$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa File: 95214554-aa85-3bbc-abf0-3612bda2be04.roa (raw, json) Hash identifier: WhM4tTK6y3M/x3R26nkJhDKAigo1OziJ1m1H4tKRL5E= Subject key identifier: CD:5C:80:E5:4A:2E:0A:42:22:B5:DD:FA:CF:BE:B8:3E:25:E0:90:7B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E5654221E607B71BC1C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 137.131.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:56:54:22:1e:60:7b:71:bc:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=19896cb9-ca9c-47fe-945f-839f19d52486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:15:e0:29:32:89:54:2f:36:7e:27:49:a2:99: fb:75:a7:a4:40:3b:ec:f4:6e:8a:6a:ef:94:48:6a: ad:2d:88:b9:a7:f5:70:64:e9:d7:82:bd:d1:31:af: 45:34:83:cb:31:80:71:e0:8e:f9:be:9a:f0:36:f0: f8:bc:95:0f:a4:16:78:40:91:40:c7:35:47:b3:18: ad:87:9a:1f:0f:5a:66:46:00:a3:62:a0:2e:c7:1d: c9:1d:b1:1b:da:ec:49:30:c1:80:5a:7b:15:8e:40: b0:7d:41:38:51:f1:5f:aa:ca:b7:a1:44:35:e9:09: 9a:2b:a5:64:f8:55:62:f0:35:2e:6d:87:0e:b7:fa: 54:f0:67:35:5c:52:4e:4a:21:d7:ca:ea:c2:80:5a: 91:39:a2:15:01:6b:17:65:04:ed:2a:90:a9:c3:77: 1d:a8:66:1d:3c:07:ae:60:45:11:2f:b1:e1:53:ad: c7:c0:46:1c:33:45:b5:94:da:54:cb:6d:60:67:95: 00:81:14:2a:81:21:63:74:79:85:26:65:fe:a6:cc: b2:0f:84:4d:b4:b4:07:78:ad:22:ed:be:91:17:b5: f2:9a:69:09:4f:a8:ca:6a:a0:e6:6a:d8:48:4a:76: 72:19:56:49:8f:05:6a:b2:d3:bf:bf:b7:83:91:4a: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5C:80:E5:4A:2E:0A:42:22:B5:DD:FA:CF:BE:B8:3E:25:E0:90:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 137.131.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ec:3d:b1:fc:dc:67:47:64:f1:22:4e:bd:4c:b4:1b:31:a6: 37:14:7f:ee:43:f5:c2:a5:9c:8c:ac:be:9a:76:3f:34:d2:9f: a3:4b:b5:b5:5d:0d:ef:a8:9f:41:2c:81:77:f1:09:0c:6f:fb: e9:19:f6:d9:4e:a9:98:5d:d9:7a:8b:47:cc:8e:c0:dd:67:db: 73:e7:f0:c2:04:b6:36:7e:d2:ca:fc:20:c9:5d:71:1e:fe:eb: 77:f0:da:c5:9b:e5:6f:0c:2c:16:00:7c:01:74:18:0f:7a:17: 9a:08:36:9b:37:31:d6:8f:15:c6:82:b6:f1:38:ca:87:d3:00: c4:c4:8b:bd:f0:0e:28:1e:ea:4b:77:d8:fa:5f:fd:6f:73:57: 4b:a4:58:e4:c4:c2:22:de:6e:b3:a0:47:c8:b5:b6:ab:f8:c6: db:33:6c:0f:3d:de:81:ad:cf:04:40:94:9c:9e:c3:9e:5d:c2: 09:f7:ae:4b:fb:79:e2:5d:64:ca:3e:a3:94:08:c7:24:99:57: 65:92:02:17:06:f7:a4:7a:e6:da:c3:19:04:d1:49:78:d6:a0: 78:9f:c3:a9:a2:30:8c:fc:8e:31:45:76:b0:19:b5:ad:61:8c: cc:09:fc:a8:4c:6e:b3:4b:aa:d6:80:81:3a:7a:79:55:c6:70: 34:7f:40:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXlZUIh5ge3G8HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTk4OTZjYjktY2E5Yy00N2ZlLTk0NWYtODM5ZjE5ZDUyNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxXgKTKJVC82fidJopn7daekQDvs9G6Kau+U SGqtLYi5p/VwZOnXgr3RMa9FNIPLMYBx4I75vprwNvD4vJUPpBZ4QJFAxzVHsxit h5ofD1pmRgCjYqAuxx3JHbEb2uxJMMGAWnsVjkCwfUE4UfFfqsq3oUQ16QmaK6Vk +FVi8DUubYcOt/pU8Gc1XFJOSiHXyurCgFqROaIVAWsXZQTtKpCpw3cdqGYdPAeu YEURL7HhU63HwEYcM0W1lNpUy21gZ5UAgRQqgSFjdHmFJmX+psyyD4RNtLQHeK0i 7b6RF7XymmkJT6jKaqDmathISnZyGVZJjwVqstO/v7eDkUp3jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1cgOVKLgpCIrXd+s++uD4l4JB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTUyMTQ1NTQtYWE4NS0z YmJjLWFiZjAtMzYxMmJkYTJiZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiYOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzsPbH83GdHZPEiTr1MtBsxpjcUf+5D9cKlnIysvpp2PzTSn6NLtbVd De+on0EsgXfxCQxv++kZ9tlOqZhd2XqLR8yOwN1n23Pn8MIEtjZ+0sr8IMldcR7+ 63fw2sWb5W8MLBYAfAF0GA96F5oINps3MdaPFcaCtvE4yofTAMTEi73wDige6kt3 2Ppf/W9zV0ukWOTEwiLebrOgR8i1tqv4xtszbA893oGtzwRAlJyew55dwgn3rkv7 eeJdZMo+o5QIxySZV2WSAhcG96R65trDGQTRSXjWoHifw6miMIz8jjFFdrAZta1h jMwJ/KhMbrNLqtaAgTp6eVXGcDR/QKI= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:08 2026 by rpki-client