$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa File: 420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa (raw, json) Hash identifier: MI6gxXAzk6LfGETjf30pZgpMp0GE7timyo7g3ED1Ofo= Subject key identifier: DB:DF:D0:A3:4A:82:5E:C6:02:CE:17:18:B2:AA:91:79:68:33:E1:AB Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584CF85246812AB473B0F9901E00 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 203 IP address blocks: 135.84.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:46:81:2a:b4:73:b0:f9:90:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=49f01478-faed-4c55-82ce-341c27b8a6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:f1:aa:88:18:87:76:e0:f9:6d:46:b8:2a: fb:90:6f:72:34:71:ac:e0:22:f6:1e:b3:5d:e6:05: 94:f7:41:07:71:ab:9b:bb:70:3c:c0:7f:3c:e0:6a: 0c:09:63:f1:8a:aa:70:12:86:ce:b8:f4:0e:4f:11: 35:65:b7:dc:83:ae:ab:c7:6a:28:20:76:ee:ce:9d: a0:28:2f:a8:f4:f4:76:e7:b7:15:54:16:f6:2d:1a: 70:02:a8:64:b0:6e:e7:6a:7e:4a:4d:86:ae:04:09: 5f:07:f0:c7:02:e3:62:d1:92:18:57:1e:6d:85:d4: cb:1c:18:2f:30:a2:09:fd:c8:68:80:dd:15:26:28: 8d:02:e8:31:17:d0:c4:74:25:7b:ff:26:3f:60:a6: e9:ba:79:67:de:0e:c0:2c:79:b1:bb:ec:7d:72:16: d2:d3:d6:9f:26:25:21:25:a8:2e:ea:39:e2:1a:91: 66:9e:7d:49:9b:d8:c3:dc:89:e2:2d:82:0e:58:92: 10:96:65:a4:2e:ca:df:bc:37:11:e5:c2:11:08:d8: 15:9b:14:de:ac:fd:ea:fa:0b:68:b1:20:84:4f:26: ee:6d:a5:f3:92:bf:08:3a:08:65:ff:62:6f:b4:02: 5c:e8:5a:65:30:ce:89:b5:ac:86:ad:e5:3f:72:5f: 4d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DF:D0:A3:4A:82:5E:C6:02:CE:17:18:B2:AA:91:79:68:33:E1:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:30:59:2f:18:0f:62:26:b4:ad:2b:c6:b8:29:7a:9b:87:62: 00:2a:85:9e:42:38:86:a1:02:32:7f:2e:3f:b6:0b:5b:99:fa: 7a:8f:41:c8:46:c5:ac:b5:70:12:08:c4:f5:c7:2d:22:da:ac: 6d:af:27:2c:ca:d3:da:d7:39:a8:e1:a5:c5:3c:4e:b5:e5:41: 6b:26:d7:50:65:4e:23:76:86:3a:25:49:54:21:e4:e7:7d:35: 1b:34:db:5f:bf:98:4a:de:cd:e9:01:2b:78:2c:ab:54:f3:0b: 7b:5d:c9:28:6c:73:9c:7d:7d:9d:0c:7f:b6:9a:f8:04:59:4a: 2b:c7:c1:3b:c8:ba:24:bb:35:5d:a6:be:25:61:80:f0:dc:94: cf:bc:84:31:07:d3:20:aa:28:82:58:77:7e:dc:24:0f:82:67: e8:7b:f5:2d:ee:f6:23:ed:8f:f2:a5:b0:83:52:28:a3:3c:d5: 85:36:a5:d5:5a:ad:63:dd:a2:1b:9b:50:ad:b4:9d:4b:09:b7: b9:18:7d:01:2c:83:88:e6:ed:94:41:14:dd:a8:86:62:6c:73: 9a:5a:ab:bf:64:43:1c:bf:21:d4:84:b9:1e:9f:5a:6d:c2:6f: 10:22:47:b3:b0:da:dc:85:13:bf:69:af:06:83:ff:8e:57:7b: 40:c8:d5:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UkaBKrRzsPmQHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk NDlmMDE0NzgtZmFlZC00YzU1LTgyY2UtMzQxYzI3YjhhNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw03xqogYh3bg+W1GuCr7kG9yNHGs4CL2HrNd 5gWU90EHcaubu3A8wH884GoMCWPxiqpwEobOuPQOTxE1Zbfcg66rx2ooIHbuzp2g KC+o9PR257cVVBb2LRpwAqhksG7nan5KTYauBAlfB/DHAuNi0ZIYVx5thdTLHBgv MKIJ/chogN0VJiiNAugxF9DEdCV7/yY/YKbpunln3g7ALHmxu+x9chbS09afJiUh Jagu6jniGpFmnn1Jm9jD3IniLYIOWJIQlmWkLsrfvDcR5cIRCNgVmxTerP3q+gto sSCETybubaXzkr8IOghl/2JvtAJc6FplMM6JtayGreU/cl9NowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvf0KNKgl7GAs4XGLKqkXloM+GrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNDIwYzU5YzYtNzZmNS0z YTFmLWFkMzAtYWRlOTBmMzdjNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkwWS8YD2ImtK0rxrgpepuHYgAqhZ5COIahAjJ/Lj+2C1uZ+nqPQchG xay1cBIIxPXHLSLarG2vJyzK09rXOajhpcU8TrXlQWsm11BlTiN2hjolSVQh5Od9 NRs021+/mErezekBK3gsq1TzC3tdyShsc5x9fZ0Mf7aa+ARZSivHwTvIuiS7NV2m viVhgPDclM+8hDEH0yCqKIJYd37cJA+CZ+h79S3u9iPtj/KlsINSKKM81YU2pdVa rWPdohubUK20nUsJt7kYfQEsg4jm7ZRBFN2ohmJsc5paq79kQxy/IdSEuR6fWm3C bxAiR7Ow2tyFE79prwaD/45Xe0DI1R0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:41:29 2026 by rpki-client