$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc395f9c-9c64-3285-ab1c-407a5cd68c05.roa File: bc395f9c-9c64-3285-ab1c-407a5cd68c05.roa (raw, json) Hash identifier: MXYIecHGQl59iMrrOUi+H5sZJzWIAf90l+tqE7V34e4= Subject key identifier: 33:E2:08:AF:C7:9E:64:25:CA:AC:C5:CC:E6:91:AA:22:BC:B3:A5:A8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA5F74F3EAF000F50150B5480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc395f9c-9c64-3285-ab1c-407a5cd68c05.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 134.70.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:4f:3e:af:00:0f:50:15:0b:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=6c7fdcb6-8532-4cad-916e-2a61a68832d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:c6:52:d8:68:4b:16:b9:b0:7c:39:6a:7d: 89:46:eb:d8:8e:dc:56:97:9e:12:05:26:31:9d:2f: 96:18:d6:5e:3c:b1:a4:20:57:e0:e0:d7:d8:61:7b: c3:e2:1a:69:51:17:21:a4:69:dc:37:43:9c:a9:a6: b4:ec:76:c9:db:b8:91:7c:3a:19:25:69:6a:11:8c: b6:ff:a9:88:17:dd:95:06:93:0a:ea:90:20:01:64: 52:ad:5d:f3:6d:ba:e2:46:e4:5b:6d:b3:c0:14:af: df:43:a6:a2:fe:88:29:4b:a0:3a:0b:3e:1d:ea:0d: 96:03:27:31:15:e2:fc:7c:a3:ab:6b:41:df:5e:f5: ae:d6:11:ec:74:92:06:d0:f7:6c:48:44:6a:83:37: 12:49:fc:99:d5:eb:20:68:1e:df:87:65:d5:7c:32: 4f:b0:b1:44:14:26:30:95:52:05:99:d2:8f:e7:05: 3a:87:1d:94:b8:f9:a2:fc:1a:23:77:0e:05:69:c0: 56:fc:06:7c:6e:e0:02:77:b1:fa:7e:25:fd:08:d3: 04:d1:8b:82:9e:4a:35:4a:90:37:2a:28:54:5e:8f: d2:d6:85:e0:94:aa:f2:85:0d:e6:91:a4:8b:12:1b: 51:2a:1e:57:34:cc:63:f0:18:12:84:06:be:3f:bd: 76:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E2:08:AF:C7:9E:64:25:CA:AC:C5:CC:E6:91:AA:22:BC:B3:A5:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc395f9c-9c64-3285-ab1c-407a5cd68c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a0:cc:fe:91:c9:da:ad:42:76:4f:bc:a7:5e:5a:af:5c:97: 8f:ef:0f:b2:19:4c:88:c0:7b:4d:59:3a:e3:4e:d4:63:bb:60: 99:d1:70:2c:3e:e9:df:d9:14:d6:54:f3:b8:6e:6e:11:33:94: a7:38:53:ad:69:6b:75:b3:ad:1f:a0:51:16:55:cf:2e:0b:5f: c0:c2:de:bd:0b:69:b7:95:c4:7e:a7:33:cc:c2:c1:8a:3e:d1: 13:0a:2f:1e:e7:ad:a2:22:5a:95:29:97:5d:70:9a:88:47:7b: 43:6f:d0:b0:30:62:8e:b0:c9:fd:1b:fd:30:08:91:89:0b:ac: 28:8a:fd:28:a2:1a:f0:e5:63:d6:72:66:2e:ef:a0:c4:73:c2: a8:d0:a6:a2:6b:06:d2:51:33:58:ef:6f:68:d6:3d:af:cb:7b: 3f:a4:3e:24:bf:7b:3a:83:65:17:1a:c4:59:10:ab:22:94:ba: 62:55:fd:c5:c7:13:53:7e:0f:c2:c8:df:15:bf:fc:5c:f1:03: 9e:17:cb:25:4b:e5:d2:76:ed:51:ba:1a:1e:45:df:53:78:b2: ca:83:42:d6:58:c2:a1:06:b3:8c:27:b2:45:e2:b4:b6:61:cd: 64:40:6d:b0:3a:c9:0b:7f:50:57:0b:94:44:99:59:50:09:f9: 5f:b5:3a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl908+rwAPUBULVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NmM3ZmRjYjYtODUzMi00Y2FkLTkxNmUtMmE2MWE2ODgzMmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO/GUthoSxa5sHw5an2JRuvYjtxWl54SBSYx nS+WGNZePLGkIFfg4NfYYXvD4hppURchpGncN0Ocqaa07HbJ27iRfDoZJWlqEYy2 /6mIF92VBpMK6pAgAWRSrV3zbbriRuRbbbPAFK/fQ6ai/ogpS6A6Cz4d6g2WAycx FeL8fKOra0HfXvWu1hHsdJIG0PdsSERqgzcSSfyZ1esgaB7fh2XVfDJPsLFEFCYw lVIFmdKP5wU6hx2UuPmi/Bojdw4FacBW/AZ8buACd7H6fiX9CNME0YuCnko1SpA3 KihUXo/S1oXglKryhQ3mkaSLEhtRKh5XNMxj8BgShAa+P712nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPiCK/HnmQlyqzFzOaRqiK8s6WoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmMzOTVmOWMtOWM2NC0z Mjg1LWFiMWMtNDA3YTVjZDY4YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhka2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmgzP6RydqtQnZPvKdeWq9cl4/vD7IZTIjAe01ZOuNO1GO7YJnRcCw+ 6d/ZFNZU87hubhEzlKc4U61pa3WzrR+gURZVzy4LX8DC3r0LabeVxH6nM8zCwYo+ 0RMKLx7nraIiWpUpl11wmohHe0Nv0LAwYo6wyf0b/TAIkYkLrCiK/SiiGvDlY9Zy Zi7voMRzwqjQpqJrBtJRM1jvb2jWPa/Lez+kPiS/ezqDZRcaxFkQqyKUumJV/cXH E1N+D8LI3xW//FzxA54XyyVL5dJ27VG6Gh5F31N4ssqDQtZYwqEGs4wnskXitLZh zWRAbbA6yQt/UFcLlESZWVAJ+V+1Onk= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:06 2026 by rpki-client