$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa File: 98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa (raw, json) Hash identifier: G1bWJBg4FYzmhGiYFnjr9KDlL6WFqCNed1WqPPc80zY= Subject key identifier: 69:28:6B:C5:6E:59:1D:66:35:87:F3:0C:BF:5F:46:B8:70:9B:15:25 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1BD1CDA9AF0C2DF510C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 134.70.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:bd:1c:da:9a:f0:c2:df:51:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=2d0232b1-94d1-43ae-9de7-1e9325a78fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:5a:d1:d1:53:35:c6:cc:22:d6:1e:ae:51: cb:e8:57:f1:30:d7:b0:5e:99:92:4c:75:1d:3a:9a: cd:9f:d0:87:f7:fc:02:61:0b:3a:1a:dd:0d:f4:ff: 8c:93:9e:e7:8b:c0:6f:4d:50:35:d5:d6:40:f8:1e: 7c:9f:a3:a6:d2:3d:39:76:fa:80:48:6c:53:d4:4d: 81:40:95:ad:39:cb:45:cd:85:e6:72:bc:b7:de:52: c1:f4:36:8d:7a:ff:28:c9:c4:92:57:2f:4a:0e:18: 68:68:4d:5b:25:3f:78:e4:1d:cd:da:b3:3e:06:cd: 4d:77:a8:d7:c4:c4:d5:57:d4:a1:ea:b5:be:ad:bf: be:34:ea:a3:bd:60:6f:9e:ba:34:46:90:4d:0a:84: c4:8e:06:6e:3b:8a:12:38:cf:13:88:7f:06:ae:c7: 1e:a7:00:f3:9d:1a:bb:47:c0:ac:ae:42:c2:89:d8: 43:d5:6c:6a:bb:0d:ad:97:1f:62:b6:aa:a4:e8:c3: 97:8b:ca:7c:c2:c8:af:2e:f1:6f:ec:ce:3f:20:60: 7e:df:c0:e8:74:6c:4b:9b:07:ca:84:13:31:1c:20: e3:7d:97:83:2d:61:a7:75:57:e0:fa:b2:d5:5e:80: 82:69:d1:5b:c3:bb:18:29:85:91:42:e4:7d:02:9f: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:28:6B:C5:6E:59:1D:66:35:87:F3:0C:BF:5F:46:B8:70:9B:15:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:fb:6d:d2:8e:8d:8a:d1:db:94:03:47:e6:ec:65:77:e0:eb: 8f:e6:c3:3c:6d:24:e5:f6:9f:5c:fd:37:b2:15:f7:9b:64:cc: 1a:c9:3e:cf:d6:c0:bd:db:54:3c:76:46:41:7d:77:26:f7:eb: 9b:3b:66:93:72:80:4c:ca:df:1b:4c:39:d0:72:c9:15:84:48: 36:d5:ea:28:bf:07:a0:ab:38:7b:4e:9f:87:e4:0c:7e:51:25: d7:f5:8c:b9:3a:40:ac:d2:11:bc:b5:1b:74:8f:b0:72:33:3e: 10:f0:4b:ad:be:df:ad:e2:61:25:ed:cd:30:cb:d7:d2:7f:8d: 4a:74:7c:69:2c:c9:31:76:49:dd:8b:d5:a6:42:79:e9:d8:f1: 22:4a:43:fe:1f:96:65:2f:e9:c0:84:d8:48:fa:4f:3e:c0:ed: 8e:44:80:4a:a4:e1:f5:a9:6d:ce:41:7a:dc:b7:c4:a0:28:b7: f3:8e:20:92:4d:77:09:c3:dd:7f:f3:37:9a:98:1e:25:58:40: 43:62:9d:1d:e3:f1:46:7e:28:f2:f8:f0:c8:fe:07:13:35:5f: ba:b3:7d:21:2f:da:f3:a6:67:ba:6d:65:23:1b:a6:ef:d1:04: 3b:b1:40:bc:7f:39:f3:07:e4:b1:5a:79:8c:e2:fa:a1:6f:67: f0:66:ac:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8b0c2prwwt9RDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk MmQwMjMyYjEtOTRkMS00M2FlLTlkZTctMWU5MzI1YTc4ZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W5a0dFTNcbMItYerlHL6FfxMNewXpmSTHUd OprNn9CH9/wCYQs6Gt0N9P+Mk57ni8BvTVA11dZA+B58n6Om0j05dvqASGxT1E2B QJWtOctFzYXmcry33lLB9DaNev8oycSSVy9KDhhoaE1bJT945B3N2rM+Bs1Nd6jX xMTVV9Sh6rW+rb++NOqjvWBvnro0RpBNCoTEjgZuO4oSOM8TiH8GrscepwDznRq7 R8CsrkLCidhD1Wxquw2tlx9itqqk6MOXi8p8wsivLvFv7M4/IGB+38DodGxLmwfK hBMxHCDjfZeDLWGndVfg+rLVXoCCadFbw7sYKYWRQuR9Ap9gLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkoa8VuWR1mNYfzDL9fRrhwmxUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOThkMzFlNjctYzRlNi0z YjBlLWExNGEtYWVmNTE4M2ZhZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKz7bdKOjYrR25QDR+bsZXfg64/mwzxtJOX2n1z9N7IV95tkzBrJPs/W wL3bVDx2RkF9dyb365s7ZpNygEzK3xtMOdByyRWESDbV6ii/B6CrOHtOn4fkDH5R Jdf1jLk6QKzSEby1G3SPsHIzPhDwS62+363iYSXtzTDL19J/jUp0fGksyTF2Sd2L 1aZCeenY8SJKQ/4flmUv6cCE2Ej6Tz7A7Y5EgEqk4fWpbc5Bety3xKAot/OOIJJN dwnD3X/zN5qYHiVYQENinR3j8UZ+KPL48Mj+BxM1X7qzfSEv2vOmZ7ptZSMbpu/R BDuxQLx/OfMH5LFaeYzi+qFvZ/BmrFI= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:06 2026 by rpki-client