$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa File: 67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa (raw, json) Hash identifier: khqgGjakjSKwr6GT+7Zl0hSMwDNmWe1PUOmen+0EA+4= Subject key identifier: C8:05:FB:67:DA:DE:AB:15:CF:B9:0B:8F:2D:CE:CA:95:1F:25:39:D4 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584CCBA77B85936F75E4E61E4BE0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 54858 IP address blocks: 199.59.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:7b:85:93:6f:75:e4:e6:1e:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=2cd22e43-5eb2-4aef-8719-6b25f88ae108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b3:72:f5:9a:7a:95:69:9e:a9:44:75:07:96: b5:1f:97:75:71:7f:11:d8:4c:18:33:bf:27:66:7b: d8:75:c8:5d:c5:33:ed:03:a9:a9:78:c6:8f:ae:16: 9d:6a:05:a4:d4:ea:b6:77:55:ae:a9:58:dd:04:17: e9:10:73:95:90:e8:35:64:9b:a4:9c:8a:82:0f:0f: 6d:46:3d:a4:61:fe:f8:62:1c:a0:c7:8d:72:75:4d: 55:8c:aa:36:66:80:91:87:52:c8:28:ca:3a:26:dc: 94:f7:11:4b:fb:d3:01:fb:71:ee:f8:48:bc:f6:8f: 1d:7d:0b:0c:f6:1a:f3:66:29:4b:20:2f:e4:68:37: 4b:fa:55:96:4f:53:66:56:90:42:00:5d:ce:33:a7: b9:47:0e:70:e7:63:2a:25:24:34:06:db:ea:2c:81: e6:f6:5d:6c:8c:3c:df:10:62:2b:89:21:b4:31:7b: 69:c1:58:58:7b:f1:20:25:16:04:6b:31:cd:bd:dc: 4a:57:c2:55:43:9c:5b:5e:18:fc:77:54:34:d8:4c: 36:1d:c7:66:c9:6a:cd:17:09:bf:2b:78:3b:04:a1: f2:32:a9:91:84:67:0d:5f:b4:ea:ee:28:fc:56:7b: fa:c9:ba:17:77:63:1f:02:10:c4:8d:8b:2a:22:8c: 7d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:05:FB:67:DA:DE:AB:15:CF:B9:0B:8F:2D:CE:CA:95:1F:25:39:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.59.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:9e:69:c1:35:e7:72:5a:de:e5:2f:7f:08:73:0d:28:e7:e3: 16:82:44:d7:61:fb:52:56:8e:ff:72:f9:20:df:84:c4:30:87: 08:42:ca:24:3e:4b:fb:52:11:a9:b1:09:94:b2:96:0f:b5:56: f5:f1:72:38:c5:44:83:38:13:d4:ea:e5:de:7a:3e:4b:a9:d0: a4:5d:fd:11:07:56:e5:76:fe:5a:bf:14:89:7d:d5:2b:3f:0d: 18:25:4e:b1:0e:c2:a5:cc:e5:5c:ef:99:9e:96:20:e0:22:3f: 26:cb:e4:37:fa:bd:aa:44:1a:2b:1f:d6:50:b4:a5:9b:f8:08: a7:71:08:d7:70:4b:61:26:47:10:9f:b7:7d:b5:7c:8a:5b:56: ff:3a:31:f8:fa:33:eb:42:8e:70:f8:44:07:6a:0e:38:5c:cb: d1:38:e5:50:64:91:f2:83:02:30:34:42:9f:0f:5f:df:95:08: f6:79:27:c1:0a:34:e0:39:48:61:25:ca:4d:55:03:1f:ea:92: 91:b5:ec:c6:bc:95:2e:ed:6a:33:9d:96:96:01:76:cd:93:9b: 5c:3f:c2:9f:47:b7:60:e4:64:9d:59:c7:8e:4b:38:89:e1:38: 5a:aa:32:f9:4d:ef:ef:8b:b6:d2:f3:dd:8b:59:33:ed:fa:8a: 42:e0:a5:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp3uFk2915OYeS+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk MmNkMjJlNDMtNWViMi00YWVmLTg3MTktNmIyNWY4OGFlMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Ny9Zp6lWmeqUR1B5a1H5d1cX8R2EwYM78n ZnvYdchdxTPtA6mpeMaPrhadagWk1Oq2d1WuqVjdBBfpEHOVkOg1ZJuknIqCDw9t Rj2kYf74Yhygx41ydU1VjKo2ZoCRh1LIKMo6JtyU9xFL+9MB+3Hu+Ei89o8dfQsM 9hrzZilLIC/kaDdL+lWWT1NmVpBCAF3OM6e5Rw5w52MqJSQ0BtvqLIHm9l1sjDzf EGIriSG0MXtpwVhYe/EgJRYEazHNvdxKV8JVQ5xbXhj8d1Q02Ew2HcdmyWrNFwm/ K3g7BKHyMqmRhGcNX7Tq7ij8Vnv6yboXd2MfAhDEjYsqIox9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgF+2fa3qsVz7kLjy3OypUfJTnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNjdlZmUwYzEtMWU1OC0z YTI2LTk5ZDItOTg1NzZjMWE5NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWeacE153Ja3uUvfwhzDSjn4xaCRNdh+1JWjv9y+SDfhMQwhwhCyiQ+ S/tSEamxCZSylg+1VvXxcjjFRIM4E9Tq5d56Pkup0KRd/REHVuV2/lq/FIl91Ss/ DRglTrEOwqXM5VzvmZ6WIOAiPybL5Df6vapEGisf1lC0pZv4CKdxCNdwS2EmRxCf t321fIpbVv86Mfj6M+tCjnD4RAdqDjhcy9E45VBkkfKDAjA0Qp8PX9+VCPZ5J8EK NOA5SGElyk1VAx/qkpG17Ma8lS7tajOdlpYBds2Tm1w/wp9Ht2DkZJ1Zx45LOInh OFqqMvlN7++LttLz3YtZM+36ikLgpY4= -----END CERTIFICATE-----Generated at Tue Mar 3 00:41:23 2026 by rpki-client