$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db887a0f-dcd8-3b4a-adf5-a1df7a5b3bb1.roa File: db887a0f-dcd8-3b4a-adf5-a1df7a5b3bb1.roa (raw, json) Hash identifier: Aq4qrLQbVK6YVwGMHFIy63oLdkgKB4rt+hh7OZomUo8= Subject key identifier: F9:5C:74:2D:BF:D4:58:78:4E:27:E3:3A:2D:77:C8:55:E9:13:49:38 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E8343829ED90EE719EE00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db887a0f-dcd8-3b4a-adf5-a1df7a5b3bb1.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 168.129.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:83:43:82:9e:d9:0e:e7:19:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=738899a1-7e92-4c82-be50-fcfdb9d105a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7c:b3:90:e5:7e:fe:e7:f8:21:1f:a8:e9:a9: 45:80:ee:6d:90:4d:3e:9a:20:80:e0:44:89:b5:8f: d2:9c:f4:df:b3:c7:73:e0:d2:ab:82:67:a1:cf:78: 05:05:df:b4:c9:9b:a4:a1:03:f4:0e:90:94:09:66: 25:29:5d:61:10:ee:09:e7:1b:7f:ba:9a:4b:80:d8: ad:79:ee:cf:e3:94:90:65:81:07:1c:ff:ce:59:1c: 52:c5:42:0c:10:14:a9:84:07:dc:dc:5d:72:fa:a0: 7e:38:40:1d:49:c6:64:c2:4f:10:7f:0b:d3:fd:57: 77:ed:46:82:d3:1e:d9:82:9e:c2:19:18:d3:60:68: e1:f6:5d:d8:ce:e2:35:6d:e0:4d:70:d1:a9:36:2b: 18:6b:5a:a7:14:87:7e:5a:84:4b:ed:70:dc:dc:4c: 4f:b4:f9:17:f5:aa:b6:16:a5:2f:50:b6:9e:80:c5: 4d:90:12:9f:93:93:59:f4:f2:9a:30:97:76:51:8b: e1:72:48:ca:ab:85:87:91:ea:0d:01:55:7d:79:f6: b4:15:ad:2a:62:40:77:a1:a3:2e:74:f3:f0:57:82: 0d:1e:19:ef:94:6f:43:48:fe:65:9c:99:75:cc:b9: 0e:af:5d:fa:16:f2:7c:41:b3:99:1b:52:7d:46:bd: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5C:74:2D:BF:D4:58:78:4E:27:E3:3A:2D:77:C8:55:E9:13:49:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db887a0f-dcd8-3b4a-adf5-a1df7a5b3bb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e0:18:e8:0e:98:ec:fb:d8:76:c7:15:83:76:7c:40:23:02: bb:9f:41:43:ee:44:04:50:98:13:71:0f:2a:7b:81:39:aa:10: 97:86:2a:0b:17:2e:9a:72:a8:31:5f:45:08:b9:9f:d6:df:e0: 50:d7:10:ee:e6:38:b7:57:73:58:d3:74:aa:dd:82:66:0d:61: ec:40:68:cf:ca:16:b1:e2:99:f9:73:aa:3b:0e:f5:a5:c3:f0: e3:49:8c:14:1d:bc:e9:18:0f:e6:7d:29:29:31:51:97:89:b9: 0b:7a:fb:57:9c:e2:13:4b:d5:37:0d:51:b4:cb:86:7a:b5:39: 89:a2:96:5c:8d:b6:54:95:75:e5:00:98:b7:80:29:01:5c:3a: e1:6f:c0:14:16:fb:3f:de:f0:e8:97:6a:25:54:74:72:03:ef: 5c:c5:12:1e:39:f1:c5:2d:da:e9:44:ab:f8:7a:74:fc:26:69: 9c:59:a0:ac:35:ff:fe:ad:e6:1a:61:be:74:7b:ad:17:2e:6f: ae:37:14:bb:12:05:2d:89:e8:79:c8:08:cf:32:1d:dd:1d:e6: 10:eb:5e:f5:b0:57:7f:4a:c5:8f:92:0a:53:3a:2f:cd:82:7a: 11:0e:e0:15:a7:8e:f6:83:d3:8e:1b:72:5b:c7:f3:da:9e:ef: 03:7c:cd:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXoNDgp7ZDucZ7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzM4ODk5YTEtN2U5Mi00YzgyLWJlNTAtZmNmZGI5ZDEwNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXyzkOV+/uf4IR+o6alFgO5tkE0+miCA4ESJ tY/SnPTfs8dz4NKrgmehz3gFBd+0yZukoQP0DpCUCWYlKV1hEO4J5xt/uppLgNit ee7P45SQZYEHHP/OWRxSxUIMEBSphAfc3F1y+qB+OEAdScZkwk8QfwvT/Vd37UaC 0x7Zgp7CGRjTYGjh9l3YzuI1beBNcNGpNisYa1qnFId+WoRL7XDc3ExPtPkX9aq2 FqUvULaegMVNkBKfk5NZ9PKaMJd2UYvhckjKq4WHkeoNAVV9efa0Fa0qYkB3oaMu dPPwV4INHhnvlG9DSP5lnJl1zLkOr136FvJ8QbOZG1J9Rr312QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlcdC2/1Fh4TifjOi13yFXpE0k4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGI4ODdhMGYtZGNkOC0z YjRhLWFkZjUtYTFkZjdhNWIzYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbgGOgOmOz72HbHFYN2fEAjArufQUPuRARQmBNxDyp7gTmqEJeGKgsX LppyqDFfRQi5n9bf4FDXEO7mOLdXc1jTdKrdgmYNYexAaM/KFrHimflzqjsO9aXD 8ONJjBQdvOkYD+Z9KSkxUZeJuQt6+1ec4hNL1TcNUbTLhnq1OYmillyNtlSVdeUA mLeAKQFcOuFvwBQW+z/e8OiXaiVUdHID71zFEh458cUt2ulEq/h6dPwmaZxZoKw1 //6t5hphvnR7rRcub643FLsSBS2J6HnICM8yHd0d5hDrXvWwV39KxY+SClM6L82C ehEO4BWnjvaD044bclvH89qe7wN8zYU= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:01 2026 by rpki-client