$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6fb65fe-60e6-37f9-8a46-be3e354ead2e.roa File: a6fb65fe-60e6-37f9-8a46-be3e354ead2e.roa (raw, json) Hash identifier: DNc7ZiyFm83BtGFSNSTXELp4x5G+bdORdPDdDz+vofw= Subject key identifier: AD:FE:AD:25:6C:DE:64:2F:A6:CC:4B:7A:A1:C7:6A:DD:D7:C8:5C:C0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CF6ECD0FA66BC390291CBEA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6fb65fe-60e6-37f9-8a46-be3e354ead2e.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 54253 IP address blocks: 159.13.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d0:fa:66:bc:39:02:91:cb:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=d4748e29-0f0c-4943-bf8b-1917b3e1af07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d3:ca:c9:b8:5c:94:80:31:95:ba:d6:8b:2a: a2:0f:b5:75:02:a1:b2:27:7e:54:e2:ba:f5:7e:8c: f6:7f:0c:bf:86:29:d1:5b:56:26:f2:6f:38:6b:44: f0:8e:80:5d:d1:26:9b:1a:0f:46:13:53:0f:cd:2f: e2:35:45:ab:9c:16:09:b9:22:8f:d8:7d:19:b8:bb: a3:69:d6:66:d2:74:14:5e:6b:84:47:e3:01:23:5a: da:eb:7c:9c:c5:07:bc:cf:1b:12:85:1d:9c:ae:52: 1f:16:ac:70:38:39:87:35:7d:b8:a3:6b:06:82:10: 98:d5:35:93:a8:50:9e:4e:4c:67:e9:6c:da:f0:05: 94:b7:cf:db:de:40:12:0b:2f:4c:f4:bf:a8:27:60: 35:81:08:a7:7a:c3:6b:55:ad:2b:0f:df:b8:d4:79: 4d:2b:91:5b:9d:04:da:5a:f8:da:74:ef:ad:6f:71: 62:ba:bb:d9:ce:48:dd:60:a8:58:d0:ec:12:76:9a: 3a:15:0c:d2:0f:3d:62:e0:7c:22:3e:e0:f7:dc:1c: 12:5e:1d:29:82:9f:36:49:ad:42:15:60:11:08:9f: f6:f5:19:d8:52:a4:3f:7c:f1:af:dd:19:40:2e:a1: 34:20:1f:f0:10:e0:35:76:c7:a2:88:5f:d3:c4:c8: e3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FE:AD:25:6C:DE:64:2F:A6:CC:4B:7A:A1:C7:6A:DD:D7:C8:5C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6fb65fe-60e6-37f9-8a46-be3e354ead2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.13.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1d:39:92:c3:48:1f:87:98:6a:26:25:92:8c:19:fe:83:e2: 26:22:a5:2f:63:f5:cb:2d:29:af:b1:b5:06:84:1b:58:6f:4e: a5:10:19:19:6a:51:f3:f9:27:b6:9d:0f:58:32:ae:1a:21:7c: af:81:44:2a:85:2c:58:ea:ca:64:ad:8b:46:06:5d:4b:63:60: 5c:56:1d:91:f0:52:61:cd:bf:eb:21:c7:fe:12:a8:9c:59:18: 68:9a:31:4d:61:cd:9d:55:87:ac:e7:56:22:e2:af:99:13:62: c4:d7:ba:14:9d:35:73:81:4c:ba:f1:ef:ac:dd:60:f7:cf:13: 4a:12:f5:41:2d:f6:eb:19:ac:2b:a3:aa:18:11:15:6d:1d:8c: 46:75:6d:d6:53:c2:3e:53:59:81:ac:e1:8c:68:17:6f:23:4a: 03:f0:e5:ba:dd:62:77:be:03:a2:d7:3d:53:6b:8d:cf:c1:4f: 68:75:a2:af:82:41:d4:8a:87:ea:9f:e4:18:c4:b9:54:37:52: c0:fb:46:87:44:73:11:f9:e4:38:89:3c:a7:66:b7:45:9e:c5: 0d:db:e8:f5:81:9f:f0:25:0f:3f:be:a8:aa:09:0e:84:05:a9: 0f:ac:7f:03:67:23:b1:49:ed:08:5b:91:56:00:b2:78:52:4e: 72:50:88:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27ND6Zrw5ApHL6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZDQ3NDhlMjktMGYwYy00OTQzLWJmOGItMTkxN2IzZTFhZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtPKybhclIAxlbrWiyqiD7V1AqGyJ35U4rr1 foz2fwy/hinRW1Ym8m84a0TwjoBd0SabGg9GE1MPzS/iNUWrnBYJuSKP2H0ZuLuj adZm0nQUXmuER+MBI1ra63ycxQe8zxsShR2crlIfFqxwODmHNX24o2sGghCY1TWT qFCeTkxn6Wza8AWUt8/b3kASCy9M9L+oJ2A1gQinesNrVa0rD9+41HlNK5FbnQTa WvjadO+tb3FiurvZzkjdYKhY0OwSdpo6FQzSDz1i4HwiPuD33BwSXh0pgp82Sa1C FWARCJ/29RnYUqQ/fPGv3RlALqE0IB/wEOA1dseiiF/TxMjjzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3+rSVs3mQvpsxLeqHHat3XyFzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTZmYjY1ZmUtNjBlNi0z N2Y5LThhNDYtYmUzZTM1NGVhZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnw0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYdOZLDSB+HmGomJZKMGf6D4iYipS9j9cstKa+xtQaEG1hvTqUQGRlq UfP5J7adD1gyrhohfK+BRCqFLFjqymSti0YGXUtjYFxWHZHwUmHNv+shx/4SqJxZ GGiaMU1hzZ1Vh6znViLir5kTYsTXuhSdNXOBTLrx76zdYPfPE0oS9UEt9usZrCuj qhgRFW0djEZ1bdZTwj5TWYGs4YxoF28jSgPw5brdYne+A6LXPVNrjc/BT2h1oq+C QdSKh+qf5BjEuVQ3UsD7RodEcxH55DiJPKdmt0WexQ3b6PWBn/AlDz++qKoJDoQF qQ+sfwNnI7FJ7QhbkVYAsnhSTnJQiAU= -----END CERTIFICATE-----Generated at Mon Mar 2 02:19:57 2026 by rpki-client