$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37a469f4-bd27-3ccc-abb3-7d0781aff4fa.roa File: 37a469f4-bd27-3ccc-abb3-7d0781aff4fa.roa (raw, json) Hash identifier: aMTKrz7Q1Q/Zfr1l2ShVES50YTqxE3tOJcqy2vP9SiM= Subject key identifier: 20:F5:3E:7E:6E:81:55:44:F9:89:2A:91:97:43:0C:BE:CA:FB:CD:81 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D0154190A43798A4B28AD8280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37a469f4-bd27-3ccc-abb3-7d0781aff4fa.roa Signing time: Fri 27 Feb 2026 19:26:50 +0000 ROA not before: Fri 27 Feb 2026 19:26:50 +0000 ROA not after: Thu 28 May 2026 18:26:50 +0000 asID: 54253 IP address blocks: 170.9.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:01:54:19:0a:43:79:8a:4b:28:ad:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 27 19:26:50 2026 GMT Not After : May 28 18:26:50 2026 GMT Subject: CN=e7c52cbf-fac3-4420-9557-3cba70edd070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:9a:35:d6:65:74:f5:0a:22:95:28:ca:6e: c8:e7:db:be:fd:de:4f:84:e7:69:d2:0c:36:79:9f: 8b:05:cb:33:9c:68:61:8f:c7:7b:25:00:0d:70:84: 49:53:17:f2:bb:b2:a4:6d:ef:5c:cc:47:b2:c6:b3: f4:3c:0c:6b:f8:48:92:4d:ce:6d:2b:1b:b4:50:b2: 0c:e5:8a:10:78:ab:30:94:d9:a8:04:fa:86:ae:97: 2c:bd:d1:a7:d4:f9:da:75:21:7d:fb:7a:2e:c2:40: 64:f6:63:bf:7d:22:a0:d2:f9:bc:3b:81:4f:e1:78: 80:3d:ec:0e:f8:5b:4a:70:aa:c3:94:3d:5f:81:c5: fd:b3:11:88:57:cb:44:b2:22:26:b7:a6:90:d3:30: 21:42:c0:59:e0:cf:5f:5e:c4:f8:d8:79:dc:90:a8: e6:e1:f1:55:de:85:ff:c9:f7:86:27:cb:6b:0a:91: 62:41:bf:55:26:c5:d4:b6:ce:e6:3c:44:47:97:00: c5:20:9f:0e:d8:d3:a0:9a:f4:94:5e:b4:a9:d6:98: 8e:11:17:43:1c:ae:a3:79:eb:b3:e7:ce:fe:f8:cb: 3b:5c:12:11:61:c2:0c:3a:3e:7a:71:42:5b:ea:3f: aa:47:9a:eb:9f:c1:76:ab:68:eb:ab:7c:69:03:dc: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F5:3E:7E:6E:81:55:44:F9:89:2A:91:97:43:0C:BE:CA:FB:CD:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37a469f4-bd27-3ccc-abb3-7d0781aff4fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.9.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:98:57:1d:c5:aa:ec:d6:8d:d9:a9:eb:f9:5c:ea:d2:a9:d0: 25:f4:54:f3:72:73:2d:35:57:38:3f:ef:7e:3a:ec:19:92:f9: 73:39:46:58:48:0b:03:a6:63:99:7a:16:0c:05:44:25:c9:d6: 63:51:67:f2:85:06:11:83:8e:fe:43:65:a2:cb:67:9b:53:b8: 5d:04:b6:07:de:c6:fe:23:1d:79:9e:f5:9c:92:7b:9f:66:0a: 4a:c9:12:15:1c:fc:65:60:94:25:57:a5:fa:70:86:41:c1:89: 8c:03:51:ce:a9:b6:27:c6:1b:34:72:60:45:0b:1a:11:3a:73: dd:d1:90:9b:47:17:84:17:95:3c:69:12:a6:77:02:98:b9:38: 09:4f:e4:3c:9b:7c:f6:8b:4e:5a:5e:a0:1e:94:d5:21:1f:7a: 91:3c:3e:16:0c:d8:58:21:46:37:5a:6e:53:4f:19:3d:d2:d3: 50:b0:b3:f0:0f:75:19:34:c7:ca:36:02:f0:4d:de:a9:44:48: 87:2a:6d:07:ab:a0:9e:ca:53:9c:d6:fc:5e:0a:c7:38:45:5d: 45:f1:65:40:9a:c9:c3:9a:97:04:1f:f5:41:84:c8:8c:bb:06: 87:cc:c2:9a:ea:45:7c:67:f9:e3:01:89:d8:35:c1:2d:cf:32: b1:6b:d0:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0BVBkKQ3mKSyitgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyNzE5MjY1MFoXDTI2MDUyODE4MjY1MFowLzEtMCsGA1UEAxMk ZTdjNTJjYmYtZmFjMy00NDIwLTk1NTctM2NiYTcwZWRkMDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEqaNdZldPUKIpUoym7I59u+/d5PhOdp0gw2 eZ+LBcsznGhhj8d7JQANcIRJUxfyu7Kkbe9czEeyxrP0PAxr+EiSTc5tKxu0ULIM 5YoQeKswlNmoBPqGrpcsvdGn1PnadSF9+3ouwkBk9mO/fSKg0vm8O4FP4XiAPewO +FtKcKrDlD1fgcX9sxGIV8tEsiImt6aQ0zAhQsBZ4M9fXsT42HnckKjm4fFV3oX/ yfeGJ8trCpFiQb9VJsXUts7mPERHlwDFIJ8O2NOgmvSUXrSp1piOERdDHK6jeeuz 587++Ms7XBIRYcIMOj56cUJb6j+qR5rrn8F2q2jrq3xpA9wfZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD1Pn5ugVVE+YkqkZdDDL7K+82BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzdhNDY5ZjQtYmQyNy0z Y2NjLWFiYjMtN2QwNzgxYWZmNGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqglkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeYVx3FquzWjdmp6/lc6tKp0CX0VPNycy01Vzg/73467BmS+XM5RlhI CwOmY5l6FgwFRCXJ1mNRZ/KFBhGDjv5DZaLLZ5tTuF0Etgfexv4jHXme9ZySe59m CkrJEhUc/GVglCVXpfpwhkHBiYwDUc6ptifGGzRyYEULGhE6c93RkJtHF4QXlTxp EqZ3Api5OAlP5DybfPaLTlpeoB6U1SEfepE8PhYM2FghRjdablNPGT3S01Cws/AP dRk0x8o2AvBN3qlESIcqbQeroJ7KU5zW/F4KxzhFXUXxZUCaycOalwQf9UGEyIy7 BofMwprqRXxn+eMBidg1wS3PMrFr0PQ= -----END CERTIFICATE-----Generated at Mon Mar 2 00:19:20 2026 by rpki-client