$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/499f2b42-a1a5-34e9-89bc-e271cbd2e61b.roa File: 499f2b42-a1a5-34e9-89bc-e271cbd2e61b.roa (raw, json) Hash identifier: nZsP8zvkI4qYNkbRCERB0MjS+2+arYTxf/Nt4s5rmLY= Subject key identifier: 42:DE:00:59:44:8F:22:41:E4:52:10:BD:69:1C:9F:16:69:8A:0F:DC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA2732B8A433171ACDB17AC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/499f2b42-a1a5-34e9-89bc-e271cbd2e61b.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 131.186.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:32:b8:a4:33:17:1a:cd:b1:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=86c73655-dd4a-4b5b-9588-159acb220faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4d:0a:8e:11:99:4b:6c:7c:20:26:d9:a9:a1: 41:6e:dc:61:6e:be:20:d9:a2:ce:65:60:8a:3e:13: 51:4c:05:d8:e7:c2:20:50:18:92:93:34:4b:0c:2f: fd:37:a5:dd:51:26:97:f2:73:1e:2a:01:0a:96:f2: 67:de:37:47:ae:9f:90:07:d9:f1:5e:c3:3f:42:a5: 9b:71:fc:e4:f8:7b:34:22:6b:aa:a6:b6:5c:9c:6b: b2:8e:34:65:ed:25:7b:0f:b9:b9:d4:cb:2f:04:a1: b6:ee:7e:27:b9:1f:f3:52:81:54:3d:7d:81:35:87: 70:9b:12:5c:a5:15:8f:99:ca:75:52:f7:ed:bb:43: 82:b3:60:aa:33:4a:77:03:74:4a:a7:bb:51:bd:59: 7c:60:72:7b:75:08:10:0c:7b:ab:3e:24:fe:f5:4e: 77:8f:09:5a:34:f6:ab:26:c3:bf:a1:15:ff:aa:f8: 9a:cd:4d:56:b5:83:98:e3:5c:3d:7e:d9:87:4f:b5: 5e:eb:7f:c2:0d:4c:e4:52:42:b1:2b:f0:d4:94:a7: 1d:94:e2:fd:5b:13:47:bd:68:1b:0e:b0:3e:fd:fe: e8:46:ed:56:f9:d2:8a:5c:bb:68:18:65:5b:bd:b9: b4:2f:c1:10:70:49:61:52:8f:ff:b3:1c:f9:ba:ef: 72:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DE:00:59:44:8F:22:41:E4:52:10:BD:69:1C:9F:16:69:8A:0F:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/499f2b42-a1a5-34e9-89bc-e271cbd2e61b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:33:6a:02:4f:10:e7:74:df:17:05:ca:47:3f:fd:8e:3f:b6: db:4d:7c:be:78:1c:cc:98:a4:8b:f0:6e:af:ba:f1:38:21:82: c6:ee:f0:a9:1f:db:87:ef:bf:5f:d9:9b:b5:0d:83:4b:4c:22: c0:6a:99:d1:4d:ad:d5:1f:48:2c:b5:41:69:54:4f:f0:e4:bf: fd:af:9f:37:bf:49:21:67:7f:74:03:07:c3:77:b3:0f:86:7c: d4:78:5a:6a:1e:97:da:fc:3a:d9:8f:ee:1d:18:e4:05:3f:13: 2e:34:bf:ad:1f:a6:d8:37:8d:60:24:27:cb:5c:7e:30:f4:2f: 9c:8d:e3:a1:eb:43:33:18:8f:ca:f4:06:32:18:df:c2:45:e3: 8d:a9:c4:4f:0a:5d:a9:1f:17:9c:38:a1:f6:53:fb:51:31:d8: bb:d7:c3:d3:8a:9f:7e:d0:39:77:61:4b:a3:37:36:87:b8:f4: 20:bf:09:cb:3c:d4:da:67:a8:5f:47:60:1d:f1:65:62:5e:9a: 1b:a9:ca:c7:29:1b:96:2d:fe:48:d6:18:23:6a:2c:a9:f3:91: 56:51:00:8b:cc:a4:64:33:45:59:cf:54:46:48:46:b9:ad:43: f8:ab:81:e3:8a:7b:13:20:e4:11:d7:b6:40:2f:21:4a:8e:0d: 88:0b:83:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJzK4pDMXGs2xesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ODZjNzM2NTUtZGQ0YS00YjViLTk1ODgtMTU5YWNiMjIwZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U0KjhGZS2x8ICbZqaFBbtxhbr4g2aLOZWCK PhNRTAXY58IgUBiSkzRLDC/9N6XdUSaX8nMeKgEKlvJn3jdHrp+QB9nxXsM/QqWb cfzk+Hs0ImuqprZcnGuyjjRl7SV7D7m51MsvBKG27n4nuR/zUoFUPX2BNYdwmxJc pRWPmcp1Uvftu0OCs2CqM0p3A3RKp7tRvVl8YHJ7dQgQDHurPiT+9U53jwlaNPar JsO/oRX/qviazU1WtYOY41w9ftmHT7Ve63/CDUzkUkKxK/DUlKcdlOL9WxNHvWgb DrA+/f7oRu1W+dKKXLtoGGVbvbm0L8EQcElhUo//sxz5uu9y6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELeAFlEjyJB5FIQvWkcnxZpig/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDk5ZjJiNDItYTFhNS0z NGU5LTg5YmMtZTI3MWNiZDJlNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEg7oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkzagJPEOd03xcFykc//Y4/tttNfL54HMyYpIvwbq+68Tghgsbu8Kkf 24fvv1/Zm7UNg0tMIsBqmdFNrdUfSCy1QWlUT/Dkv/2vnze/SSFnf3QDB8N3sw+G fNR4Wmoel9r8OtmP7h0Y5AU/Ey40v60fptg3jWAkJ8tcfjD0L5yN46HrQzMYj8r0 BjIY38JF442pxE8KXakfF5w4ofZT+1Ex2LvXw9OKn37QOXdhS6M3Noe49CC/Ccs8 1NpnqF9HYB3xZWJemhupyscpG5Yt/kjWGCNqLKnzkVZRAIvMpGQzRVnPVEZIRrmt Q/irgeOKexMg5BHXtkAvIUqODYgLg68= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:02 2026 by rpki-client