$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa File: 7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa (raw, json) Hash identifier: LYPl4auJlN9wp/fw/S9pcYLAAg05faqCDrPqSiHedsE= Subject key identifier: 18:B6:76:3C:E1:84:D9:E7:D2:51:66:14:03:BE:DE:30:FD:14:92:48 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1C8A85F45F4DD8289D400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 134.185.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c8:a8:5f:45:f4:dd:82:89:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=59f376d8-c968-4ee8-99bd-1b75d8dadfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:1e:ee:bb:39:1b:3f:c8:ca:9e:81:55:1a: b6:ca:fa:d0:ab:ee:4b:b3:98:ab:1c:ec:3d:68:10: e1:47:e7:53:bd:c4:31:48:e4:a6:01:48:04:5c:9c: 31:c6:88:4e:97:66:d4:cf:90:a3:e8:fb:e5:e0:62: 3c:e1:dd:a8:12:4d:59:d0:58:47:57:79:a1:8b:3f: 2a:ab:30:a3:17:a1:77:71:01:5f:ed:1b:35:ae:3c: 3e:00:29:11:36:30:6b:a2:27:3c:5e:36:12:47:08: 26:e0:33:2b:75:7f:e4:ac:e9:ea:d6:b8:71:7a:7f: dd:07:18:0a:22:06:d4:41:1d:9b:a2:f2:84:9e:45: c2:64:08:94:55:69:48:fd:23:b5:2c:2b:2c:22:29: a7:ba:6f:19:33:55:0b:5b:b9:75:0d:7c:38:bf:bf: 36:82:63:53:80:65:d0:cf:25:8f:b6:82:94:f8:9d: b0:27:23:0b:e1:da:07:42:c7:cc:04:cc:9d:31:03: c2:3f:74:16:ea:9d:b9:39:00:7d:e5:db:9f:8e:f8: 2c:5a:36:13:c9:62:f1:ca:b5:0a:41:9f:9f:0d:93: 3e:23:dc:76:08:b4:1e:91:cb:1b:a8:2d:cf:20:00: 62:80:1a:d0:a0:ad:92:66:f9:54:09:e0:7f:c4:aa: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B6:76:3C:E1:84:D9:E7:D2:51:66:14:03:BE:DE:30:FD:14:92:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e4:e1:df:a5:f1:2c:f1:84:1f:99:8d:f9:53:7c:1c:73:af: f1:ae:4d:e6:0a:b7:3d:2e:28:60:54:1f:70:e6:7f:e0:e9:89: 0d:37:63:3b:1a:37:81:31:1c:7a:86:06:bb:4e:7a:b2:ea:4c: 01:9c:4f:38:0d:7d:62:10:38:b7:b1:17:97:d8:9d:1c:39:8b: cf:99:62:d4:f3:b3:e0:d2:f1:a3:55:d0:cc:f2:f7:f9:8f:c7: 6e:cd:72:49:4c:d2:a9:ac:36:be:00:4d:7d:db:4e:7b:2f:f6: ab:50:4f:62:bb:50:95:8c:f4:e2:05:07:a9:2c:04:84:56:49: 11:40:08:be:b8:9d:d5:8c:fa:c8:e8:89:dc:3f:e9:02:17:de: 75:9a:37:45:d0:06:a6:b6:09:eb:7b:2a:71:96:d6:da:90:e3: cd:72:66:a6:c4:be:db:d0:7e:e5:23:0e:f8:f6:8c:26:48:4e: 17:8a:ae:19:b7:05:ea:8b:45:cf:70:e8:90:c9:25:f7:9c:ab: e7:14:fa:f2:aa:99:99:2d:1d:39:80:45:57:db:d3:eb:5c:4b: d6:10:49:87:67:d8:d7:9d:e2:96:4f:0d:d8:51:36:8d:d1:5b: d1:b6:db:be:e6:71:f0:d8:92:95:a2:df:f4:77:9e:d6:a3:d1: b2:27:1a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cioX0X03YKJ1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk NTlmMzc2ZDgtYzk2OC00ZWU4LTk5YmQtMWI3NWQ4ZGFkZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDke7rs5Gz/Iyp6BVRq2yvrQq+5Ls5irHOw9 aBDhR+dTvcQxSOSmAUgEXJwxxohOl2bUz5Cj6Pvl4GI84d2oEk1Z0FhHV3mhiz8q qzCjF6F3cQFf7Rs1rjw+ACkRNjBroic8XjYSRwgm4DMrdX/krOnq1rhxen/dBxgK IgbUQR2bovKEnkXCZAiUVWlI/SO1LCssIimnum8ZM1ULW7l1DXw4v782gmNTgGXQ zyWPtoKU+J2wJyML4doHQsfMBMydMQPCP3QW6p25OQB95dufjvgsWjYTyWLxyrUK QZ+fDZM+I9x2CLQekcsbqC3PIABigBrQoK2SZvlUCeB/xKrARwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBi2djzhhNnn0lFmFAO+3jD9FJJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2M5YmMwYTgtMmNiZi0z NjkzLTgxMWEtNjc4OTZkYmQ4ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhrlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTk4d+l8SzxhB+ZjflTfBxzr/GuTeYKtz0uKGBUH3Dmf+DpiQ03Yzsa N4ExHHqGBrtOerLqTAGcTzgNfWIQOLexF5fYnRw5i8+ZYtTzs+DS8aNV0Mzy9/mP x27NcklM0qmsNr4ATX3bTnsv9qtQT2K7UJWM9OIFB6ksBIRWSRFACL64ndWM+sjo idw/6QIX3nWaN0XQBqa2Cet7KnGW1tqQ481yZqbEvtvQfuUjDvj2jCZITheKrhm3 BeqLRc9w6JDJJfecq+cU+vKqmZktHTmARVfb0+tcS9YQSYdn2Ned4pZPDdhRNo3R W9G2277mcfDYkpWi3/R3ntaj0bInGhM= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:06 2026 by rpki-client