$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7b3f8cf1-9f9f-3bcb-a2ba-111deef17f7b.roa File: 7b3f8cf1-9f9f-3bcb-a2ba-111deef17f7b.roa (raw, json) Hash identifier: fIy8WcBrpoNfAyhmje2YFH8Kc11o1Hm8PTOa1w/WkvM= Subject key identifier: BE:AD:66:F1:E0:D8:A4:06:93:3A:1E:91:26:3C:4B:76:F6:96:58:08 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1BA71C88D11392405FC40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7b3f8cf1-9f9f-3bcb-a2ba-111deef17f7b.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 64.110.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:ba:71:c8:8d:11:39:24:05:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=cd0d3afe-0b31-4e35-88ae-ee0be8093f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2f:6a:9a:e2:6b:d0:43:ff:02:3e:f0:75:b2: 8d:0b:5e:18:df:8f:ce:57:75:c1:31:03:e3:e5:5c: 02:1f:99:1e:3e:88:e1:d5:da:21:43:64:97:0e:3d: d2:ec:b8:d5:d0:a9:4b:39:8f:e0:40:db:58:78:0d: 65:2d:63:45:16:c5:d6:81:ba:73:91:67:d4:57:0a: 66:41:a9:4d:bd:d2:34:f2:d4:ce:2b:0e:43:47:85: bb:68:22:98:bc:b1:9f:33:58:ed:34:74:44:25:04: 70:d3:a9:e6:96:05:70:c3:4e:24:72:64:f6:ad:99: 3a:40:2e:62:24:ab:89:ba:c6:00:29:6e:6c:f6:26: 35:d6:df:fc:32:f2:02:0c:c9:a0:58:0a:22:ed:6c: 39:54:24:85:97:5f:9b:99:43:9e:72:36:79:2b:bd: 70:12:56:36:b4:8f:79:3f:8a:2b:bb:bd:98:b3:5e: f7:98:e0:80:3f:cc:b1:26:ad:e8:d7:d1:af:7c:41: a1:17:66:61:4f:b8:9a:4d:fb:7d:b0:3e:f1:00:21: 78:e0:b2:bf:4b:e2:a7:0a:5a:85:36:c0:44:42:83: 77:19:18:25:fe:29:b6:9d:18:62:5a:10:29:51:7d: 34:2b:3d:3d:e5:69:a8:d9:a6:5c:50:18:8c:79:23: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AD:66:F1:E0:D8:A4:06:93:3A:1E:91:26:3C:4B:76:F6:96:58:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7b3f8cf1-9f9f-3bcb-a2ba-111deef17f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.110.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:be:40:fe:4b:8e:56:25:f8:7a:8d:8e:18:f3:91:ad:6d:e9: 37:5e:6a:e0:9c:18:34:f2:ee:79:9a:26:30:d4:a8:54:3f:8f: 43:ac:17:9d:cb:45:14:b8:b7:9d:f9:92:37:30:94:77:ad:c9: 34:b5:a0:95:80:78:53:31:95:42:b6:07:d9:ad:0d:b7:42:44: 2e:f1:ca:d0:da:cb:7a:4d:1c:82:48:d1:10:96:84:20:54:55: d1:0a:29:dd:0b:31:ab:16:75:96:32:e4:09:fd:66:74:e2:20: c3:1f:c3:a0:82:89:94:4c:d1:d8:9c:8f:47:9f:a1:8b:99:8c: eb:ae:7f:0b:ae:16:44:c5:3f:22:ed:66:cc:46:9f:61:7f:8a: 89:dd:5a:88:0a:04:a0:05:21:9f:dc:07:b0:57:35:b7:1e:a9: 7d:03:a1:0a:81:cd:3c:2a:a8:b9:91:ed:0f:d2:af:65:e4:34: 55:b5:66:ee:90:fd:77:db:73:8d:0e:84:77:f6:a3:0a:e1:5f: 74:fd:e2:c6:88:8d:a9:7a:89:33:8c:9d:cb:b5:91:35:e1:03: 39:3d:c8:77:e5:d6:4b:da:7e:d7:9e:91:b4:8d:31:ad:ef:0e: a2:7f:76:55:11:12:25:bd:98:26:2f:d4:a5:c7:a4:1f:d2:22: 56:f7:f3:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8bpxyI0ROSQF/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk Y2QwZDNhZmUtMGIzMS00ZTM1LTg4YWUtZWUwYmU4MDkzZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni9qmuJr0EP/Aj7wdbKNC14Y34/OV3XBMQPj 5VwCH5kePojh1dohQ2SXDj3S7LjV0KlLOY/gQNtYeA1lLWNFFsXWgbpzkWfUVwpm QalNvdI08tTOKw5DR4W7aCKYvLGfM1jtNHREJQRw06nmlgVww04kcmT2rZk6QC5i JKuJusYAKW5s9iY11t/8MvICDMmgWAoi7Ww5VCSFl1+bmUOecjZ5K71wElY2tI95 P4oru72Ys173mOCAP8yxJq3o19GvfEGhF2ZhT7iaTft9sD7xACF44LK/S+KnClqF NsBEQoN3GRgl/im2nRhiWhApUX00Kz095Wmo2aZcUBiMeSOF4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6tZvHg2KQGkzoekSY8S3b2llgIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2IzZjhjZjEtOWY5Zi0z YmNiLWEyYmEtMTExZGVlZjE3ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQG54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6+QP5LjlYl+HqNjhjzka1t6TdeauCcGDTy7nmaJjDUqFQ/j0OsF53L RRS4t535kjcwlHetyTS1oJWAeFMxlUK2B9mtDbdCRC7xytDay3pNHIJI0RCWhCBU VdEKKd0LMasWdZYy5An9ZnTiIMMfw6CCiZRM0dicj0efoYuZjOuufwuuFkTFPyLt ZsxGn2F/iondWogKBKAFIZ/cB7BXNbceqX0DoQqBzTwqqLmR7Q/Sr2XkNFW1Zu6Q /Xfbc40OhHf2owrhX3T94saIjal6iTOMncu1kTXhAzk9yHfl1kvafteekbSNMa3v DqJ/dlUREiW9mCYv1KXHpB/SIlb38zk= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:06 2026 by rpki-client