$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa File: 977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa (raw, json) Hash identifier: p7moZecfcz6NIv9EN/Cn2+wKiy2rTtfRzPlJ888KeYI= Subject key identifier: 7A:94:DE:6B:DE:AE:CD:39:07:41:93:E9:FE:6E:0B:43:C2:9A:43:22 Certificate issuer: /CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Certificate serial: 010D0C9F4328584CC612118D93E9EF24F1488A00 Authority key identifier: E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 14270 IP address blocks: 208.70.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:11:8d:93:e9:ef:24:f1:48:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=cbf4b90b-3756-4f18-b120-919dc1d98be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b8:d2:8f:7b:b4:ab:8b:68:ea:b3:81:4b:80: 56:22:d8:b2:95:a8:52:40:24:54:0f:2a:9e:7b:4e: 22:c7:b6:6a:dc:39:97:e3:53:67:af:5f:6f:7d:8d: c9:57:87:bc:28:b9:d6:f0:46:23:fe:5a:13:4b:ba: 81:81:83:40:3e:77:5e:d9:9b:42:3d:85:f3:b9:9e: 05:7d:8e:ed:30:dd:6c:99:a4:e9:16:ab:2d:5d:05: 13:2a:9f:e2:54:b2:2d:54:b6:01:ad:99:f5:f1:77: c6:72:3a:44:ec:00:c9:a8:3a:e6:d9:2b:c8:09:6a: 50:11:64:77:45:c5:49:95:cf:b8:44:6f:ca:9a:c8: c6:99:78:ba:31:69:13:5c:df:c4:ff:fb:35:e9:a7: 73:f4:99:32:00:a2:45:ef:61:ff:c6:96:3f:bb:4c: e3:0b:a5:09:23:f1:d8:fc:b5:a5:97:93:2c:f8:06: 16:c3:2a:27:a4:8b:ef:b1:be:5c:e1:12:5b:a9:cd: c2:ae:12:02:3a:05:3c:b5:d8:ee:e6:25:14:1c:ad: a8:e3:0e:da:3b:ee:a1:99:f6:18:3c:53:80:69:fe: ff:eb:5a:71:2d:1b:4d:06:37:d3:f3:73:c3:3f:db: 90:be:cc:7d:4c:17:12:18:21:cb:f5:c8:50:d3:5e: cd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:94:DE:6B:DE:AE:CD:39:07:41:93:E9:FE:6E:0B:43:C2:9A:43:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl X509v3 Authority Key Identifier: keyid:E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer sbgp-ipAddrBlock: critical IPv4: 208.70.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:37:ce:42:35:be:e9:b5:38:f5:a0:a9:43:41:df:0b:54:2f: cc:b4:eb:18:8f:a4:98:3c:6e:23:cc:e1:42:d5:ca:d3:e0:4e: 5a:8f:3d:b8:b0:0e:1e:b0:83:d7:af:7e:a7:ed:18:89:94:98: fb:56:ae:28:a4:08:70:4b:74:b4:c0:1c:70:b2:d0:43:40:ae: 09:2f:23:5a:03:86:30:77:15:77:a4:62:23:f0:55:f8:18:44: f9:db:31:90:09:21:63:c6:2a:5b:09:f3:0f:5c:ce:1f:16:38: 82:e4:b7:94:bd:8e:53:c5:f6:f8:89:3d:62:06:db:22:d5:1a: ba:4d:bc:68:29:6b:62:1d:de:9f:12:7c:55:a7:a5:fd:08:fa: 7f:4e:b2:7c:b8:4a:12:a9:3c:41:ea:0a:8d:85:ac:27:b3:86: 97:ec:53:dd:11:02:ac:6e:a7:20:f0:27:61:04:98:e3:01:5c: b9:c1:2a:43:0b:74:8d:28:0d:8f:c8:c9:30:50:f6:91:c4:9b: 7a:4c:e7:24:7a:89:4b:17:54:6f:08:97:69:b0:4f:56:c0:80: 37:fc:f4:95:26:75:9a:08:8c:73:d7:bc:10:42:81:e6:36:ec: 53:f3:7b:6c:9f:e4:ba:ba:51:dc:a3:83:0a:c2:ca:51:7f:58: a9:24:74:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEhGNk+nvJPFIigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUzMDZkOTAtMGYzNy00OWE4LWIwMGUtMDY4YThlNGZm MzA3MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk Y2JmNGI5MGItMzc1Ni00ZjE4LWIxMjAtOTE5ZGMxZDk4YmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLjSj3u0q4to6rOBS4BWItiylahSQCRUDyqe e04ix7Zq3DmX41Nnr19vfY3JV4e8KLnW8EYj/loTS7qBgYNAPnde2ZtCPYXzuZ4F fY7tMN1smaTpFqstXQUTKp/iVLItVLYBrZn18XfGcjpE7ADJqDrm2SvICWpQEWR3 RcVJlc+4RG/KmsjGmXi6MWkTXN/E//s16adz9JkyAKJF72H/xpY/u0zjC6UJI/HY /LWll5Ms+AYWwyonpIvvsb5c4RJbqc3CrhICOgU8tdju5iUUHK2o4w7aO+6hmfYY PFOAaf7/61pxLRtNBjfT83PDP9uQvsx9TBcSGCHL9chQ017NcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqU3mvers05B0GT6f5uC0PCmkMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMw NmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhhOGU0ZmYzMDcvOTc3ZmFhZjAtNzljMy0z ZGRkLThiYmQtODNhMWFhNzcyMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODUzMDZkOTAtMGYzNy00OWE4LWIw MGUtMDY4YThlNGZmMzA3Lzg1MzA2ZDkwLTBmMzctNDlhOC1iMDBlLTA2OGE4ZTRm ZjMwNy5jcmwwHwYDVR0jBBgwFoAU6W+vjk/ijY/2WK04zp8PXNFY//gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMwNmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhh OGU0ZmYzMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg3zkI1vum1OPWgqUNB3wtUL8y06xiPpJg8biPM4ULVytPgTlqPPbiw Dh6wg9evfqftGImUmPtWriikCHBLdLTAHHCy0ENArgkvI1oDhjB3FXekYiPwVfgY RPnbMZAJIWPGKlsJ8w9czh8WOILkt5S9jlPF9viJPWIG2yLVGrpNvGgpa2Id3p8S fFWnpf0I+n9Osny4ShKpPEHqCo2FrCezhpfsU90RAqxupyDwJ2EEmOMBXLnBKkML dI0oDY/IyTBQ9pHEm3pM5yR6iUsXVG8Il2mwT1bAgDf89JUmdZoIjHPXvBBCgeY2 7FPze2yf5Lq6UdyjgwrCylF/WKkkdJs= -----END CERTIFICATE-----Generated at Mon Mar 2 05:41:24 2026 by rpki-client