$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa File: b9f5a37a-e848-3f03-9df0-961bca4da222.roa (raw, json) Hash identifier: 9N4yP+XiTGpPMwto1z6IdFqf4+4oOX8EsLcA5ixRZUo= Subject key identifier: A4:D9:10:C2:F0:93:D2:C4:DB:F9:47:05:84:BE:1F:6E:C9:4F:1E:33 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CE62CB2B77CE9B9A883BF6C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa Signing time: Wed 18 Feb 2026 02:00:31 +0000 ROA not before: Wed 18 Feb 2026 02:00:31 +0000 ROA not after: Tue 19 May 2026 01:00:31 +0000 asID: 54253 IP address blocks: 137.131.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e6:2c:b2:b7:7c:e9:b9:a8:83:bf:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 18 02:00:31 2026 GMT Not After : May 19 01:00:31 2026 GMT Subject: CN=482154d2-f18c-48e0-9a55-eb7c630ab3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8a:6d:97:dc:55:bd:e6:6a:c5:4a:b5:d6:07: 95:60:71:dd:08:70:07:3b:8f:6e:1b:a1:38:7e:59: eb:0d:0d:ff:b6:3e:06:a7:9a:47:3b:b0:1d:43:a1: d1:50:27:93:7f:58:b1:f1:f1:6a:c7:d5:68:2a:13: 7b:af:32:94:22:eb:27:1e:0d:ca:fc:27:4e:19:1a: de:b7:8c:e4:46:08:5e:cd:21:91:a7:20:cb:26:fc: 35:5b:7b:95:cb:7a:65:58:01:7c:75:a0:80:6f:89: 33:2f:7a:e4:54:c9:ae:21:0e:ec:82:48:55:53:c1: cb:56:0b:62:ad:58:91:f2:05:49:49:c8:86:57:b8: 61:4e:a1:6e:b2:6f:be:c5:f0:ad:40:20:ac:4b:91: 57:6c:f0:0c:67:de:a5:48:0e:aa:56:ad:65:88:dc: 48:28:25:d8:bc:91:dc:4d:91:a2:c4:58:0b:3e:17: d0:98:94:9e:d9:09:73:ba:31:40:3e:37:c5:6f:7d: ae:cb:be:7e:63:b0:19:88:0b:58:f2:e4:75:18:9d: 72:38:c8:3a:17:bd:8b:30:4f:d4:61:53:b0:aa:d4: 80:23:7b:42:7a:30:8a:e4:db:ec:bf:9e:fb:30:eb: 33:f4:c7:f7:6e:e3:c9:d1:5b:c4:7e:94:0d:2a:26: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D9:10:C2:F0:93:D2:C4:DB:F9:47:05:84:BE:1F:6E:C9:4F:1E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 137.131.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:08:38:ce:eb:38:92:b2:ae:cf:e0:c0:fc:2a:17:19:17:6d: 0b:4c:f9:f8:55:51:82:c0:8b:30:61:fd:00:5f:f4:b0:fd:a0: 13:d2:c9:1f:df:ed:77:f1:41:81:a1:37:a9:d9:e2:d6:aa:52: 0a:74:f7:89:3e:37:b2:ec:d4:47:95:26:80:1a:d3:be:e1:ba: 1e:ad:2f:60:fc:47:86:db:04:6c:d9:f8:48:55:5d:84:cb:76: f6:e3:41:f4:48:4e:fd:f5:56:c0:14:15:af:7c:83:3b:81:43: 71:ed:00:aa:36:3a:00:9f:15:d5:5d:d1:9f:78:d8:be:df:f8: 4b:75:ee:5a:c4:b1:8a:5e:af:00:0d:e7:df:2f:37:8d:a5:30: 38:ac:88:df:1e:1c:f2:34:eb:e1:07:7f:59:f7:50:df:d3:11: 98:1f:c7:01:67:58:10:be:61:68:a8:87:a3:73:b0:62:0c:c0: e1:f7:d0:26:b9:a5:3e:64:71:13:01:d6:8b:d8:ae:3c:95:d9: 69:b3:b1:42:11:ff:10:48:de:c6:aa:16:e0:fe:22:0d:8e:89: 79:a8:a2:56:20:b1:f9:9c:1a:91:16:f3:35:27:6f:d4:e9:98: 9e:45:55:02:30:3c:6c:d6:a9:ec:98:f8:f7:0f:58:b0:cf:e3: 64:ff:cc:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLLK3fOm5qIO/bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk NDgyMTU0ZDItZjE4Yy00OGUwLTlhNTUtZWI3YzYzMGFiM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIptl9xVveZqxUq11geVYHHdCHAHO49uG6E4 flnrDQ3/tj4Gp5pHO7AdQ6HRUCeTf1ix8fFqx9VoKhN7rzKUIusnHg3K/CdOGRre t4zkRghezSGRpyDLJvw1W3uVy3plWAF8daCAb4kzL3rkVMmuIQ7sgkhVU8HLVgti rViR8gVJSciGV7hhTqFusm++xfCtQCCsS5FXbPAMZ96lSA6qVq1liNxIKCXYvJHc TZGixFgLPhfQmJSe2QlzujFAPjfFb32uy75+Y7AZiAtY8uR1GJ1yOMg6F72LME/U YVOwqtSAI3tCejCK5Nvsv577MOsz9Mf3buPJ0VvEfpQNKiYjiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTZEMLwk9LE2/lHBYS+H27JTx4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjlmNWEzN2EtZTg0OC0z ZjAzLTlkZjAtOTYxYmNhNGRhMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiYNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYIOM7rOJKyrs/gwPwqFxkXbQtM+fhVUYLAizBh/QBf9LD9oBPSyR/f 7XfxQYGhN6nZ4taqUgp094k+N7Ls1EeVJoAa077huh6tL2D8R4bbBGzZ+EhVXYTL dvbjQfRITv31VsAUFa98gzuBQ3HtAKo2OgCfFdVd0Z942L7f+Et17lrEsYperwAN 598vN42lMDisiN8eHPI06+EHf1n3UN/TEZgfxwFnWBC+YWioh6NzsGIMwOH30Ca5 pT5kcRMB1ovYrjyV2WmzsUIR/xBI3saqFuD+Ig2OiXmoolYgsfmcGpEW8zUnb9Tp mJ5FVQIwPGzWqeyY+PcPWLDP42T/zEs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:37:13 2026 by rpki-client