$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d9407c2-3276-38e1-abe1-019151e9d82e.roa File: 3d9407c2-3276-38e1-abe1-019151e9d82e.roa (raw, json) Hash identifier: RZjjcqv98CbZ3jWNeMHHHmVCIY6kAIb6XxYEhf9ywMc= Subject key identifier: 6B:D6:90:90:7D:05:AD:5A:67:4D:6D:3C:39:8F:F8:7C:49:1E:4B:3F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CB81C983EF1E1FCF58E0C3F40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d9407c2-3276-38e1-abe1-019151e9d82e.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 134.70.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:98:3e:f1:e1:fc:f5:8e:0c:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=8123e41e-d9df-4abb-8e08-8e36e568ee8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:b9:7b:50:28:c2:bf:e6:39:75:49:fe:cf: fd:b0:5e:a8:d1:f1:3b:ca:35:f3:16:ce:20:97:a8: ca:3f:4e:a4:50:b6:37:2f:38:d0:48:4e:4b:05:e1: a4:ad:45:ce:0a:15:94:29:70:ce:50:e6:e3:97:12: 93:16:4c:22:51:5a:96:c6:54:9d:9c:41:05:f4:dd: e5:9b:26:aa:51:dd:3f:cb:e0:ef:a4:65:80:a0:63: b3:f4:3a:e6:af:bc:eb:49:cc:00:d6:f7:ff:86:23: 97:95:74:0f:0e:31:b7:8e:be:dd:05:ed:9f:3d:55: 0c:94:58:e5:74:40:ae:fc:2d:9c:de:ff:6e:69:d9: 5e:0e:8b:6a:37:80:6f:91:1a:00:93:e7:0d:50:dd: 3a:15:ad:4e:be:58:d1:2e:86:ee:f1:4b:72:56:1d: 31:17:d2:03:e3:fa:c6:33:c6:d4:2e:95:85:69:a5: a0:54:33:79:3b:11:ab:3a:14:ca:8f:2f:fb:02:ce: 86:cf:2c:3a:c2:7e:29:0d:28:6c:50:c3:f3:76:e0: 34:94:c7:db:41:62:3c:14:72:c7:a4:66:62:c7:65: a2:1f:80:2c:36:47:b5:a7:25:08:7b:a2:f0:5b:3e: a9:9a:85:c7:d7:2a:29:94:e8:87:6d:12:e5:46:8b: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D6:90:90:7D:05:AD:5A:67:4D:6D:3C:39:8F:F8:7C:49:1E:4B:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d9407c2-3276-38e1-abe1-019151e9d82e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:a1:b3:1b:89:67:e9:87:56:a0:a1:eb:c9:4e:38:25:95:af: 31:19:79:99:de:87:e5:79:6d:82:9d:90:07:0d:24:bf:34:87: 2b:33:b3:d8:74:92:7b:b3:d3:d5:f0:d8:7e:ee:62:78:27:21: 62:83:71:d6:fd:e4:2e:c1:ca:fd:e2:06:c9:2e:62:86:65:26: f7:16:99:98:36:1b:f6:84:a8:14:d4:2a:e6:1e:e2:55:68:5a: b3:48:f0:6b:5a:0e:f2:7c:39:f3:f7:ea:00:00:9e:32:71:1d: bb:9b:72:de:e0:2a:ca:6c:37:26:28:15:6c:4a:be:0f:34:b3: bb:91:d1:5e:7a:73:72:6c:0f:00:05:72:bb:fb:9f:c4:f9:3b: f7:2b:4e:5f:22:6d:2a:ca:6a:29:bd:be:c0:17:3d:c5:4e:c2: cb:59:bc:91:0e:30:4b:9e:e2:8f:48:32:90:a3:f1:a2:de:9d: 4f:fd:fe:dc:c3:fa:ff:fe:c5:2d:d7:e0:81:96:c9:8c:aa:b4: 94:fd:ce:82:4c:04:6e:8c:41:08:30:ee:fe:67:cf:2c:13:ee: a4:20:35:a4:fb:80:a6:df:4b:25:c7:8d:a1:89:de:40:42:1d: 01:69:ea:06:ca:4f:32:4c:0e:6e:fc:22:02:7a:71:55:11:ae: 3d:60:a3:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HJg+8eH89Y4MP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk ODEyM2U0MWUtZDlkZi00YWJiLThlMDgtOGUzNmU1NjhlZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDq5e1Aowr/mOXVJ/s/9sF6o0fE7yjXzFs4g l6jKP06kULY3LzjQSE5LBeGkrUXOChWUKXDOUObjlxKTFkwiUVqWxlSdnEEF9N3l myaqUd0/y+DvpGWAoGOz9Drmr7zrScwA1vf/hiOXlXQPDjG3jr7dBe2fPVUMlFjl dECu/C2c3v9uadleDotqN4BvkRoAk+cNUN06Fa1OvljRLobu8UtyVh0xF9ID4/rG M8bULpWFaaWgVDN5OxGrOhTKjy/7As6Gzyw6wn4pDShsUMPzduA0lMfbQWI8FHLH pGZix2WiH4AsNke1pyUIe6LwWz6pmoXH1yoplOiHbRLlRosLUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvWkJB9Ba1aZ01tPDmP+HxJHks/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2Q5NDA3YzItMzI3Ni0z OGUxLWFiZTEtMDE5MTUxZTlkODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyhsxuJZ+mHVqCh68lOOCWVrzEZeZneh+V5bYKdkAcNJL80hyszs9h0 knuz09Xw2H7uYngnIWKDcdb95C7Byv3iBskuYoZlJvcWmZg2G/aEqBTUKuYe4lVo WrNI8GtaDvJ8OfP36gAAnjJxHbubct7gKspsNyYoFWxKvg80s7uR0V56c3JsDwAF crv7n8T5O/crTl8ibSrKaim9vsAXPcVOwstZvJEOMEue4o9IMpCj8aLenU/9/tzD +v/+xS3X4IGWyYyqtJT9zoJMBG6MQQgw7v5nzywT7qQgNaT7gKbfSyXHjaGJ3kBC HQFp6gbKTzJMDm78IgJ6cVURrj1goy8= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:04 2026 by rpki-client