$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5571ddde-51ce-3e99-b6a4-31f9b3c65ea2.roa File: 5571ddde-51ce-3e99-b6a4-31f9b3c65ea2.roa (raw, json) Hash identifier: fnenyU/59Z5/jaF8OJgGSxOjAtdL/id/w5XpaqS3lps= Subject key identifier: 8F:41:AF:AD:59:B3:CA:43:BE:6A:01:A4:FF:B4:AE:AE:68:0A:DC:4F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CB81C96C1E1333A01E6D86700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5571ddde-51ce-3e99-b6a4-31f9b3c65ea2.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 132.145.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:96:c1:e1:33:3a:01:e6:d8:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=a615e981-954a-4626-a597-70f79775d7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e3:1c:01:9d:2c:f4:0f:fc:af:17:fa:2d:80: 13:d0:4c:db:5c:aa:d3:83:94:3a:3f:d9:5b:2d:6b: a5:9f:f8:b5:c3:6f:bc:66:33:87:9f:c6:ce:ef:86: 2c:69:76:7a:17:c7:62:2f:9f:79:43:3e:38:0d:64: 8a:82:77:bf:bd:b6:cc:96:15:fb:d0:ef:ee:59:71: 61:25:f1:be:f8:33:44:31:e1:5a:4e:31:88:c1:9d: ba:5d:f7:57:99:45:2b:52:fd:9f:18:ae:2b:4d:23: ef:ea:25:ca:ff:74:c8:2d:d1:36:37:22:da:fc:3a: 09:c5:e0:ab:31:75:78:4a:00:02:25:f9:d9:66:a0: 3d:02:26:cf:ba:29:21:19:ef:33:60:88:1a:30:70: 61:43:92:13:b9:21:d6:ee:b7:2d:29:3b:11:17:b7: ab:01:d3:99:56:3b:a0:03:ad:73:6f:64:7d:3d:28: 66:2e:f2:25:9e:d3:39:27:80:b7:a6:ca:dc:91:41: e4:db:d7:46:d5:bf:cd:ab:7b:5f:3d:69:14:fe:b5: c0:a2:84:96:26:ea:54:ab:38:cf:79:31:c8:32:39: 16:6a:ee:22:52:68:f3:e8:4e:20:a1:2e:b5:08:8c: a1:b5:89:43:69:44:5b:99:a5:e2:55:a1:9f:bd:da: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:41:AF:AD:59:B3:CA:43:BE:6A:01:A4:FF:B4:AE:AE:68:0A:DC:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5571ddde-51ce-3e99-b6a4-31f9b3c65ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d2:c2:8b:9e:b3:1a:f4:a2:e6:e1:f1:cf:7c:05:9b:24:89: 67:05:c4:ed:37:28:8f:91:68:6d:5b:64:25:65:9c:76:37:c7: 4b:68:90:97:a0:66:fc:69:f8:89:48:45:da:63:d6:16:d5:85: f6:1f:0d:c5:bd:04:91:7c:96:dc:bc:8a:bb:e7:ba:be:e3:6f: 3c:11:4f:cf:d0:cd:77:49:d3:e7:0e:9b:c9:b5:76:10:8d:8c: 5d:c3:42:07:eb:1f:c8:ca:70:ad:95:2f:e7:82:0b:af:0d:96: 34:f7:d5:2f:6d:34:9d:ed:56:84:ad:38:9a:31:46:9a:5e:5c: fc:7b:c9:b3:3b:eb:16:a6:ee:11:22:93:92:cc:90:b0:62:a3: af:ab:98:a3:20:4a:e2:10:c1:8c:f1:d0:f4:d9:12:6a:1f:00: 23:f1:67:9e:a4:ec:ea:7d:c8:24:0f:87:ad:15:04:9c:7c:80: 27:91:52:05:44:4b:78:78:b2:7f:04:5b:33:69:fd:51:65:3e: 80:22:26:99:7c:46:89:dc:1e:16:50:9b:38:99:68:70:21:92: 8d:6c:cb:96:33:10:46:1b:d6:6a:fa:d4:bc:da:4f:83:13:1a: b5:06:ab:5c:f5:00:66:46:d8:cb:45:ad:68:15:06:46:5e:e6: cc:ac:8e:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HJbB4TM6AebYZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk YTYxNWU5ODEtOTU0YS00NjI2LWE1OTctNzBmNzk3NzVkN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuMcAZ0s9A/8rxf6LYAT0EzbXKrTg5Q6P9lb LWuln/i1w2+8ZjOHn8bO74YsaXZ6F8diL595Qz44DWSKgne/vbbMlhX70O/uWXFh JfG++DNEMeFaTjGIwZ26XfdXmUUrUv2fGK4rTSPv6iXK/3TILdE2NyLa/DoJxeCr MXV4SgACJfnZZqA9AibPuikhGe8zYIgaMHBhQ5ITuSHW7rctKTsRF7erAdOZVjug A61zb2R9PShmLvIlntM5J4C3psrckUHk29dG1b/Nq3tfPWkU/rXAooSWJupUqzjP eTHIMjkWau4iUmjz6E4goS61CIyhtYlDaURbmaXiVaGfvdodTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9Br61Zs8pDvmoBpP+0rq5oCtxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTU3MWRkZGUtNTFjZS0z ZTk5LWI2YTQtMzFmOWIzYzY1ZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDSwouesxr0oubh8c98BZskiWcFxO03KI+RaG1bZCVlnHY3x0tokJeg Zvxp+IlIRdpj1hbVhfYfDcW9BJF8lty8irvnur7jbzwRT8/QzXdJ0+cOm8m1dhCN jF3DQgfrH8jKcK2VL+eCC68NljT31S9tNJ3tVoStOJoxRppeXPx7ybM76xam7hEi k5LMkLBio6+rmKMgSuIQwYzx0PTZEmofACPxZ56k7Op9yCQPh60VBJx8gCeRUgVE S3h4sn8EWzNp/VFlPoAiJpl8RoncHhZQmziZaHAhko1sy5YzEEYb1mr61LzaT4MT GrUGq1z1AGZG2MtFrWgVBkZe5sysjvI= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:15 2026 by rpki-client