$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e5b1340-5cd4-3f0a-a6d7-3d90f256d0f2.roa File: 5e5b1340-5cd4-3f0a-a6d7-3d90f256d0f2.roa (raw, json) Hash identifier: 716F8MbTWYrmFFTGuj2Y6Ca5l3l2BKQRsKv3BZZCeO4= Subject key identifier: 45:81:9E:4B:DB:20:43:7E:C3:BF:B1:01:73:C1:6C:9E:37:4E:9F:E6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CFF111983AC52FD9A8EB26A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e5b1340-5cd4-3f0a-a6d7-3d90f256d0f2.roa Signing time: Fri 27 Feb 2026 00:00:13 +0000 ROA not before: Fri 27 Feb 2026 00:00:13 +0000 ROA not after: Wed 27 May 2026 23:00:13 +0000 asID: 31898 IP address blocks: 168.138.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ff:11:19:83:ac:52:fd:9a:8e:b2:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 27 00:00:13 2026 GMT Not After : May 27 23:00:13 2026 GMT Subject: CN=e787b20d-9072-4944-aa8e-d0a651400240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:b8:96:a6:a3:cb:a3:45:19:82:40:4a:c5: b6:40:c3:6d:79:23:5c:18:a5:a1:27:d4:4f:89:d1: 71:3b:8b:ac:1c:98:a1:0c:7b:0b:2c:bd:9e:50:62: 78:a2:ef:03:14:a9:88:9d:d0:1c:1a:7e:1d:33:08: 73:47:ba:ae:27:56:dc:4f:52:16:81:d7:3c:80:05: 4c:64:aa:c4:60:ce:2f:37:cf:7c:d6:de:6a:8c:72: e9:11:e2:3a:01:ce:44:f4:12:2b:3b:bc:2c:85:08: 27:ac:00:3e:fd:92:89:72:4c:0d:33:61:83:57:37: 3e:d3:8b:f1:a8:d3:45:1e:fb:ae:01:28:fe:00:32: 5b:f0:c8:a9:b9:51:2d:f0:3c:29:b4:c6:eb:db:96: 28:3f:16:94:65:6b:20:58:fe:e1:52:4d:47:ff:5f: 13:57:ae:cd:25:e7:45:8f:f3:3f:4e:33:17:22:bd: 20:d9:b8:cf:35:96:65:a2:d5:6e:b6:38:3c:25:9d: 5d:df:02:3d:32:8c:98:b0:59:36:4c:56:55:68:ae: b6:cc:35:7b:e2:d6:d0:91:a2:aa:81:c9:34:03:b9: a3:9c:2a:5b:e4:b3:fd:64:59:54:5c:6b:ef:26:0e: f4:e4:1a:bc:1d:b9:62:a3:f3:57:b4:eb:0e:de:88: 7f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:81:9E:4B:DB:20:43:7E:C3:BF:B1:01:73:C1:6C:9E:37:4E:9F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e5b1340-5cd4-3f0a-a6d7-3d90f256d0f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:12:47:d1:0f:ca:17:66:b9:79:5b:ba:c3:67:cb:fc:3a:85: 31:57:d4:ab:d0:47:56:e2:64:88:45:ff:87:9c:81:15:af:b8: a3:3f:a2:84:06:32:67:72:79:9f:69:38:51:9e:84:ca:bb:55: 3f:e1:3a:ce:62:80:0b:04:a8:ea:97:99:1a:07:07:6f:3d:6b: 94:1f:92:f0:a6:b7:7d:30:b5:63:32:5a:b0:dc:ab:65:5a:48: 17:3d:2d:30:10:43:5c:5e:32:79:fc:fd:a5:a4:3f:20:bf:b1: 5a:3f:e6:0a:19:03:7d:19:ea:61:a8:8e:4f:89:1b:ef:89:df: a0:bd:e4:14:89:0d:cf:6d:23:51:29:af:38:4d:55:ff:d0:c4: 91:22:82:d5:d3:cd:0b:40:75:80:01:44:8c:2a:b5:14:4c:52: 5d:1b:70:7a:38:7e:84:0c:12:5b:54:db:8c:f0:2c:20:35:97: 25:2d:16:0e:86:f1:f8:94:d8:e1:16:ea:2a:e2:d2:ea:bb:43: 5b:bd:a6:5f:87:c2:e6:fd:61:48:ad:2c:ad:8f:aa:ba:9e:c2: 08:3c:b3:d3:7d:23:03:fa:4e:1f:58:cd:95:1c:08:76:e6:dd: c7:60:43:d6:8e:eb:c0:43:c0:bf:97:81:cc:4b:ce:18:72:dc: 51:8a:df:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz/ERmDrFL9mo6yaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyNzAwMDAxM1oXDTI2MDUyNzIzMDAxM1owLzEtMCsGA1UEAxMk ZTc4N2IyMGQtOTA3Mi00OTQ0LWFhOGUtZDBhNjUxNDAwMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9y4lqajy6NFGYJASsW2QMNteSNcGKWhJ9RP idFxO4usHJihDHsLLL2eUGJ4ou8DFKmIndAcGn4dMwhzR7quJ1bcT1IWgdc8gAVM ZKrEYM4vN8981t5qjHLpEeI6Ac5E9BIrO7wshQgnrAA+/ZKJckwNM2GDVzc+04vx qNNFHvuuASj+ADJb8MipuVEt8DwptMbr25YoPxaUZWsgWP7hUk1H/18TV67NJedF j/M/TjMXIr0g2bjPNZZlotVutjg8JZ1d3wI9MoyYsFk2TFZVaK62zDV74tbQkaKq gck0A7mjnCpb5LP9ZFlUXGvvJg705Bq8Hblio/NXtOsO3oh/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWBnkvbIEN+w7+xAXPBbJ43Tp/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWU1YjEzNDAtNWNkNC0z ZjBhLWE2ZDctM2Q5MGYyNTZkMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqIpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUSR9EPyhdmuXlbusNny/w6hTFX1KvQR1biZIhF/4ecgRWvuKM/ooQG MmdyeZ9pOFGehMq7VT/hOs5igAsEqOqXmRoHB289a5QfkvCmt30wtWMyWrDcq2Va SBc9LTAQQ1xeMnn8/aWkPyC/sVo/5goZA30Z6mGojk+JG++J36C95BSJDc9tI1Ep rzhNVf/QxJEigtXTzQtAdYABRIwqtRRMUl0bcHo4foQMEltU24zwLCA1lyUtFg6G 8fiU2OEW6iri0uq7Q1u9pl+Hwub9YUitLK2Pqrqewgg8s9N9IwP6Th9YzZUcCHbm 3cdgQ9aO68BDwL+XgcxLzhhy3FGK31A= -----END CERTIFICATE-----Generated at Mon Mar 2 00:03:40 2026 by rpki-client