$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84d1bd3e-a08e-3986-943b-97edb816f9eb.roa File: 84d1bd3e-a08e-3986-943b-97edb816f9eb.roa (raw, json) Hash identifier: XzjfUYChn2YcGkLNoSrGjMRdcczdI9vId0L4I9ilMZI= Subject key identifier: 87:D4:0D:B7:A2:CB:DF:B2:75:27:FC:CC:D1:70:69:11:34:2A:46:E5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5EBA21DF7AE732CF861A00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84d1bd3e-a08e-3986-943b-97edb816f9eb.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 134.70.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:ba:21:df:7a:e7:32:cf:86:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c8d1b4e4-b2dc-480b-982f-b5790344155a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:0e:5e:b1:3c:9b:ae:b0:e2:90:ac:42:f8: c4:8c:12:2e:79:82:f3:27:1f:1c:16:5f:cd:6f:fe: d9:45:e5:17:8c:7c:59:23:b3:61:81:df:91:59:91: 26:12:70:ac:b3:42:cb:dc:36:34:26:08:a3:b8:fb: 49:d2:8b:69:de:28:64:62:87:60:f5:0a:2c:42:11: 9a:e4:14:ca:19:26:ee:3b:2d:e8:e2:91:ae:58:9a: fa:35:35:ec:7b:b0:53:40:0c:26:d8:d0:a8:61:95: 2a:de:f2:4f:00:31:c0:6b:62:c9:f7:7d:28:78:8e: 42:d6:64:87:38:70:b2:79:0d:a5:6b:5e:97:dc:2b: 2e:31:cf:87:24:3e:9f:59:f2:a8:87:b8:04:22:e3: 57:55:93:09:c0:e0:78:e1:4f:d7:8f:79:aa:ab:ab: ca:87:4d:f3:79:fe:f6:ef:1e:ae:f8:de:a9:c0:2c: e1:e8:e6:c4:2b:b3:ab:6d:36:dc:3e:a1:14:e3:40: f6:88:18:24:00:2a:ce:a0:35:9a:f8:03:cd:44:23: 0d:f8:68:5b:4f:23:2f:91:17:aa:9d:88:dc:5d:3c: 38:e2:f6:d4:7f:60:02:40:2a:51:02:6e:c6:9c:49: bd:47:56:04:22:94:a3:3d:e0:ed:a0:1d:ef:2a:ff: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D4:0D:B7:A2:CB:DF:B2:75:27:FC:CC:D1:70:69:11:34:2A:46:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84d1bd3e-a08e-3986-943b-97edb816f9eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e7:ca:6f:73:42:02:ee:12:19:ab:40:38:fb:f6:11:f8:cc: 33:14:eb:2a:07:52:31:ea:ff:c2:ce:82:47:0d:7f:cd:44:b2: fc:96:78:b2:09:56:d1:2e:fc:0f:a1:a1:6e:0a:22:a5:eb:2f: 2a:a3:05:8c:ca:7f:0e:43:bc:89:19:b6:3b:5c:9b:dd:98:f4: 40:36:77:e6:2a:c1:e4:88:db:2a:d4:d2:82:a0:73:14:64:0a: bc:29:6a:0a:b2:12:b4:de:ba:90:96:03:57:f7:07:31:d8:1e: b7:e9:f9:b5:03:69:93:14:a3:d5:eb:a4:63:1f:d5:cf:a7:37: e0:e1:3b:30:8d:93:94:54:cf:aa:99:70:f9:5d:c1:fd:0e:39: 4e:69:e5:02:23:6f:a8:33:3f:60:fc:95:f8:0c:69:03:89:70: ee:84:c0:a8:ca:f4:61:45:a8:24:93:93:be:eb:c3:7d:ae:d2: 16:46:6c:8f:21:64:89:c6:d3:ff:76:a7:66:f4:a5:1c:68:80: 35:b6:0f:2c:3b:7e:a3:95:54:a2:24:b3:5f:65:8e:32:ff:76: 68:62:98:31:6a:2d:cb:68:5e:33:dd:0a:d3:da:71:1b:e4:5a: e9:17:49:01:3b:f3:f9:f1:d6:07:10:23:b7:a4:e0:f7:87:6b: 2f:44:91:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXroh33rnMs+GGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzhkMWI0ZTQtYjJkYy00ODBiLTk4MmYtYjU3OTAzNDQxNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHcOXrE8m66w4pCsQvjEjBIueYLzJx8cFl/N b/7ZReUXjHxZI7Nhgd+RWZEmEnCss0LL3DY0JgijuPtJ0otp3ihkYodg9QosQhGa 5BTKGSbuOy3o4pGuWJr6NTXse7BTQAwm2NCoYZUq3vJPADHAa2LJ930oeI5C1mSH OHCyeQ2la16X3CsuMc+HJD6fWfKoh7gEIuNXVZMJwOB44U/Xj3mqq6vKh03zef72 7x6u+N6pwCzh6ObEK7OrbTbcPqEU40D2iBgkACrOoDWa+APNRCMN+GhbTyMvkReq nYjcXTw44vbUf2ACQCpRAm7GnEm9R1YEIpSjPeDtoB3vKv8aVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfUDbeiy9+ydSf8zNFwaRE0KkblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODRkMWJkM2UtYTA4ZS0z OTg2LTk0M2ItOTdlZGI4MTZmOWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvnym9zQgLuEhmrQDj79hH4zDMU6yoHUjHq/8LOgkcNf81EsvyWeLIJ VtEu/A+hoW4KIqXrLyqjBYzKfw5DvIkZtjtcm92Y9EA2d+YqweSI2yrU0oKgcxRk CrwpagqyErTeupCWA1f3BzHYHrfp+bUDaZMUo9XrpGMf1c+nN+DhOzCNk5RUz6qZ cPldwf0OOU5p5QIjb6gzP2D8lfgMaQOJcO6EwKjK9GFFqCSTk77rw32u0hZGbI8h ZInG0/92p2b0pRxogDW2Dyw7fqOVVKIks19ljjL/dmhimDFqLctoXjPdCtPacRvk WukXSQE78/nx1gcQI7ek4PeHay9EkXA= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:49 2026 by rpki-client