$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc659f5c-f169-3b70-be8f-481dbefbc1c9.roa File: bc659f5c-f169-3b70-be8f-481dbefbc1c9.roa (raw, json) Hash identifier: H4BvJ3ap7TNlMTQP6WPu69lIoLKzrVhfDXM/WQYLW7M= Subject key identifier: 03:A8:33:50:E2:D5:10:67:F7:48:FA:AD:BC:A5:F8:EE:66:0E:2A:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE8C93BA2DD24D9A79E2AA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc659f5c-f169-3b70-be8f-481dbefbc1c9.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33287 IP address blocks: 70.89.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:c9:3b:a2:dd:24:d9:a7:9e:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=3ecb81d5-cdab-4aff-93cc-e8730f3af3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:87:ad:99:6e:56:56:4c:1e:ca:34:a7:51:81: 92:77:8f:d2:3d:3b:e1:8c:cf:09:5a:47:48:ea:f7: 84:b2:02:88:b8:16:7e:12:b9:d3:58:15:37:92:08: b1:9f:d1:53:e4:50:fb:fa:2b:76:42:27:d0:94:e3: c5:53:9e:aa:cb:8c:60:1b:e7:dc:51:3e:7f:c3:ec: f2:d3:da:71:dc:f9:e9:19:d4:bd:c8:53:f7:a2:f3: 03:2f:65:3d:43:64:78:4b:ec:e6:b7:ae:46:7e:16: a3:b9:b0:ea:ad:bc:c7:71:36:9c:b9:ee:13:5e:21: 9c:a7:c1:34:01:09:bf:16:da:67:62:a6:ac:49:a6: ad:fa:89:66:8f:14:bc:c4:eb:ff:12:dd:0d:70:56: 59:e7:9d:ea:76:fb:46:41:69:71:bc:3b:b7:2e:34: 46:c8:03:ef:3e:c1:2c:87:e0:16:cd:89:55:33:cb: b9:80:55:5a:20:bf:c6:13:66:6b:8f:98:b8:63:94: 2c:36:e7:a7:68:6d:27:61:15:d0:2a:47:e8:d3:e5: d7:fe:67:6a:f0:08:67:ee:9c:33:0c:e5:86:cf:ab: 35:7d:e3:a9:90:b6:e7:e5:de:ae:2e:f4:38:ab:12: 6b:3d:56:9d:c5:f7:ae:8c:47:9b:64:b1:58:51:f2: 75:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A8:33:50:E2:D5:10:67:F7:48:FA:AD:BC:A5:F8:EE:66:0E:2A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc659f5c-f169-3b70-be8f-481dbefbc1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:8e:1c:43:e7:64:b1:20:60:be:63:3d:98:5a:ed:02:ad:71: e1:e1:0d:e8:e5:80:f1:f5:b7:f3:f7:db:c8:4c:b1:a5:38:40: 18:27:37:e4:32:f4:b1:e6:b7:fc:20:49:23:6a:d6:60:d2:98: 58:f9:f3:d2:a3:a8:e5:31:e0:14:25:77:c5:56:47:a8:dc:72: c8:3d:d5:84:c3:df:3d:ee:0d:1e:df:cd:b0:87:98:b1:3a:38: 2a:3b:78:92:fb:96:78:be:f0:9f:f7:46:07:a4:3b:6b:e3:71: bd:5e:82:d3:41:83:44:9f:44:d6:ae:40:00:36:47:71:86:a3: 11:1f:74:c4:37:b6:60:63:1d:83:52:7d:f8:e8:2d:0f:08:ef: 14:e3:c7:3e:4f:03:e5:b0:47:a0:d6:d2:27:8c:17:52:b3:31: 41:79:91:cf:45:7c:65:9b:77:64:a6:c8:cb:16:78:b9:de:c5: 1d:ba:9c:14:e9:8f:63:a5:b3:3e:d3:0a:2f:dc:93:3d:d7:1d: f2:be:06:43:36:75:64:74:56:ed:16:83:2f:79:a3:2e:3b:22: ce:31:47:79:5c:ea:54:d7:35:6e:18:65:01:f9:1f:88:19:23: 0f:6d:2f:36:be:be:6f:b0:b8:fa:37:60:ba:35:3a:22:66:c8: 9d:e9:ed:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96Mk7ot0k2aeeKqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk M2VjYjgxZDUtY2RhYi00YWZmLTkzY2MtZTg3MzBmM2FmM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IetmW5WVkweyjSnUYGSd4/SPTvhjM8JWkdI 6veEsgKIuBZ+ErnTWBU3kgixn9FT5FD7+it2QifQlOPFU56qy4xgG+fcUT5/w+zy 09px3PnpGdS9yFP3ovMDL2U9Q2R4S+zmt65GfhajubDqrbzHcTacue4TXiGcp8E0 AQm/FtpnYqasSaat+olmjxS8xOv/Et0NcFZZ553qdvtGQWlxvDu3LjRGyAPvPsEs h+AWzYlVM8u5gFVaIL/GE2Zrj5i4Y5QsNuenaG0nYRXQKkfo0+XX/mdq8Ahn7pwz DOWGz6s1feOpkLbn5d6uLvQ4qxJrPVadxfeujEebZLFYUfJ19wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOoM1Di1RBn90j6rbyl+O5mDipXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmM2NTlmNWMtZjE2OS0z YjcwLWJlOGYtNDgxZGJlZmJjMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERlkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGOHEPnZLEgYL5jPZha7QKtceHhDejlgPH1t/P328hMsaU4QBgnN+Qy 9LHmt/wgSSNq1mDSmFj589KjqOUx4BQld8VWR6jccsg91YTD3z3uDR7fzbCHmLE6 OCo7eJL7lni+8J/3RgekO2vjcb1egtNBg0SfRNauQAA2R3GGoxEfdMQ3tmBjHYNS ffjoLQ8I7xTjxz5PA+WwR6DW0ieMF1KzMUF5kc9FfGWbd2SmyMsWeLnexR26nBTp j2Olsz7TCi/ckz3XHfK+BkM2dWR0Vu0Wgy95oy47Is4xR3lc6lTXNW4YZQH5H4gZ Iw9tLza+vm+wuPo3YLo1OiJmyJ3p7XM= -----END CERTIFICATE-----Generated at Sun Mar 1 19:00:19 2026 by rpki-client