$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/439689e1-a5c4-3cbe-9bf7-9f305b6ff7cf.roa File: 439689e1-a5c4-3cbe-9bf7-9f305b6ff7cf.roa (raw, json) Hash identifier: wd+pvFvzwWPFW61oWVu8LgRaUgYoHndHswlgFcBUrDo= Subject key identifier: 67:9D:43:BC:F2:52:3F:4A:2C:A4:27:23:DF:C1:C2:2A:45:D2:EE:FA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D0154C5A5766FF7DB3FC49980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/439689e1-a5c4-3cbe-9bf7-9f305b6ff7cf.roa Signing time: Fri 27 Feb 2026 19:28:11 +0000 ROA not before: Fri 27 Feb 2026 19:28:11 +0000 ROA not after: Thu 28 May 2026 18:28:11 +0000 asID: 54253 IP address blocks: 170.9.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:01:54:c5:a5:76:6f:f7:db:3f:c4:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 27 19:28:11 2026 GMT Not After : May 28 18:28:11 2026 GMT Subject: CN=8deb8e69-748b-4f80-b23e-e9eab341fc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a8:b6:80:82:5a:e8:15:ac:49:ca:fc:e6:6d: 13:5d:a3:1c:4c:70:a3:d7:f8:83:40:b4:30:23:7f: 09:2a:9b:ac:53:7a:b7:1b:75:d4:3d:bd:69:db:b5: ea:86:7b:9c:32:c5:6b:35:ba:4f:d5:fa:9d:80:a4: ef:7c:95:bf:b2:89:8c:40:8d:f9:7f:68:eb:ba:8a: 08:bf:51:6d:7d:a4:f5:ac:71:ff:06:b6:9d:c2:c7: d0:42:00:b9:e1:ae:66:10:20:93:3f:31:00:fb:fd: 83:77:b6:3f:99:72:97:68:a6:73:30:31:57:34:88: fa:e6:54:8e:a5:80:cb:a1:c0:99:4d:3d:4d:e1:5d: 5d:bd:f4:e3:b1:98:7a:92:bd:f7:91:ab:df:ed:0d: 05:01:50:46:99:66:e2:69:5d:71:04:21:ea:32:d6: 0d:bb:b3:5c:11:d4:18:7e:47:a8:4a:e6:18:43:16: d4:54:b9:e2:a9:df:7a:77:ae:ca:28:c1:3d:39:7a: 81:2a:1f:af:79:17:7e:84:6f:4e:02:d2:78:23:cd: 05:3f:e3:66:6c:45:a5:d8:67:45:ed:72:24:4c:2a: 1c:1e:5f:9c:dc:f6:3e:94:7f:6d:73:9a:39:11:5f: d1:12:29:68:59:c4:a7:90:ba:46:7f:22:a0:47:81: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9D:43:BC:F2:52:3F:4A:2C:A4:27:23:DF:C1:C2:2A:45:D2:EE:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/439689e1-a5c4-3cbe-9bf7-9f305b6ff7cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.9.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:39:ad:d7:fe:0d:ee:7a:0a:b8:cd:b0:7e:10:e5:17:36:73: 3f:3b:4f:8a:27:91:86:2c:79:62:bd:b6:1f:47:b4:be:94:9b: 0f:5a:83:c8:7f:1b:98:16:69:8e:52:45:f7:af:8f:79:a9:54: fd:2c:36:cc:05:8a:33:73:fd:23:7e:d4:ec:66:a9:f4:cc:49: b2:a4:dc:be:2c:f6:64:85:a8:3a:b6:52:3e:4b:06:c0:55:fa: 51:10:3b:e0:a3:c0:5f:8a:95:0a:83:c5:d0:71:8f:bc:32:eb: 82:07:29:f9:78:b2:ee:d3:d8:de:60:a0:6b:21:3b:b4:16:fe: 77:5b:15:af:d8:51:e0:b3:15:ba:2f:f3:ca:41:ef:ef:f9:e8: b4:37:c8:eb:02:d4:31:f2:fb:be:ac:eb:10:7e:dd:1c:a5:52: 8a:46:a5:bb:50:5c:39:55:23:52:eb:c2:0a:ac:4b:e2:9d:a0: d8:7f:34:3f:37:a9:65:1f:fb:32:f8:f1:77:59:9b:bd:a4:15: 20:ca:d4:fa:a0:b4:be:be:b7:1b:88:a3:0a:a2:d8:61:87:99: a0:18:01:1f:34:5f:83:fe:46:77:d5:bc:4b:d3:a2:30:4a:a1: 49:5d:28:ce:75:f5:58:74:02:e3:f0:ac:8a:ab:75:3e:7c:83: e3:a1:1c:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0BVMWldm/32z/EmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyNzE5MjgxMVoXDTI2MDUyODE4MjgxMVowLzEtMCsGA1UEAxMk OGRlYjhlNjktNzQ4Yi00ZjgwLWIyM2UtZTllYWIzNDFmYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKi2gIJa6BWsScr85m0TXaMcTHCj1/iDQLQw I38JKpusU3q3G3XUPb1p27XqhnucMsVrNbpP1fqdgKTvfJW/somMQI35f2jruooI v1FtfaT1rHH/BradwsfQQgC54a5mECCTPzEA+/2Dd7Y/mXKXaKZzMDFXNIj65lSO pYDLocCZTT1N4V1dvfTjsZh6kr33kavf7Q0FAVBGmWbiaV1xBCHqMtYNu7NcEdQY fkeoSuYYQxbUVLniqd96d67KKME9OXqBKh+veRd+hG9OAtJ4I80FP+NmbEWl2GdF 7XIkTCocHl+c3PY+lH9tc5o5EV/REiloWcSnkLpGfyKgR4Ec7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGedQ7zyUj9KLKQnI9/BwipF0u76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDM5Njg5ZTEtYTVjNC0z Y2JlLTliZjctOWYzMDViNmZmN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI5rdf+De56CrjNsH4Q5Rc2cz87T4onkYYseWK9th9HtL6Umw9ag8h/ G5gWaY5SRfevj3mpVP0sNswFijNz/SN+1OxmqfTMSbKk3L4s9mSFqDq2Uj5LBsBV +lEQO+CjwF+KlQqDxdBxj7wy64IHKfl4su7T2N5goGshO7QW/ndbFa/YUeCzFbov 88pB7+/56LQ3yOsC1DHy+76s6xB+3RylUopGpbtQXDlVI1LrwgqsS+KdoNh/ND83 qWUf+zL48XdZm72kFSDK1PqgtL6+txuIowqi2GGHmaAYAR80X4P+RnfVvEvTojBK oUldKM519Vh0AuPwrIqrdT58g+OhHI4= -----END CERTIFICATE-----Generated at Mon Mar 2 00:19:23 2026 by rpki-client