$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f62fccf4-77b3-38e5-aa2e-9a669b4a8a0e.roa File: f62fccf4-77b3-38e5-aa2e-9a669b4a8a0e.roa (raw, json) Hash identifier: TCDoZAuCjMfjMf+T+tgtgKLstkHxsphmpJJoSeh3ZLs= Subject key identifier: 2E:47:16:3D:59:32:12:2F:11:59:8B:CF:D0:3A:D9:65:D3:6E:A0:B2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E8AC88481A3805F2F1800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f62fccf4-77b3-38e5-aa2e-9a669b4a8a0e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 130.61.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:8a:c8:84:81:a3:80:5f:2f:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=17ef02b6-934c-4a45-9cad-742473a119b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a6:8e:9a:f0:4b:de:30:83:79:16:e5:2b:2f: 92:bb:8f:e0:40:18:8f:35:59:f4:20:0d:fa:4e:3a: 4c:15:6d:d0:ca:76:48:23:d3:a8:58:22:53:dd:03: 13:78:3c:41:46:b7:0f:ad:e0:da:60:f3:65:2f:d3: d1:7f:d5:9a:0e:de:32:cc:35:93:8b:69:f7:35:d2: 66:2d:f1:76:2e:99:b3:0c:75:09:11:8e:75:6a:51: 52:88:31:60:f1:68:e0:48:f6:da:ef:40:c8:eb:1e: 54:07:5a:8c:a5:c9:22:b6:56:05:bc:81:16:2f:4c: 40:98:33:fa:dc:b8:dc:08:e0:8b:03:13:42:a4:04: 86:e0:aa:31:e1:53:9d:53:4f:b4:10:13:f1:bd:a4: 27:d1:f7:ca:c0:4d:09:30:36:2b:7a:56:17:b3:1f: f0:7b:9c:7a:97:9b:41:79:a3:97:7c:9b:1f:74:ba: 39:6d:80:2a:60:ed:1e:97:8b:ec:39:03:13:d3:85: 45:9d:f5:03:3f:86:c5:be:0c:e3:e3:d4:8e:a2:e4: 5b:ed:d1:ac:98:ea:c6:d8:57:dc:39:ce:74:09:83: f9:d6:fa:2e:98:f2:15:05:ff:e3:a3:25:a7:95:d6: d7:7f:74:30:86:57:56:46:03:3e:bd:b3:78:e9:bf: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:47:16:3D:59:32:12:2F:11:59:8B:CF:D0:3A:D9:65:D3:6E:A0:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f62fccf4-77b3-38e5-aa2e-9a669b4a8a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.61.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:70:b4:8a:02:d2:45:dc:5b:34:e4:ae:43:d3:9b:8f:9e:34: da:94:d9:d7:d3:c9:e7:b2:5f:12:6f:14:2b:cb:e3:5e:f8:19: 54:87:d2:c0:9f:c1:a7:59:f1:d7:5d:b1:f8:73:2e:f9:e8:8a: bb:27:c4:32:9e:ac:a3:be:3c:92:96:da:89:01:14:de:11:f8: 77:2b:cc:e0:75:9c:b7:c2:91:83:08:91:2e:54:e3:6d:1a:ea: 50:f9:f6:2a:3a:1f:3c:ed:bd:ce:41:af:a2:2d:44:1f:94:27: 49:c6:ff:ff:2a:38:d8:a4:44:3e:1e:9c:54:17:dc:f5:73:90: cd:29:b8:c6:44:12:b1:2f:30:a6:12:41:e5:e7:aa:71:d6:fd: b5:11:59:0f:d3:09:9c:46:f0:f2:78:ed:26:b2:5c:66:5c:13: ba:62:e6:c4:1e:99:71:ec:22:6e:15:8e:ef:59:a3:fc:32:00: 13:84:05:c8:78:d4:c3:2c:e3:dd:d4:8a:94:1d:97:9a:cc:2b: fa:5d:a0:27:34:00:fb:1c:41:6b:47:6a:3f:b1:5e:6e:0e:67: 71:7f:66:46:0f:40:ab:67:a1:ab:1d:be:e7:80:ed:79:4b:a7: 2e:42:8d:1b:74:83:bc:47:51:e7:6e:12:5a:8d:e5:15:f2:06: 32:71:7d:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXorIhIGjgF8vGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTdlZjAyYjYtOTM0Yy00YTQ1LTljYWQtNzQyNDczYTExOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqaOmvBL3jCDeRblKy+Su4/gQBiPNVn0IA36 TjpMFW3QynZII9OoWCJT3QMTeDxBRrcPreDaYPNlL9PRf9WaDt4yzDWTi2n3NdJm LfF2LpmzDHUJEY51alFSiDFg8WjgSPba70DI6x5UB1qMpckitlYFvIEWL0xAmDP6 3LjcCOCLAxNCpASG4Kox4VOdU0+0EBPxvaQn0ffKwE0JMDYrelYXsx/we5x6l5tB eaOXfJsfdLo5bYAqYO0el4vsOQMT04VFnfUDP4bFvgzj49SOouRb7dGsmOrG2Ffc Oc50CYP51voumPIVBf/joyWnldbXf3QwhldWRgM+vbN46b/2CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5HFj1ZMhIvEVmLz9A62WXTbqCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjYyZmNjZjQtNzdiMy0z OGU1LWFhMmUtOWE2NjliNGE4YTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgj0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNwtIoC0kXcWzTkrkPTm4+eNNqU2dfTyeeyXxJvFCvL4174GVSH0sCf wadZ8dddsfhzLvnoirsnxDKerKO+PJKW2okBFN4R+HcrzOB1nLfCkYMIkS5U420a 6lD59io6Hzztvc5Br6ItRB+UJ0nG//8qONikRD4enFQX3PVzkM0puMZEErEvMKYS QeXnqnHW/bURWQ/TCZxG8PJ47SayXGZcE7pi5sQemXHsIm4Vju9Zo/wyABOEBch4 1MMs493UipQdl5rMK/pdoCc0APscQWtHaj+xXm4OZ3F/ZkYPQKtnoasdvueA7XlL py5CjRt0g7xHUeduElqN5RXyBjJxfUw= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:07 2026 by rpki-client