$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98845c1e-8e53-35c4-af2b-c88cd9de6718.roa File: 98845c1e-8e53-35c4-af2b-c88cd9de6718.roa (raw, json) Hash identifier: +1CdRRlVLJAeB+fVPgQ2ARLYA1LgS5rg1e/vQ3mgHJE= Subject key identifier: 44:06:74:5A:6D:F3:6B:F7:1B:7C:15:82:38:3F:7A:E9:43:5F:DC:7E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CB81C8409B2546C0F2A16E980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98845c1e-8e53-35c4-af2b-c88cd9de6718.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 168.129.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:84:09:b2:54:6c:0f:2a:16:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=7ebef442-81e5-40d5-94ee-fb40222a6df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:c0:95:08:9e:05:ef:27:fe:fa:3e:a2:d0: bc:57:46:02:d8:e2:08:5e:07:1a:e0:ae:b0:1a:59: f0:22:f8:b5:a5:bc:67:66:66:69:38:ce:c2:47:99: 55:7d:f0:7d:15:91:5b:9d:2e:f6:04:a6:e9:c7:df: c2:00:27:c2:a7:bb:f7:e4:d4:49:ad:de:32:ec:3f: 8c:02:1e:18:89:40:5f:11:cc:92:de:65:3a:8d:a0: 39:97:e7:ca:a7:a2:b1:71:e2:14:8d:68:40:a6:5d: 67:41:8a:4c:36:ea:04:d5:ee:4a:0d:b5:18:40:f0: 60:1d:e6:f8:f5:14:6e:36:90:32:46:ac:5f:f0:56: c1:cf:cf:05:6a:0c:c0:fa:90:45:95:bb:4f:e2:69: 48:3d:1b:84:4e:76:65:5a:51:5c:94:12:87:6b:0f: f4:6e:1e:63:2b:84:11:9e:ea:e9:60:e5:29:03:d3: bd:6e:c7:23:2f:c9:eb:8b:56:54:e5:86:f1:8e:6a: bb:4a:b3:18:b0:14:36:a3:67:96:9b:ff:50:f5:d9: 92:64:9b:d1:34:6b:e5:3b:2d:e9:46:e5:4d:32:76: 01:e3:cc:a8:02:25:49:d1:9b:bc:27:b4:05:a0:1e: 38:18:87:b4:57:e6:c2:0b:f3:ef:2a:2e:7a:03:62: 31:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:06:74:5A:6D:F3:6B:F7:1B:7C:15:82:38:3F:7A:E9:43:5F:DC:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98845c1e-8e53-35c4-af2b-c88cd9de6718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0d:b1:15:b2:8c:c8:79:c2:8a:9d:79:c1:bc:87:51:17:f1: 3e:48:8f:de:c5:13:d7:ad:1b:2f:97:63:34:c6:32:5f:1f:19: f3:fb:c3:8b:bc:90:14:06:88:20:a4:04:ac:fd:9c:5a:f0:a8: 61:a3:a3:ce:c2:d7:1f:8b:8b:a7:bf:44:c3:c1:a4:e5:fe:8c: c9:d6:94:66:df:bf:ee:08:58:4f:86:d7:51:51:5f:2b:7e:fb: 68:ad:91:d3:9a:30:d9:a3:68:d8:7e:0c:f8:03:f1:a5:a6:77: a2:5d:42:c6:30:97:e4:37:96:93:0d:03:57:c6:54:28:d1:2f: 60:2f:5f:f0:2c:20:bc:95:9c:52:aa:a5:e0:ae:a1:fb:c8:de: 44:ea:1f:29:ff:ff:92:2b:dc:0e:2d:18:e3:01:8d:48:65:85: 62:73:74:b8:67:47:c4:c5:b9:5f:fd:4f:d4:0b:50:e0:5c:b3: 51:b3:30:56:e5:b0:75:6b:d7:c2:ce:88:e8:6a:1c:dc:b3:66: 67:93:9b:18:8a:9b:25:8b:0a:15:5d:8c:33:ca:af:78:0b:ac: bb:10:9e:8b:03:53:9c:a6:20:79:fc:7b:48:b7:fe:63:2c:8a: fb:f7:fc:5b:fe:8f:59:5a:8a:af:7b:4c:ba:1d:45:31:03:c1: 81:a4:a8:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIQJslRsDyoW6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk N2ViZWY0NDItODFlNS00MGQ1LTk0ZWUtZmI0MDIyMmE2ZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmknAlQieBe8n/vo+otC8V0YC2OIIXgca4K6w GlnwIvi1pbxnZmZpOM7CR5lVffB9FZFbnS72BKbpx9/CACfCp7v35NRJrd4y7D+M Ah4YiUBfEcyS3mU6jaA5l+fKp6KxceIUjWhApl1nQYpMNuoE1e5KDbUYQPBgHeb4 9RRuNpAyRqxf8FbBz88FagzA+pBFlbtP4mlIPRuETnZlWlFclBKHaw/0bh5jK4QR nurpYOUpA9O9bscjL8nri1ZU5Ybxjmq7SrMYsBQ2o2eWm/9Q9dmSZJvRNGvlOy3p RuVNMnYB48yoAiVJ0Zu8J7QFoB44GIe0V+bCC/PvKi56A2IxPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQGdFpt82v3G3wVgjg/eulDX9x+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTg4NDVjMWUtOGU1My0z NWM0LWFmMmItYzg4Y2Q5ZGU2NzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqIFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkNsRWyjMh5woqdecG8h1EX8T5Ij97FE9etGy+XYzTGMl8fGfP7w4u8 kBQGiCCkBKz9nFrwqGGjo87C1x+Li6e/RMPBpOX+jMnWlGbfv+4IWE+G11FRXyt+ +2itkdOaMNmjaNh+DPgD8aWmd6JdQsYwl+Q3lpMNA1fGVCjRL2AvX/AsILyVnFKq peCuofvI3kTqHyn//5Ir3A4tGOMBjUhlhWJzdLhnR8TFuV/9T9QLUOBcs1GzMFbl sHVr18LOiOhqHNyzZmeTmxiKmyWLChVdjDPKr3gLrLsQnosDU5ymIHn8e0i3/mMs ivv3/Fv+j1laiq97TLodRTEDwYGkqEc= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:09 2026 by rpki-client