$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8eda097f-f38b-345e-bbce-36a5b9085e4b.roa File: 8eda097f-f38b-345e-bbce-36a5b9085e4b.roa (raw, json) Hash identifier: K/tSWqeKH+GxKXy9pwCEYFIEdXRBv/FypAThFRQyFpQ= Subject key identifier: 9E:94:EE:B1:88:1B:E8:4C:17:84:E6:4C:10:B2:3F:46:7D:20:A0:B4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE56FD8AEAF8D30F756D8960 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8eda097f-f38b-345e-bbce-36a5b9085e4b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 168.138.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:56:fd:8a:ea:f8:d3:0f:75:6d:89:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=13fd96f3-90e9-4a7d-8006-dbd26fe03729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5c:7e:4b:7c:07:21:37:4f:1a:90:b6:5a:88: d8:0f:40:39:cd:14:41:ce:bd:22:f6:54:6e:f5:e0: 45:73:29:41:4a:5b:f2:85:37:1b:92:56:cc:e5:12: a2:a1:52:46:2e:f6:85:ef:40:47:51:45:7e:35:d2: 73:65:f6:c7:bd:e9:e4:15:ec:43:5e:23:6f:42:c1: 37:05:1e:38:be:0e:67:cd:2d:c6:54:6c:b6:1a:14: 5f:bd:61:be:7e:75:00:fe:a5:75:db:d7:73:d5:6a: 1d:6c:4e:3b:f9:fb:80:29:41:b1:be:ab:71:0a:40: b1:4e:aa:4a:6c:88:db:b3:0f:28:a9:45:b6:8c:2e: 53:90:51:d3:44:e7:c4:e9:9e:70:30:b4:78:71:01: 60:5b:e5:bb:38:04:0a:fd:d9:1f:63:ce:f2:ab:86: 7b:c7:6f:88:ce:e8:3b:15:48:ba:56:a0:72:e4:84: 1e:85:e7:f1:4d:6b:19:04:66:32:f0:89:61:ce:f5: e6:7b:a6:22:7b:9a:39:c1:38:d1:c5:5f:05:59:34: d7:b6:8f:e5:c6:59:96:2a:43:33:06:38:6f:5b:29: 37:a8:66:87:87:9f:9a:1d:3e:6b:85:26:b2:86:76: 55:93:f8:40:f5:bf:3f:75:2e:b2:4f:52:06:fd:5d: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:94:EE:B1:88:1B:E8:4C:17:84:E6:4C:10:B2:3F:46:7D:20:A0:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8eda097f-f38b-345e-bbce-36a5b9085e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:77:9a:93:45:e4:d5:74:6f:ba:9b:8d:86:39:74:9f:1a:56: af:33:6e:a4:40:a3:75:cf:74:9f:17:42:02:69:20:33:06:19: 9a:df:ed:cf:01:ab:95:60:4d:90:14:5a:b3:a9:3c:92:70:91: 21:42:59:55:2c:ae:4a:5f:72:0e:aa:3a:8e:39:8e:2c:bb:24: f0:62:0c:69:6b:d1:0e:f1:4d:61:77:8a:ff:27:7a:bc:06:da: 8e:ae:43:cb:92:6f:78:7f:3e:be:f8:cb:7e:5f:f5:c1:19:eb: f7:0d:3e:1a:48:15:cd:e0:07:a6:b4:76:db:71:86:e7:7a:af: a2:26:f0:d7:0d:2e:e0:eb:05:85:74:bf:66:5f:8f:93:2d:ae: f8:66:07:66:06:32:62:e1:8f:6a:c2:c0:9f:e4:fa:c0:55:84: 95:d8:38:d7:67:80:15:8b:cd:3b:6d:a3:38:7c:a0:3d:f0:f7: 18:ee:e0:f3:31:8d:2d:18:ca:bb:74:f6:f7:a5:77:e1:96:7a: cb:31:db:03:ad:c6:03:16:f8:13:ec:f6:ba:4b:0b:47:93:8e: f2:05:50:13:3e:78:43:63:96:d2:75:d2:74:a3:f0:76:30:19: 3c:ea:ab:b6:fc:52:bc:1e:9e:00:94:c3:b9:bd:76:2e:60:b0: 06:b6:29:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVv2K6vjTD3VtiWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTNmZDk2ZjMtOTBlOS00YTdkLTgwMDYtZGJkMjZmZTAzNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1x+S3wHITdPGpC2WojYD0A5zRRBzr0i9lRu 9eBFcylBSlvyhTcbklbM5RKioVJGLvaF70BHUUV+NdJzZfbHvenkFexDXiNvQsE3 BR44vg5nzS3GVGy2GhRfvWG+fnUA/qV129dz1WodbE47+fuAKUGxvqtxCkCxTqpK bIjbsw8oqUW2jC5TkFHTROfE6Z5wMLR4cQFgW+W7OAQK/dkfY87yq4Z7x2+Izug7 FUi6VqBy5IQehefxTWsZBGYy8IlhzvXme6Yie5o5wTjRxV8FWTTXto/lxlmWKkMz BjhvWyk3qGaHh5+aHT5rhSayhnZVk/hA9b8/dS6yT1IG/V1VtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6U7rGIG+hMF4TmTBCyP0Z9IKC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGVkYTA5N2YtZjM4Yi0z NDVlLWJiY2UtMzZhNWI5MDg1ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqIqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI93mpNF5NV0b7qbjYY5dJ8aVq8zbqRAo3XPdJ8XQgJpIDMGGZrf7c8B q5VgTZAUWrOpPJJwkSFCWVUsrkpfcg6qOo45jiy7JPBiDGlr0Q7xTWF3iv8nerwG 2o6uQ8uSb3h/Pr74y35f9cEZ6/cNPhpIFc3gB6a0dttxhud6r6Im8NcNLuDrBYV0 v2Zfj5MtrvhmB2YGMmLhj2rCwJ/k+sBVhJXYONdngBWLzTttozh8oD3w9xju4PMx jS0Yyrt09veld+GWessx2wOtxgMW+BPs9rpLC0eTjvIFUBM+eENjltJ10nSj8HYw GTzqq7b8UrwengCUw7m9di5gsAa2Kfw= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:25 2026 by rpki-client