$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa File: ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa (raw, json) Hash identifier: Ckb689Pul5oDBac4JEnp0Bx38I/2lVxpNiNEZMuq9p0= Subject key identifier: 6C:B4:35:D6:36:78:AE:18:71:BD:F3:02:49:03:FF:E2:83:BA:72:82 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC7C3FA923EFFEDFEBD0A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 68.233.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:7c:3f:a9:23:ef:fe:df:eb:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=0abf1abf-1325-4e9a-914a-4e7bc7b9c357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:a4:72:2f:a8:1d:60:96:2f:7d:86:b7:3d: 76:ae:71:e0:cb:ea:db:8a:7d:dd:bf:a9:32:fa:ed: 68:91:6b:7a:ea:e8:66:de:f2:57:5b:fb:00:6e:a6: e9:f3:a6:c6:b6:9b:d4:64:c3:57:ec:c3:d9:1d:1d: 28:b9:66:ce:7c:c4:17:c1:90:24:8d:e5:c2:21:a3: 50:9d:1c:82:d3:9f:e1:09:4f:29:ac:54:32:c2:c9: 44:27:70:91:46:a1:08:4a:32:6e:fb:00:b3:25:1c: ad:a3:05:96:e1:cc:2c:ec:00:22:87:2f:2b:ef:bd: d0:53:79:ef:fa:f1:14:81:e8:6d:ad:8b:aa:0a:fa: d8:e4:e5:9d:f5:f1:83:13:89:10:f1:4c:e4:8b:c6: 48:d1:7e:9e:20:e3:3c:04:68:c0:28:cf:ab:bf:15: a7:50:29:18:a8:d7:be:37:c7:2e:8c:20:08:e5:0b: a2:c7:c4:40:6c:54:3b:39:7a:70:0a:2d:06:d4:58: 20:b5:af:7d:5c:a8:03:a2:f5:26:95:ed:94:ca:06: 7a:a8:9f:81:dc:c8:33:0a:41:b7:70:dc:65:1c:88: ce:a3:11:0b:11:d6:b3:36:cf:d2:17:30:09:57:bf: 33:ae:4a:c6:e7:89:b4:b4:f9:4f:78:0d:2c:06:4a: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B4:35:D6:36:78:AE:18:71:BD:F3:02:49:03:FF:E2:83:BA:72:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 68.233.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:3b:38:50:61:76:99:15:87:09:d6:20:4b:15:93:d4:2b:f7: 28:ae:e4:b1:a9:5d:e8:66:84:02:65:84:6d:34:f9:c0:21:21: 2e:02:8e:42:0a:c0:70:ef:b5:41:85:0c:49:27:70:c6:76:28: 8e:0f:a1:c2:97:37:39:7d:04:47:f6:e3:94:41:e1:53:49:45: 5c:e0:a8:75:8d:cb:fb:7a:3a:ee:73:b9:ec:75:94:d0:b8:5c: 2e:ee:9c:3a:70:9f:7d:31:84:58:7a:52:9f:61:97:15:c2:61: b9:e7:d6:ce:48:f1:29:bf:ee:59:64:99:35:39:56:71:b2:6b: 06:b0:34:ee:d6:33:b0:fc:f5:bc:23:df:7a:f2:38:c7:7c:c9: ff:8e:14:ad:85:a3:29:b9:30:88:e7:fb:26:09:7c:70:ca:da: e6:a9:61:90:00:fc:b5:e1:25:10:8a:dc:9c:bf:63:27:1d:da: 38:b1:f8:e6:6e:2a:81:37:a2:50:f3:13:91:e1:dd:0e:88:22: f7:55:cb:13:5a:88:94:9d:99:a4:f4:c4:34:d6:36:70:5d:8a: 17:a2:cb:32:cf:85:20:49:d5:ab:52:43:b8:99:5c:35:a8:6a: 45:08:45:f5:7a:e1:81:31:4b:68:34:22:65:6a:4d:6c:8a:16: b4:f3:7e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHw/qSPv/t/r0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk MGFiZjFhYmYtMTMyNS00ZTlhLTkxNGEtNGU3YmM3YjljMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfukci+oHWCWL32Gtz12rnHgy+rbin3dv6ky +u1okWt66uhm3vJXW/sAbqbp86bGtpvUZMNX7MPZHR0ouWbOfMQXwZAkjeXCIaNQ nRyC05/hCU8prFQywslEJ3CRRqEISjJu+wCzJRytowWW4cws7AAihy8r773QU3nv +vEUgehtrYuqCvrY5OWd9fGDE4kQ8Uzki8ZI0X6eIOM8BGjAKM+rvxWnUCkYqNe+ N8cujCAI5Quix8RAbFQ7OXpwCi0G1Fggta99XKgDovUmle2UygZ6qJ+B3MgzCkG3 cNxlHIjOoxELEdazNs/SFzAJV78zrkrG54m0tPlPeA0sBkpyeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGy0NdY2eK4Ycb3zAkkD/+KDunKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWE5M2I0YmUtZTgyYy0z ZGMwLTg2NTEtZjZlNWE1NjQyMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH07OFBhdpkVhwnWIEsVk9Qr9yiu5LGpXehmhAJlhG00+cAhIS4CjkIK wHDvtUGFDEkncMZ2KI4PocKXNzl9BEf245RB4VNJRVzgqHWNy/t6Ou5zuex1lNC4 XC7unDpwn30xhFh6Up9hlxXCYbnn1s5I8Sm/7llkmTU5VnGyawawNO7WM7D89bwj 33ryOMd8yf+OFK2Foym5MIjn+yYJfHDK2uapYZAA/LXhJRCK3Jy/Yycd2jix+OZu KoE3olDzE5Hh3Q6IIvdVyxNaiJSdmaT0xDTWNnBdiheiyzLPhSBJ1atSQ7iZXDWo akUIRfV64YExS2g0ImVqTWyKFrTzfiQ= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:29 2026 by rpki-client