$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23209b01-00f8-3a34-a104-c8eb8d78186b.roa File: 23209b01-00f8-3a34-a104-c8eb8d78186b.roa (raw, json) Hash identifier: Cy/0yOItdlADAEPwCC8MpIqxuyTGarJSrjtYAa+rGeg= Subject key identifier: 89:5A:A5:2C:60:54:61:9D:65:06:18:0F:22:B2:28:D9:18:71:60:38 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CFC822F56202E12411DBE3C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23209b01-00f8-3a34-a104-c8eb8d78186b.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 54253 IP address blocks: 134.185.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:2f:56:20:2e:12:41:1d:be:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=395a0126-a65e-4245-a3a9-e9bb318880ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:0a:bc:f1:8f:9b:49:89:6d:e4:d4:f6:ab: 55:7a:31:36:e3:c8:eb:66:23:d3:3a:31:52:e4:88: 04:95:b2:b4:5e:df:e2:e0:e0:d6:ae:96:de:76:cc: a3:98:75:72:56:e4:4d:02:2d:2c:b3:15:01:7d:40: 02:2b:16:89:38:79:48:74:a0:cc:70:b6:56:e7:b0: 90:58:6b:d0:f0:47:01:d6:cd:d0:5d:01:b5:e2:c4: fe:68:6b:93:da:55:78:5d:78:2c:cb:cc:8c:4b:7d: 88:59:ab:cc:b5:81:0e:44:dc:3d:95:1d:c1:f7:97: 25:ee:e0:80:01:f6:db:78:f6:31:7a:52:d3:16:ea: 99:31:b1:52:66:2f:9b:0a:2e:01:b9:ab:40:e6:e4: e3:c1:bb:5d:3c:4b:7b:f9:92:f5:f6:03:3c:a9:14: 68:8c:54:4b:e5:97:83:d2:5b:85:31:2b:07:40:72: dc:da:1d:e1:a2:82:2e:fd:fa:ab:96:6f:b2:9d:0e: 61:3e:ce:92:2a:5f:7e:1c:ce:02:e0:d3:02:d5:a3: d1:73:1d:82:4e:9b:9c:4a:ea:20:99:a5:99:d9:93: ad:0d:9f:de:2b:c6:b7:61:cb:75:c5:5f:3b:1b:f8: 77:30:18:6b:24:96:5e:5f:be:78:fd:d2:31:ab:40: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5A:A5:2C:60:54:61:9D:65:06:18:0F:22:B2:28:D9:18:71:60:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23209b01-00f8-3a34-a104-c8eb8d78186b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:19:53:63:45:39:c4:44:6d:a4:15:c2:87:86:3f:ef:6e:81: ee:e0:10:fa:fc:2d:be:b0:ec:fa:9c:7c:56:3e:ec:d8:c0:b8: 78:b6:72:9c:ab:cb:d4:b8:7e:d0:f3:aa:70:7b:3d:23:7e:8e: d1:8d:e3:5c:43:7e:5e:f3:bd:fb:aa:5f:97:e1:86:75:f8:f5: 62:ce:a1:79:00:8a:a6:b1:81:fc:d8:fe:b2:92:e2:24:68:9e: 6a:0c:97:24:82:b7:89:36:6d:cd:51:46:ab:73:80:8f:15:d9: a8:a2:64:f5:91:47:26:71:7d:07:b9:aa:60:1f:6f:40:af:5b: 01:c2:9b:88:45:f8:b2:93:fc:8f:30:b0:4f:74:a9:c8:4f:74: 2d:13:3d:f9:eb:f9:dc:ed:ae:4e:7c:00:7e:b9:79:ce:12:f6: 19:e8:57:e9:9e:bc:97:8f:8a:ee:2e:7d:e7:51:22:9e:30:22: 1c:72:46:6f:cf:68:46:a5:70:70:08:1e:4b:b5:85:70:fa:0e: 83:7a:6c:dc:08:9c:ae:e4:b9:a4:8a:76:12:74:b6:d9:6c:99: 72:a9:73:d3:63:49:76:e7:3a:88:6b:51:14:04:5a:3f:d4:38: a9:ef:1b:bd:bf:ba:1c:ad:64:5d:3a:4f:3f:2d:b9:77:d2:1d: 03:41:0f:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gi9WIC4SQR2+PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk Mzk1YTAxMjYtYTY1ZS00MjQ1LWEzYTktZTliYjMxODg4MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwYKvPGPm0mJbeTU9qtVejE248jrZiPTOjFS 5IgElbK0Xt/i4ODWrpbedsyjmHVyVuRNAi0ssxUBfUACKxaJOHlIdKDMcLZW57CQ WGvQ8EcB1s3QXQG14sT+aGuT2lV4XXgsy8yMS32IWavMtYEORNw9lR3B95cl7uCA AfbbePYxelLTFuqZMbFSZi+bCi4BuatA5uTjwbtdPEt7+ZL19gM8qRRojFRL5ZeD 0luFMSsHQHLc2h3hooIu/fqrlm+ynQ5hPs6SKl9+HM4C4NMC1aPRcx2CTpucSuog maWZ2ZOtDZ/eK8a3Yct1xV87G/h3MBhrJJZeX754/dIxq0CElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlapSxgVGGdZQYYDyKyKNkYcWA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjMyMDliMDEtMDBmOC0z YTM0LWExMDQtYzhlYjhkNzgxODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhrlPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgZU2NFOcREbaQVwoeGP+9uge7gEPr8Lb6w7PqcfFY+7NjAuHi2cpyr y9S4ftDzqnB7PSN+jtGN41xDfl7zvfuqX5fhhnX49WLOoXkAiqaxgfzY/rKS4iRo nmoMlySCt4k2bc1RRqtzgI8V2aiiZPWRRyZxfQe5qmAfb0CvWwHCm4hF+LKT/I8w sE90qchPdC0TPfnr+dztrk58AH65ec4S9hnoV+mevJePiu4ufedRIp4wIhxyRm/P aEalcHAIHku1hXD6DoN6bNwInK7kuaSKdhJ0ttlsmXKpc9NjSXbnOohrURQEWj/U OKnvG72/uhytZF06Tz8tuXfSHQNBD+0= -----END CERTIFICATE-----Generated at Mon Mar 2 00:50:52 2026 by rpki-client