$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/589cb6b5-5ca7-34fb-86fd-2880c365db8c.roa File: 589cb6b5-5ca7-34fb-86fd-2880c365db8c.roa (raw, json) Hash identifier: +r0P4dvA9YEBNxVkgU4e2W0Dj4lCrzskdwdU089X3/4= Subject key identifier: 99:CC:B3:E5:34:CB:B4:D1:53:AC:B0:61:F9:04:83:64:0E:9B:CC:2D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CB981F8CB1CFA0A8B1B9F3880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/589cb6b5-5ca7-34fb-86fd-2880c365db8c.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 31898 IP address blocks: 168.129.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:f8:cb:1c:fa:0a:8b:1b:9f:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=5b4159d0-5669-4bcd-a928-b2b9ef8bba04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:de:af:7c:b9:50:7d:ed:f1:00:71:7e:4a: 6f:ac:1e:cd:37:76:c4:7f:57:54:2c:e5:6e:c5:11: f4:e6:44:a3:52:54:42:27:10:97:74:9d:ca:75:54: 24:f3:01:a6:4b:57:00:8d:6c:0a:d1:cc:3d:fa:c7: ee:bf:69:21:27:1f:4f:80:98:5e:e0:a3:f3:55:1d: 6c:c3:7b:9b:98:bc:5a:4e:0e:1f:5f:37:0f:40:dc: f3:52:eb:13:db:2c:ed:af:e1:3a:8e:6f:2f:ce:38: bd:7f:d3:a9:62:6e:49:7b:57:bb:98:f8:9f:0e:01: 70:94:5b:e0:d9:0b:b2:d6:8b:96:d9:a1:81:37:e1: 44:44:25:f3:56:f5:89:77:87:89:96:98:36:e1:cd: 73:58:3f:c9:8b:ea:28:1c:60:80:5f:4a:83:03:04: 7a:8e:b2:78:af:8c:04:d8:56:8b:09:df:fb:73:b2: 24:37:4d:5b:0d:87:be:ae:08:4c:c2:b1:68:b3:5d: f6:55:47:2f:7d:c5:a8:2e:5a:6e:ba:ec:ea:e0:50: 63:0c:80:2e:f0:ee:67:f3:fd:a1:d5:dd:18:c5:6f: 94:e1:71:b4:96:50:4a:b2:e7:4a:c5:c4:6b:c5:a5: 4f:96:9f:25:9d:ca:ed:e2:c2:bf:b3:76:21:e8:e6: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CC:B3:E5:34:CB:B4:D1:53:AC:B0:61:F9:04:83:64:0E:9B:CC:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/589cb6b5-5ca7-34fb-86fd-2880c365db8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:05:9c:69:27:95:ff:e2:6d:9a:4d:c1:1e:83:19:dc:09:4f: 92:f2:af:6a:11:45:5c:be:b0:9b:a6:97:86:b5:95:eb:70:0c: 42:85:b1:d6:48:1d:41:8e:0d:10:02:12:52:3d:7d:4c:5f:2a: 2a:1a:c8:29:00:68:2a:c4:7d:be:e1:86:dc:5a:8b:17:1f:01: ba:38:d1:49:e4:01:aa:4a:fc:e7:7c:fe:4f:1b:77:72:cb:68: de:1d:f6:b2:e1:fb:b2:9a:7b:92:dd:f1:f4:94:0c:12:53:df: b9:94:fb:a2:59:97:9a:db:f0:8b:87:9a:f4:84:cd:5a:ef:89: f2:29:7d:ff:3a:b3:ce:d3:a8:88:19:0f:01:26:ba:fd:2e:ee: c2:ff:cb:3e:0d:b2:40:4f:81:57:27:ed:ea:9d:58:00:61:14: ed:fc:d9:fd:fa:55:60:44:b5:8a:97:3e:c5:ec:03:1d:9d:5f: 37:12:73:12:97:22:cf:d3:de:0b:e5:3e:f7:9e:c4:12:5c:2d: f5:54:0b:c3:22:f0:92:62:b9:41:d5:5e:30:af:9d:40:e2:20: 4d:bc:dc:51:97:69:c3:54:7f:be:95:3f:46:1e:a9:cc:e7:55: c1:46:fe:9b:b3:8d:ce:1d:33:96:03:c9:e0:f1:7d:79:45:60: 81:4d:1f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gfjLHPoKixufOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk NWI0MTU5ZDAtNTY2OS00YmNkLWE5MjgtYjJiOWVmOGJiYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1Per3y5UH3t8QBxfkpvrB7NN3bEf1dULOVu xRH05kSjUlRCJxCXdJ3KdVQk8wGmS1cAjWwK0cw9+sfuv2khJx9PgJhe4KPzVR1s w3ubmLxaTg4fXzcPQNzzUusT2yztr+E6jm8vzji9f9OpYm5Je1e7mPifDgFwlFvg 2Quy1ouW2aGBN+FERCXzVvWJd4eJlpg24c1zWD/Ji+ooHGCAX0qDAwR6jrJ4r4wE 2FaLCd/7c7IkN01bDYe+rghMwrFos132VUcvfcWoLlpuuuzq4FBjDIAu8O5n8/2h 1d0YxW+U4XG0llBKsudKxcRrxaVPlp8lncrt4sK/s3Yh6ObkXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnMs+U0y7TRU6ywYfkEg2QOm8wtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTg5Y2I2YjUtNWNhNy0z NGZiLTg2ZmQtMjg4MGMzNjVkYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqIGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcFnGknlf/ibZpNwR6DGdwJT5Lyr2oRRVy+sJuml4a1letwDEKFsdZI HUGODRACElI9fUxfKioayCkAaCrEfb7hhtxaixcfAbo40UnkAapK/Od8/k8bd3LL aN4d9rLh+7Kae5Ld8fSUDBJT37mU+6JZl5rb8IuHmvSEzVrvifIpff86s87TqIgZ DwEmuv0u7sL/yz4NskBPgVcn7eqdWABhFO382f36VWBEtYqXPsXsAx2dXzcScxKX Is/T3gvlPveexBJcLfVUC8Mi8JJiuUHVXjCvnUDiIE283FGXacNUf76VP0Yeqczn VcFG/puzjc4dM5YDyeDxfXlFYIFNH9E= -----END CERTIFICATE-----Generated at Thu Feb 26 05:00:08 2026 by rpki-client