$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc5c0b41-79d9-3da1-887d-d2568410422d.roa File: bc5c0b41-79d9-3da1-887d-d2568410422d.roa (raw, json) Hash identifier: f68cPkOEMt65I+0jaOsavfow6dwSoTIGdXFQyxVzS9s= Subject key identifier: 43:2D:BB:02:79:DE:93:28:98:78:F8:2D:E5:D4:CF:B8:B6:2B:68:DF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA5F74570BEEAFD857D41DDC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc5c0b41-79d9-3da1-887d-d2568410422d.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 134.70.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:45:70:be:ea:fd:85:7d:41:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=5d1c9611-cc70-4809-b7c7-d2f6cb438248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:fe:04:de:c2:9e:7b:77:b3:22:1c:94:08: 81:57:dd:9f:79:ee:7f:00:d4:5b:5a:53:ec:4a:fd: de:9a:22:af:d6:dc:51:c1:19:0f:b8:ab:96:ab:47: c3:ed:0d:eb:a1:c8:8e:4e:b7:6b:05:60:8b:b2:6f: ad:4b:d3:73:03:a7:6f:eb:6d:bd:b7:09:cd:42:fb: 74:23:ba:b9:35:35:26:c4:f1:6d:e3:c3:98:d5:12: 80:4c:b2:74:3d:b1:a8:5e:cb:ed:52:ed:1f:d0:ef: 8b:1c:6c:05:32:bf:d3:17:1f:28:57:b3:ac:d1:4d: b3:b5:a3:d9:e4:c5:2d:2b:e9:27:ef:95:3e:8c:65: 1e:ff:54:67:23:1e:b4:e7:75:42:1f:d5:9c:28:97: 7f:21:1e:db:b0:36:b7:35:c0:79:83:ed:05:6e:50: a1:80:f7:d8:ea:3d:d3:e6:68:1f:85:5a:ba:05:f4: 14:bc:88:0c:b7:88:10:41:ef:17:a8:37:60:a0:6f: 34:cf:c5:07:7e:13:a2:d3:6f:41:3b:40:39:88:8d: 15:ba:31:21:82:2c:b5:5f:26:cd:6b:44:1d:61:f3: f8:d9:eb:44:f0:83:27:42:32:a8:bf:45:bd:2d:fa: 7c:e7:23:a5:55:8d:66:8b:85:04:61:07:9b:d5:15: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2D:BB:02:79:DE:93:28:98:78:F8:2D:E5:D4:CF:B8:B6:2B:68:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc5c0b41-79d9-3da1-887d-d2568410422d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a3:f4:a1:18:81:1a:98:8e:dd:dd:ec:20:ca:d8:f9:50:eb: 3e:1f:b1:85:3c:87:46:cf:3e:b1:d3:87:1f:3a:ec:e0:36:c9: fb:87:c3:c1:0b:8d:62:80:81:30:bf:53:a9:ba:50:cf:e5:16: 55:5d:58:45:5f:df:72:e1:35:08:8b:82:10:71:49:f3:ca:4e: 12:90:66:57:60:29:b2:34:b1:8b:07:5d:37:9b:4f:fc:bf:c1: e4:0a:7f:74:a6:30:22:30:b5:67:13:d7:f6:e5:81:bc:50:09: 11:76:a2:5e:8d:e7:e2:6e:cd:d9:eb:68:a6:af:f2:24:ca:7a: 96:03:b9:31:11:21:34:77:80:b4:17:ff:ec:96:3a:f2:d7:e9: 24:2e:1b:b3:e9:5f:ed:63:1d:c6:ab:04:fe:02:e6:7f:57:76: 3e:0c:34:75:b4:c2:f1:fc:a2:76:d1:f5:1f:6b:0f:d0:98:c4: cb:82:a7:de:77:5c:31:b3:2e:6a:6b:a2:c3:bc:42:68:e4:0c: 7b:76:00:3b:9c:35:41:51:6f:42:71:b9:0a:10:b5:57:d8:c2: 7a:27:41:81:25:27:b2:1b:ae:b7:c2:68:96:f1:bc:1d:22:b3: 5e:17:cd:69:27:3c:0b:e9:a1:a9:42:c4:b1:4a:72:0d:0b:33: d1:cb:bb:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90Vwvur9hX1B3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NWQxYzk2MTEtY2M3MC00ODA5LWI3YzctZDJmNmNiNDM4MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyf+BN7Cnnt3syIclAiBV92fee5/ANRbWlPs Sv3emiKv1txRwRkPuKuWq0fD7Q3rociOTrdrBWCLsm+tS9NzA6dv6229twnNQvt0 I7q5NTUmxPFt48OY1RKATLJ0PbGoXsvtUu0f0O+LHGwFMr/TFx8oV7Os0U2ztaPZ 5MUtK+kn75U+jGUe/1RnIx6053VCH9WcKJd/IR7bsDa3NcB5g+0FblChgPfY6j3T 5mgfhVq6BfQUvIgMt4gQQe8XqDdgoG80z8UHfhOi029BO0A5iI0VujEhgiy1XybN a0QdYfP42etE8IMnQjKov0W9Lfp85yOlVY1mi4UEYQeb1RXwaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMtuwJ53pMomHj4LeXUz7i2K2jfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmM1YzBiNDEtNzlkOS0z ZGExLTg4N2QtZDI1Njg0MTA0MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2j9KEYgRqYjt3d7CDK2PlQ6z4fsYU8h0bPPrHThx867OA2yfuHw8EL jWKAgTC/U6m6UM/lFlVdWEVf33LhNQiLghBxSfPKThKQZldgKbI0sYsHXTebT/y/ weQKf3SmMCIwtWcT1/blgbxQCRF2ol6N5+JuzdnraKav8iTKepYDuTERITR3gLQX /+yWOvLX6SQuG7PpX+1jHcarBP4C5n9Xdj4MNHW0wvH8onbR9R9rD9CYxMuCp953 XDGzLmprosO8QmjkDHt2ADucNUFRb0JxuQoQtVfYwnonQYElJ7IbrrfCaJbxvB0i s14XzWknPAvpoalCxLFKcg0LM9HLu8Q= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:34 2026 by rpki-client