$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99f65072-ef1d-368c-9d6e-dcbfde17a809.roa File: 99f65072-ef1d-368c-9d6e-dcbfde17a809.roa (raw, json) Hash identifier: kYhadwEEkfGYNRbM/VKOyfZAAZ8DX7NGUmrwUMLk06s= Subject key identifier: 47:D7:C8:73:D9:3C:EF:77:D8:83:E7:04:CC:9C:D3:3D:3A:CF:E1:6D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E6ECC9E7F9A0ACC8D5700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99f65072-ef1d-368c-9d6e-dcbfde17a809.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 192.29.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:6e:cc:9e:7f:9a:0a:cc:8d:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=52a72e12-d6ab-4690-b854-869c401097a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:ec:8d:4c:46:08:54:ee:75:b3:ad:e6:37: 11:4b:f9:d6:62:85:d2:d7:3a:39:ab:61:ca:5f:06: 0e:a7:b2:75:f1:e4:e4:82:59:31:7f:17:16:df:16: c0:09:50:0e:ed:5b:8e:40:18:c5:0b:6b:3c:17:97: f7:93:b9:d7:3e:19:30:01:1a:c6:2d:ee:60:85:d7: c9:f5:92:79:a6:5d:25:0d:f6:15:ea:85:da:4a:47: 45:cb:dc:ac:e7:0f:2c:87:6c:9b:6f:64:bd:3e:65: 68:48:3a:c0:bc:0a:c0:49:45:07:59:06:8f:aa:57: e2:fb:b7:ea:da:36:3e:16:06:03:e5:c4:d5:4f:2b: ca:4b:c8:16:1f:de:50:97:80:36:83:42:5a:af:59: 16:23:64:18:e5:11:25:2c:d1:ee:11:5b:71:6c:6a: f5:5a:db:4f:e8:2f:7f:c2:58:18:66:a5:89:fb:4b: b0:25:15:3b:89:dd:fb:3b:c7:e4:60:a4:f1:83:61: c6:b5:08:52:c5:cd:36:d5:a8:2b:3a:25:80:1a:13: 44:49:96:f4:0a:3f:4b:89:56:cd:f3:36:77:7a:c8: e2:48:3d:c0:72:99:bd:63:41:f8:87:9a:08:47:d8: f4:60:5e:55:29:72:50:98:c8:6b:df:67:9e:8e:85: f5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D7:C8:73:D9:3C:EF:77:D8:83:E7:04:CC:9C:D3:3D:3A:CF:E1:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99f65072-ef1d-368c-9d6e-dcbfde17a809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ad:8d:3d:48:58:f7:8b:40:ba:64:d6:cb:c1:45:a4:c3:27: 62:6e:5a:79:0b:ab:8c:3e:41:0b:86:3a:62:7f:47:81:65:c0: e2:29:52:cc:cf:56:79:39:a8:63:ca:37:26:09:90:2f:9a:d9: 8f:f6:b8:f7:a2:b3:ba:45:55:0a:ae:af:96:c4:a4:1c:f1:e3: 5c:bf:e8:aa:58:68:b9:bd:9d:64:b4:9a:29:69:f8:4b:f0:cc: e2:cd:84:c6:4f:67:fb:60:5d:fa:da:17:f3:31:38:76:b6:a3: ee:69:6b:96:d2:21:e6:b6:2d:af:ca:9d:9f:60:ba:d5:ea:9e: 2c:f5:0e:7c:69:ae:8a:9e:fa:4b:d1:6a:71:3d:e5:0d:f1:3d: 7b:3d:a7:ca:d3:ee:0a:df:a2:80:e7:16:f5:b1:dc:c9:9f:3e: 85:77:6b:3a:bb:6b:d0:e5:88:a3:29:e5:a5:05:fe:ed:c3:15: 00:88:d6:de:14:ae:c6:63:1e:e8:3d:ff:35:6f:91:c3:3f:73: 54:a6:60:e2:62:67:2d:de:a8:70:d9:c4:a3:8b:0a:d0:5a:ac: ac:0a:40:4c:36:11:ad:1f:2b:a0:00:7e:c2:87:b9:7c:0b:16: 31:e8:1f:c6:ea:d0:77:f8:66:20:1b:d3:0f:c8:67:5e:70:47: 3f:4a:31:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXm7Mnn+aCsyNVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTJhNzJlMTItZDZhYi00NjkwLWI4NTQtODY5YzQwMTA5N2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw7sjUxGCFTudbOt5jcRS/nWYoXS1zo5q2HK XwYOp7J18eTkglkxfxcW3xbACVAO7VuOQBjFC2s8F5f3k7nXPhkwARrGLe5ghdfJ 9ZJ5pl0lDfYV6oXaSkdFy9ys5w8sh2ybb2S9PmVoSDrAvArASUUHWQaPqlfi+7fq 2jY+FgYD5cTVTyvKS8gWH95Ql4A2g0Jar1kWI2QY5RElLNHuEVtxbGr1WttP6C9/ wlgYZqWJ+0uwJRU7id37O8fkYKTxg2HGtQhSxc021agrOiWAGhNESZb0Cj9LiVbN 8zZ3esjiSD3Acpm9Y0H4h5oIR9j0YF5VKXJQmMhr32eejoX1PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfXyHPZPO932IPnBMyc0z06z+FtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTlmNjUwNzItZWYxZC0z NjhjLTlkNmUtZGNiZmRlMTdhODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWtjT1IWPeLQLpk1svBRaTDJ2JuWnkLq4w+QQuGOmJ/R4FlwOIpUszP Vnk5qGPKNyYJkC+a2Y/2uPeis7pFVQqur5bEpBzx41y/6KpYaLm9nWS0milp+Evw zOLNhMZPZ/tgXfraF/MxOHa2o+5pa5bSIea2La/KnZ9gutXqniz1Dnxproqe+kvR anE95Q3xPXs9p8rT7grfooDnFvWx3MmfPoV3azq7a9DliKMp5aUF/u3DFQCI1t4U rsZjHug9/zVvkcM/c1SmYOJiZy3eqHDZxKOLCtBarKwKQEw2Ea0fK6AAfsKHuXwL FjHoH8bq0Hf4ZiAb0w/IZ15wRz9KMZw= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:18 2026 by rpki-client