXzafTtU4Mp lkva9AD9PdqgJDf8My7x8s23CAD12bZZSViGcvV3RMdK22NeOFLuBM4hYkp6Ka7I utNNL3LmhYrVtSYH0YYhIjOcTHshjpjFcXvaoSP8Si1bXlIZozmVnl3n0InzRUkH 5vyAShSyOpqdKDctgAbcLY/j+WfTSzcLL7zd/xsK8Q3O4zcUNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnnr7EhGQA71YnD+6ax1TZScveJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzQwYjM4ZWUtY2JkNi0z OWMyLTk0N2ItNTA2MzExYmQ2YTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqIH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9wU+5uPAzXbPtRPB0MuaLnFfUzgA43sKkLIxH8RElbA+zQEUeGF8xs aOZrOQNP1e+W9YTeD2tk0SaltjuR4l1XQAEF/n+k6JEDv8IsDg3QBWD9s+aYYbJH Q4ZeqC/DZXKWg1j4pR//jZdBjvgfqlIoF+6CJ7O3FJNLdedF6NynmS6cNAGIuqvP NBpVeZBZmSKe8kP7WmbFeSJUGbVJ4zyV/GUe9Qst17Rjcip7+Stu5flma7gtL91H tm0nc6T3TxSdTmPBkgkjWRmKoIEIgMTJ9QCefG0U7WC6MfcLfw/YQVqMCcSAz8ge f5URwmBrdaoXLVudUBJQ+d2rO3OQk/s= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:25 2026 by rpki-client