$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa File: b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa (raw, json) Hash identifier: JcJ2RnalOfrxOAfXLLkMayQnO05Tc1O8QC9ZDQd2sqM= Subject key identifier: AF:1E:E0:56:D4:3B:AE:8F:40:58:0B:7E:2B:E1:A0:4C:84:A1:6F:3A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CE62CBBE9460E4C61AFF41B20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa Signing time: Wed 18 Feb 2026 02:00:31 +0000 ROA not before: Wed 18 Feb 2026 02:00:31 +0000 ROA not after: Tue 19 May 2026 01:00:31 +0000 asID: 54253 IP address blocks: 159.13.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e6:2c:bb:e9:46:0e:4c:61:af:f4:1b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 18 02:00:31 2026 GMT Not After : May 19 01:00:31 2026 GMT Subject: CN=d93e61df-4039-46ee-a632-d559ddbe19c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4e:ee:a9:32:4b:00:65:aa:79:c3:af:5e:d8: 12:87:e4:86:23:ff:44:50:56:a6:c5:cf:95:09:61: 24:fc:89:2e:03:53:f4:cf:8a:0c:f5:ce:f7:4a:33: 9c:81:03:89:32:a8:bb:d3:03:5a:4c:50:67:4c:c8: 65:c6:35:a5:b9:0f:1e:24:57:99:6c:29:84:4b:07: a4:d1:98:8c:7b:3a:14:1d:ba:0e:39:b9:50:36:bc: b5:79:9b:e2:b8:5f:db:58:1b:ef:48:0b:53:94:c2: ea:ad:ba:1b:e8:59:bd:c1:99:6d:48:a8:46:86:81: af:68:db:32:9d:21:df:eb:22:6a:dc:d4:5a:f6:a8: 8c:ba:59:d2:b2:ca:0e:6f:5a:e1:69:d4:cb:c3:01: 3f:21:e3:f2:9c:76:0f:ab:61:88:bf:7c:c0:4e:67: 28:a1:68:fe:af:39:7a:ca:b3:f7:ff:9d:b4:1a:b6: f4:79:94:80:f5:25:cf:6f:38:fc:99:5a:3c:c9:29: 18:b4:ab:f3:78:5e:f6:1d:f9:9b:c6:e5:c4:07:1b: 9c:9d:20:a7:56:30:04:6b:c8:8e:01:37:21:1c:3e: 92:77:37:d7:c2:b2:87:44:d5:3f:0e:25:7c:f0:2c: 3f:53:85:17:6c:46:3d:e4:88:0f:81:4f:2e:9d:17: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1E:E0:56:D4:3B:AE:8F:40:58:0B:7E:2B:E1:A0:4C:84:A1:6F:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.13.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:c9:13:36:3d:34:b2:f2:06:6d:27:58:79:e4:7c:2b:b3:ae: 5b:71:75:de:1a:22:4a:e6:f2:9c:62:e3:20:31:57:42:20:f1: 71:b3:1f:d1:22:e8:fe:1c:86:fd:77:ac:44:3b:d2:b7:00:50: cc:7a:b6:62:e5:bf:44:81:a9:2a:a2:8d:0b:8e:57:06:4d:f2: c2:31:bc:25:2d:9c:60:54:1c:5d:49:1e:13:2f:4b:57:ac:bb: 71:1a:16:fe:8e:00:a2:aa:6a:5e:78:20:ee:a1:f3:89:f0:ee: 9d:a6:35:2b:b0:77:12:d1:fd:f4:96:86:88:34:b4:58:bd:6a: 50:e9:f1:9c:51:ea:d4:b4:a2:8f:6b:e0:fa:af:60:d7:a9:16: 96:c7:24:60:c9:f2:a4:39:ee:09:47:a8:a5:1f:a3:9b:09:e4: db:50:ef:dd:d4:79:cb:57:84:da:6d:5a:29:d5:51:39:ae:de: 79:ec:83:c5:76:09:94:9a:d1:91:04:48:91:f5:c8:5e:66:7f: 70:1e:a4:d9:4c:1e:12:00:73:34:d7:ce:aa:4e:60:f6:b6:75: 24:de:a6:d7:cb:71:1e:51:b4:c7:f5:c1:0a:82:4e:dd:67:f7: 39:35:95:8a:d7:94:2f:9f:20:ed:a3:e3:19:84:0b:26:e4:d5: f0:96:91:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLLvpRg5MYa/0GyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZDkzZTYxZGYtNDAzOS00NmVlLWE2MzItZDU1OWRkYmUxOWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE7uqTJLAGWqecOvXtgSh+SGI/9EUFamxc+V CWEk/IkuA1P0z4oM9c73SjOcgQOJMqi70wNaTFBnTMhlxjWluQ8eJFeZbCmESwek 0ZiMezoUHboOOblQNry1eZviuF/bWBvvSAtTlMLqrbob6Fm9wZltSKhGhoGvaNsy nSHf6yJq3NRa9qiMulnSssoOb1rhadTLwwE/IePynHYPq2GIv3zATmcooWj+rzl6 yrP3/520Grb0eZSA9SXPbzj8mVo8ySkYtKvzeF72HfmbxuXEBxucnSCnVjAEa8iO ATchHD6SdzfXwrKHRNU/DiV88Cw/U4UXbEY95IgPgU8unRf4qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8e4FbUO66PQFgLfivhoEyEoW86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjM5ZGZmZGQtZTdiNi0z M2RlLTg3ODgtOWU5YjVhM2Q4MDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnw0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHJEzY9NLLyBm0nWHnkfCuzrltxdd4aIkrm8pxi4yAxV0Ig8XGzH9Ei 6P4chv13rEQ70rcAUMx6tmLlv0SBqSqijQuOVwZN8sIxvCUtnGBUHF1JHhMvS1es u3EaFv6OAKKqal54IO6h84nw7p2mNSuwdxLR/fSWhog0tFi9alDp8ZxR6tS0oo9r 4PqvYNepFpbHJGDJ8qQ57glHqKUfo5sJ5NtQ793UectXhNptWinVUTmu3nnsg8V2 CZSa0ZEESJH1yF5mf3AepNlMHhIAczTXzqpOYPa2dSTeptfLcR5RtMf1wQqCTt1n 9zk1lYrXlC+fIO2j4xmECybk1fCWkSQ= -----END CERTIFICATE-----Generated at Mon Mar 2 07:10:37 2026 by rpki-client