$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c799e9-230d-35b1-8b2a-9b08e603343c.roa File: 96c799e9-230d-35b1-8b2a-9b08e603343c.roa (raw, json) Hash identifier: 9pyw4IFVxF2IAjddF8uAKCxZQyYqRMr8RFG2ndw+9xM= Subject key identifier: D8:2F:4D:08:D8:EC:DB:39:BF:CA:80:B3:27:F5:6E:15:2B:23:71:6E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1D596F99F649E19ACBB40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c799e9-230d-35b1-8b2a-9b08e603343c.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 134.70.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:d5:96:f9:9f:64:9e:19:ac:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=5e9f049b-b683-4d2e-afbb-135733a61e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8d:d8:71:88:07:57:07:97:1e:9f:93:45:72: 9c:ae:f2:f5:8f:bc:4a:4b:a8:c6:35:67:27:ca:f0: 17:88:10:6e:b8:1b:6d:14:9f:e9:1c:40:55:78:0d: b7:26:72:54:b6:68:ca:7b:62:6b:d7:27:a8:9d:94: 6a:79:30:ed:66:53:67:40:dc:a6:43:33:b6:73:4b: 31:e3:8d:89:f7:7c:53:84:b9:f8:68:14:3e:76:31: de:2c:82:97:18:4b:0c:7c:56:07:b1:f7:80:f6:0f: 3e:bd:81:02:13:05:d2:89:2e:10:6d:34:00:e8:63: 1b:ab:40:08:ec:66:59:64:cf:1c:88:b1:eb:9b:e7: 63:40:3d:8e:2b:9f:8a:c7:58:d9:34:fd:42:5c:a0: dd:d8:05:a5:e8:52:4c:7f:c2:18:01:6c:45:09:4b: bc:dd:5a:2c:b4:59:98:82:f2:84:8d:05:fd:04:0e: 2a:38:f2:4d:a8:69:9d:cd:1a:80:e8:4f:00:63:95: d6:99:2c:d7:f5:0f:a8:af:a7:a3:f1:61:b2:ef:44: 1a:28:74:b2:c5:22:1a:0c:66:7a:2b:76:91:e6:66: 45:df:a3:32:ee:5c:a7:f9:15:c4:68:97:07:d2:52: 55:f7:6e:b6:b5:21:07:bc:48:d2:93:c3:0e:d3:08: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2F:4D:08:D8:EC:DB:39:BF:CA:80:B3:27:F5:6E:15:2B:23:71:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96c799e9-230d-35b1-8b2a-9b08e603343c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8e:9b:e5:a0:07:42:8d:c8:49:ca:24:c1:4f:5a:00:71:9d: 9c:b3:7c:c0:cc:57:ba:fc:e4:c1:44:03:78:dc:f5:c0:d1:63: 9b:a9:8e:61:a2:1c:07:bc:24:c9:24:45:7f:ec:12:59:ba:0b: 6a:7d:43:a2:d8:e5:ca:a6:7b:14:d0:7b:69:f9:b0:31:a9:63: c4:08:ed:a8:b1:e8:e6:b3:88:7a:aa:dd:f3:38:af:f5:ea:ac: 47:27:03:df:18:af:66:15:fc:2f:79:9e:d5:de:91:87:19:de: e0:24:1c:72:45:4a:1f:88:db:76:13:b0:fb:70:08:47:1e:57: 21:be:59:7c:9b:cf:ef:92:19:2e:09:6f:d2:ce:cb:e5:0e:34: ea:64:88:48:fb:c6:a2:18:2b:8a:e5:39:db:12:01:74:b3:3d: aa:c7:5a:e0:f8:37:51:38:84:c1:e5:1f:56:0e:f6:05:06:d7: 85:05:fb:82:46:94:55:70:14:6c:7a:c7:48:21:ff:57:d0:76: a9:98:d1:f1:68:13:a8:8e:d7:e3:cf:b0:49:0a:3f:35:54:a3: ac:c2:c0:f2:b5:2d:77:96:ec:17:54:f8:11:ae:93:8f:f7:8a: 0d:2a:b9:1e:db:e8:15:71:10:43:5a:72:5c:3b:d1:49:25:0a: 3a:fe:bc:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8dWW+Z9knhmsu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk NWU5ZjA0OWItYjY4My00ZDJlLWFmYmItMTM1NzMzYTYxZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj43YcYgHVweXHp+TRXKcrvL1j7xKS6jGNWcn yvAXiBBuuBttFJ/pHEBVeA23JnJUtmjKe2Jr1yeonZRqeTDtZlNnQNymQzO2c0sx 442J93xThLn4aBQ+djHeLIKXGEsMfFYHsfeA9g8+vYECEwXSiS4QbTQA6GMbq0AI 7GZZZM8ciLHrm+djQD2OK5+Kx1jZNP1CXKDd2AWl6FJMf8IYAWxFCUu83VostFmY gvKEjQX9BA4qOPJNqGmdzRqA6E8AY5XWmSzX9Q+or6ej8WGy70QaKHSyxSIaDGZ6 K3aR5mZF36My7lyn+RXEaJcH0lJV9262tSEHvEjSk8MO0whtuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgvTQjY7Ns5v8qAsyf1bhUrI3FuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTZjNzk5ZTktMjMwZC0z NWIxLThiMmEtOWIwOGU2MDMzNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiOm+WgB0KNyEnKJMFPWgBxnZyzfMDMV7r85MFEA3jc9cDRY5upjmGi HAe8JMkkRX/sElm6C2p9Q6LY5cqmexTQe2n5sDGpY8QI7aix6OaziHqq3fM4r/Xq rEcnA98Yr2YV/C95ntXekYcZ3uAkHHJFSh+I23YTsPtwCEceVyG+WXybz++SGS4J b9LOy+UONOpkiEj7xqIYK4rlOdsSAXSzParHWuD4N1E4hMHlH1YO9gUG14UF+4JG lFVwFGx6x0gh/1fQdqmY0fFoE6iO1+PPsEkKPzVUo6zCwPK1LXeW7BdU+BGuk4/3 ig0quR7b6BVxEENaclw70UklCjr+vAA= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:06 2026 by rpki-client