$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/825bd0b3-8b81-36b6-a918-a3192e7058dc.roa File: 825bd0b3-8b81-36b6-a918-a3192e7058dc.roa (raw, json) Hash identifier: S5sGcRAx5Yzku1tcm1UjECt5mGMdMSM8YmbWrLYNz6s= Subject key identifier: 7B:46:F3:42:CE:B8:E7:61:5F:50:7C:26:85:13:8B:7E:D3:07:C0:E5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1D91BF8E3C09F91BE3600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/825bd0b3-8b81-36b6-a918-a3192e7058dc.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 134.70.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:d9:1b:f8:e3:c0:9f:91:be:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=724e5cda-5ba7-4249-88d1-61e7b14babdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:de:e4:34:14:82:ad:9a:08:71:e5:09:51: c5:43:24:4b:6e:40:8a:9a:00:9f:d8:de:cd:a1:81: 98:93:e0:9d:d8:2f:c2:5d:c3:56:ad:fc:a1:bd:ad: c5:35:f4:0d:c7:79:d6:b4:a2:01:ea:2f:e2:85:9c: 35:72:ab:ab:e4:a2:9a:72:71:a4:b9:ba:13:17:ca: b2:68:2e:a3:f4:74:6d:cb:97:fa:3b:86:92:2e:f8: 13:4f:33:8f:db:83:1d:a5:65:f6:12:4d:76:e7:cf: 86:fa:a8:ec:48:70:67:49:c5:78:e2:37:c5:1a:b9: a9:52:f1:81:17:e4:89:c7:97:e8:3f:27:cb:b2:c9: 87:4f:d5:33:39:e5:68:48:39:b4:58:a7:f8:6e:bd: 2f:11:a2:f6:00:5e:e0:4b:b0:c6:6e:1e:d4:96:39: 25:a1:09:a0:cf:f6:d4:76:5f:5b:cc:b1:b7:02:08: 33:ff:e3:8d:84:49:c7:2a:a0:e4:89:c8:60:3b:1b: c8:59:38:32:79:ad:28:23:fd:d8:de:b6:90:39:48: 75:ba:d7:dd:9d:65:82:0d:18:ec:d2:c1:c8:10:13: 65:ec:42:25:70:9c:5b:09:23:ab:7b:4f:ea:cf:bd: a2:0f:1d:28:56:4e:b1:3e:89:4d:52:65:17:3f:66: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:46:F3:42:CE:B8:E7:61:5F:50:7C:26:85:13:8B:7E:D3:07:C0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/825bd0b3-8b81-36b6-a918-a3192e7058dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:41:69:44:29:49:9d:99:cd:f3:83:a9:1c:fa:f8:47:44:f1: 25:c0:be:42:c2:00:c5:94:8e:6c:83:b8:5c:e8:b4:d0:ee:be: cd:71:10:b6:6c:cd:c4:93:b4:94:1a:f7:95:2e:fb:ca:86:ed: bd:54:2d:93:93:30:0b:3d:7f:2d:58:b1:c5:fc:df:b0:df:9e: dc:53:03:46:df:17:e2:27:7f:28:b1:02:2f:5c:db:f4:d8:be: bd:a9:df:5b:67:2f:ff:a7:05:cc:27:df:31:ef:29:0d:ac:e3: 56:f5:de:79:24:c7:e8:3a:87:4d:f2:2d:7f:be:f7:b1:53:30: 29:15:88:53:45:d4:e8:27:89:9a:bb:ba:b3:da:de:ce:5c:f0: 77:1e:e7:6a:73:41:0e:49:3e:1e:aa:80:a5:24:ea:4a:4e:f9: 15:ab:bd:67:88:66:95:2e:bc:9b:25:ec:8b:fb:35:93:b0:41: c0:a0:23:6a:d0:5e:e8:21:3e:2e:62:0a:ad:c3:4c:1f:5e:a6: e7:d7:26:45:12:8f:3f:de:95:6d:79:d3:1a:11:ea:48:83:3f: 41:62:5c:20:63:e9:7a:56:b8:bc:01:62:ae:e5:28:e4:54:59: c9:a3:b1:7e:3c:1a:5f:ee:e4:42:ca:99:86:47:34:96:9f:cc: 5b:e8:d5:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8dkb+OPAn5G+NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk NzI0ZTVjZGEtNWJhNy00MjQ5LTg4ZDEtNjFlN2IxNGJhYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Te5DQUgq2aCHHlCVHFQyRLbkCKmgCf2N7N oYGYk+Cd2C/CXcNWrfyhva3FNfQNx3nWtKIB6i/ihZw1cqur5KKacnGkuboTF8qy aC6j9HRty5f6O4aSLvgTTzOP24MdpWX2Ek1258+G+qjsSHBnScV44jfFGrmpUvGB F+SJx5foPyfLssmHT9UzOeVoSDm0WKf4br0vEaL2AF7gS7DGbh7UljkloQmgz/bU dl9bzLG3Aggz/+ONhEnHKqDkichgOxvIWTgyea0oI/3Y3raQOUh1utfdnWWCDRjs 0sHIEBNl7EIlcJxbCSOre0/qz72iDx0oVk6xPolNUmUXP2bufQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtG80LOuOdhX1B8JoUTi37TB8DlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODI1YmQwYjMtOGI4MS0z NmI2LWE5MTgtYTMxOTJlNzA1OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1BaUQpSZ2ZzfODqRz6+EdE8SXAvkLCAMWUjmyDuFzotNDuvs1xELZs zcSTtJQa95Uu+8qG7b1ULZOTMAs9fy1YscX837DfntxTA0bfF+InfyixAi9c2/TY vr2p31tnL/+nBcwn3zHvKQ2s41b13nkkx+g6h03yLX++97FTMCkViFNF1OgniZq7 urPa3s5c8Hce52pzQQ5JPh6qgKUk6kpO+RWrvWeIZpUuvJsl7Iv7NZOwQcCgI2rQ XughPi5iCq3DTB9epufXJkUSjz/elW150xoR6kiDP0FiXCBj6XpWuLwBYq7lKORU WcmjsX48Gl/u5ELKmYZHNJafzFvo1W0= -----END CERTIFICATE-----Generated at Thu Feb 26 04:59:41 2026 by rpki-client