$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d0aac5c-c7c2-3a59-9ab8-11c82d1ffdca.roa File: 3d0aac5c-c7c2-3a59-9ab8-11c82d1ffdca.roa (raw, json) Hash identifier: 6inRbEFYuR2VENIsb5LueWExYFJM6ngjkBhQ5fhMNRY= Subject key identifier: B4:60:B7:F4:D1:CD:F2:89:16:7D:AD:0F:94:DD:F5:59:EE:50:D0:00 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC82A082256958FE531080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d0aac5c-c7c2-3a59-9ab8-11c82d1ffdca.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 134.70.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:82:a0:82:25:69:58:fe:53:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=b39183bb-6d96-44bf-8322-796c916c8fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ec:4c:10:62:ed:61:03:59:d9:05:3b:71:1e: 6b:69:5f:d3:4a:cb:66:be:6b:30:a9:84:f8:7f:19: e7:5b:0a:9d:54:c6:4e:bb:7b:61:21:84:72:80:5e: 15:80:c4:78:cc:8e:a1:4a:47:77:78:d0:d6:88:18: ec:b4:25:c7:b7:2f:a3:b1:35:d9:3b:95:7f:87:14: 36:ee:ae:4e:60:89:ac:a6:e8:53:ee:4f:8a:c2:4b: cb:39:82:c5:6a:80:1f:59:1b:27:2e:6c:66:55:8c: ec:df:80:8e:bd:34:03:83:e8:67:c6:e7:c7:31:a4: f3:04:9b:7c:50:d9:44:14:94:76:a0:6d:52:43:8c: ad:bc:c7:aa:4e:aa:ca:84:7b:c2:31:18:df:72:be: 5c:58:e8:64:b6:a8:50:93:59:2b:4b:59:f8:b9:89: dc:a9:b8:4c:2b:24:22:92:17:b6:e3:58:5d:5f:43: 99:66:7e:35:e4:45:ef:d3:7e:ad:f6:6a:31:cb:e6: 01:08:57:2a:77:38:84:0d:34:a2:f7:1c:ef:6d:c9: 62:45:8c:d8:2b:a9:97:60:66:14:6c:72:f7:6d:1d: f7:b9:7a:48:09:8b:c1:94:e9:c1:cd:0c:57:06:84: ba:63:a3:27:b9:b3:30:c9:1c:20:3c:44:37:bd:62: eb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:60:B7:F4:D1:CD:F2:89:16:7D:AD:0F:94:DD:F5:59:EE:50:D0:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d0aac5c-c7c2-3a59-9ab8-11c82d1ffdca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:7a:67:a8:1e:96:4a:e2:d1:6b:6f:ac:52:77:19:a2:56:c2: bd:9e:0a:87:9b:07:5c:5f:41:78:3e:4d:42:7c:27:e0:d5:34: 68:bb:c2:5b:78:8a:cc:01:d6:45:cb:fe:18:ea:a7:c0:ba:e8: 0a:af:e8:66:bf:b9:5a:7c:54:e1:f5:52:d6:5d:31:bc:0a:70: b9:99:3b:9b:4b:5d:d0:45:eb:ef:84:b0:ef:d1:2e:ac:9f:be: 15:57:e9:bd:76:3a:15:1c:fa:77:6a:70:8b:c6:d4:f9:ce:d8: bf:81:6f:8c:0c:34:af:0c:99:91:14:67:50:a4:7e:f5:4d:5e: 88:33:04:3f:4b:40:99:2d:5e:89:ac:8d:99:c9:12:0f:d1:6d: 1d:05:bd:60:a9:fc:a3:42:3f:8b:0c:40:20:7e:df:17:6a:fb: c4:19:a1:2b:b3:bc:93:50:4e:c0:cb:52:8b:8a:0d:8c:ab:f1: 0a:e1:78:4d:93:66:54:ef:09:c6:e7:7d:cf:3a:de:bc:68:ed: e4:fb:71:e9:a2:c9:7c:a0:9a:05:d9:ee:a5:23:e5:8e:ac:09: c9:03:95:4b:05:e7:02:ac:eb:05:29:b1:56:5b:e6:37:37:9c: 68:bd:1d:d0:c3:07:a9:ac:c4:90:34:d9:cf:22:db:51:c1:f8: a0:1e:60:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIKggiVpWP5TEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YjM5MTgzYmItNmQ5Ni00NGJmLTgzMjItNzk2YzkxNmM4ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgexMEGLtYQNZ2QU7cR5raV/TSstmvmswqYT4 fxnnWwqdVMZOu3thIYRygF4VgMR4zI6hSkd3eNDWiBjstCXHty+jsTXZO5V/hxQ2 7q5OYImspuhT7k+KwkvLOYLFaoAfWRsnLmxmVYzs34COvTQDg+hnxufHMaTzBJt8 UNlEFJR2oG1SQ4ytvMeqTqrKhHvCMRjfcr5cWOhktqhQk1krS1n4uYncqbhMKyQi khe241hdX0OZZn415EXv036t9moxy+YBCFcqdziEDTSi9xzvbcliRYzYK6mXYGYU bHL3bR33uXpICYvBlOnBzQxXBoS6Y6MnubMwyRwgPEQ3vWLrowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRgt/TRzfKJFn2tD5Td9VnuUNAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2QwYWFjNWMtYzdjMi0z YTU5LTlhYjgtMTFjODJkMWZmZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx6Z6gelkri0WtvrFJ3GaJWwr2eCoebB1xfQXg+TUJ8J+DVNGi7wlt4 iswB1kXL/hjqp8C66Aqv6Ga/uVp8VOH1UtZdMbwKcLmZO5tLXdBF6++EsO/RLqyf vhVX6b12OhUc+ndqcIvG1PnO2L+Bb4wMNK8MmZEUZ1CkfvVNXogzBD9LQJktXoms jZnJEg/RbR0FvWCp/KNCP4sMQCB+3xdq+8QZoSuzvJNQTsDLUouKDYyr8QrheE2T ZlTvCcbnfc863rxo7eT7cemiyXygmgXZ7qUj5Y6sCckDlUsF5wKs6wUpsVZb5jc3 nGi9HdDDB6msxJA02c8i21HB+KAeYLg= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:29 2026 by rpki-client