$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa File: 96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa (raw, json) Hash identifier: 3hpXLpAKEqFb3PkKfLAYk09CYuR031oAUOUKirRFiEs= Subject key identifier: BE:D4:D2:6E:AE:C4:50:9A:91:AF:37:32:6D:6F:EE:41:40:F4:76:F5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CEA5CE98CBB879816A2C6B400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 54253 IP address blocks: 170.52.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5c:e9:8c:bb:87:98:16:a2:c6:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=285a80a9-b26f-4d9a-8efb-1431764beb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:66:d8:86:6e:a8:0b:74:03:dc:12:fd:bc:9c: 62:4c:98:32:78:19:a3:01:40:38:e9:33:4f:36:71: 14:81:e6:0e:e0:3c:29:da:5c:99:46:e9:90:ec:c4: 0f:b6:97:25:e1:0f:2c:96:50:c1:37:6a:cb:87:79: 0f:68:c6:68:b1:a8:53:84:83:65:64:c3:b5:3e:78: c2:db:93:60:34:b0:d7:25:f4:98:9d:7d:4e:b5:87: 17:ea:a2:dd:b3:d9:be:3a:22:62:f5:b9:83:3c:04: f8:42:8c:34:79:84:08:c4:06:26:3b:9e:26:bb:e5: 0a:04:af:26:3b:5d:d2:78:bb:4a:e9:9a:d9:6a:13: 0f:f4:dd:ac:3a:28:6e:f5:35:51:8e:97:d8:99:91: 91:37:2d:97:a1:f6:0c:f3:6d:35:13:54:84:19:db: 14:d8:e0:ed:0d:17:d0:56:de:6c:89:de:a6:10:64: 00:91:98:49:6b:50:9b:5e:68:fa:cb:65:94:42:6c: 1e:d8:2a:b9:d1:55:60:1e:a8:df:fe:75:c5:67:5e: ce:11:5d:c7:d2:d9:2b:a3:e9:8f:63:17:0b:7e:52: aa:79:05:20:08:55:bd:68:55:2f:06:50:ea:c9:1e: 1c:03:2c:23:c0:9b:96:b5:2c:56:f3:ca:ef:a0:81: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D4:D2:6E:AE:C4:50:9A:91:AF:37:32:6D:6F:EE:41:40:F4:76:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.52.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:df:a6:f1:36:d1:bc:3f:4b:8a:49:d2:ef:30:1d:c0:d2:44: 5c:e3:15:5c:4d:c3:ae:c3:62:7e:41:9e:06:df:37:a6:9f:80: 48:4e:ce:71:e4:c2:e5:2f:f4:e8:36:2f:5b:da:b5:5a:d6:41: 0e:14:57:ae:20:bb:65:00:36:0e:19:22:58:9c:e8:ad:b1:f2: c5:78:72:5c:df:55:6d:1e:f2:4c:99:46:29:38:f6:f2:97:e4: f1:b5:de:9a:b6:bd:7d:10:57:d1:e1:ad:f4:e1:e4:84:53:55: 86:60:98:56:6f:7f:e8:cf:e8:b4:7d:ed:a9:a7:45:8c:5b:16: 4e:d8:66:fd:79:b4:bd:df:0e:65:52:34:ca:ff:23:04:a0:e8: 6a:c7:fd:60:bc:55:ad:a0:38:15:fd:c0:ab:5a:25:6d:f2:75: 16:84:80:b0:54:61:9b:22:8b:79:69:8c:71:64:01:54:73:5e: af:c1:4c:a6:fe:aa:b3:1a:e0:b7:ef:df:44:47:d7:04:7a:e6: 27:71:1e:18:0d:16:2d:12:c1:28:aa:ff:f1:b6:6d:a6:c4:fe: 62:3e:04:2e:4a:98:67:1b:de:85:f6:f9:b2:33:93:d6:0e:7b: 98:d8:13:28:67:62:64:b9:d3:40:93:fd:e8:f3:a1:24:39:f6: d9:fb:03:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXOmMu4eYFqLGtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk Mjg1YTgwYTktYjI2Zi00ZDlhLThlZmItMTQzMTc2NGJlYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2bYhm6oC3QD3BL9vJxiTJgyeBmjAUA46TNP NnEUgeYO4Dwp2lyZRumQ7MQPtpcl4Q8sllDBN2rLh3kPaMZosahThINlZMO1PnjC 25NgNLDXJfSYnX1OtYcX6qLds9m+OiJi9bmDPAT4Qow0eYQIxAYmO54mu+UKBK8m O13SeLtK6ZrZahMP9N2sOihu9TVRjpfYmZGRNy2XofYM8201E1SEGdsU2ODtDRfQ Vt5sid6mEGQAkZhJa1CbXmj6y2WUQmwe2Cq50VVgHqjf/nXFZ17OEV3H0tkro+mP YxcLflKqeQUgCFW9aFUvBlDqyR4cAywjwJuWtSxW88rvoIHmsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7U0m6uxFCaka83Mm1v7kFA9Hb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTYyMDViMWQtYjFjMy0z MGE2LWJlNzctZmQ2M2I2OGNhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqjQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnfpvE20bw/S4pJ0u8wHcDSRFzjFVxNw67DYn5BngbfN6afgEhOznHk wuUv9Og2L1vatVrWQQ4UV64gu2UANg4ZIlic6K2x8sV4clzfVW0e8kyZRik49vKX 5PG13pq2vX0QV9HhrfTh5IRTVYZgmFZvf+jP6LR97amnRYxbFk7YZv15tL3fDmVS NMr/IwSg6GrH/WC8Va2gOBX9wKtaJW3ydRaEgLBUYZsii3lpjHFkAVRzXq/BTKb+ qrMa4Lfv30RH1wR65idxHhgNFi0SwSiq//G2babE/mI+BC5KmGcb3oX2+bIzk9YO e5jYEyhnYmS500CT/ejzoSQ59tn7AzM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:41:27 2026 by rpki-client