$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f009b2db-a105-342d-9a34-13cd3745128d.roa File: f009b2db-a105-342d-9a34-13cd3745128d.roa (raw, json) Hash identifier: CA3iW3qd7PDojxvT4sQQnonbShyW6yL+qLgK8ECWqUo= Subject key identifier: 1C:6B:9E:2B:0E:D8:F5:4F:81:71:6C:8F:E7:88:EA:3C:B4:BD:B6:5E Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAFBC816020AECFF79ABC2800 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f009b2db-a105-342d-9a34-13cd3745128d.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 144.25.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:81:60:20:ae:cf:f7:9a:bc:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=0e142f13-92b5-4611-9430-369896e57fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:ec:48:5d:0f:96:60:2b:5c:f7:5e:be:eb: 62:61:65:66:b8:b1:fc:a7:af:17:a6:28:c4:2e:82: 8b:ed:fa:2e:fc:95:17:fd:95:56:0f:ac:6e:44:0e: 4d:6c:0e:c4:5d:b7:aa:bd:96:db:92:69:0e:19:fd: 43:56:62:72:ba:ae:14:88:eb:aa:c6:63:bc:02:40: f8:14:41:1b:45:32:f8:cb:02:53:dd:31:e7:b3:b3: 88:84:be:2e:d2:3d:a6:22:d2:c2:96:d4:a6:3c:ff: 79:18:2f:0b:55:70:06:d2:47:dd:0a:eb:5a:74:7d: 35:63:98:11:be:80:b1:8f:0b:cc:90:8e:7c:aa:62: 7c:ac:d7:82:42:82:2c:d0:16:d4:2c:b8:cf:ee:72: c0:21:70:9f:06:19:86:1e:d5:bf:de:54:bc:30:63: a3:3c:b5:65:2a:d9:20:09:6f:17:52:7e:4c:07:31: 20:8e:24:0e:ee:f0:ee:27:ac:c4:89:c8:92:ce:23: 08:39:b0:23:82:4c:1a:ed:54:f1:be:cb:7a:eb:95: c0:c1:e3:75:d9:12:eb:6b:4c:24:a9:45:7c:a8:24: 19:c6:7b:d2:f4:e4:0d:30:04:0b:9d:97:46:2b:55: 36:fa:bb:fe:f9:2d:ec:fc:39:84:50:53:e9:26:f0: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6B:9E:2B:0E:D8:F5:4F:81:71:6C:8F:E7:88:EA:3C:B4:BD:B6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f009b2db-a105-342d-9a34-13cd3745128d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:9b:20:0a:c6:29:ee:61:30:c0:85:4e:24:12:45:17:7e:37: f8:e3:a2:85:6d:37:0d:1a:f6:d3:da:89:32:87:bf:88:bc:2e: 0e:c0:a3:f0:3f:8a:65:e9:06:33:a9:dd:0a:fe:25:0c:50:12: c8:23:49:47:c4:8c:fe:8b:3b:5c:bf:a2:b1:27:e3:9d:fb:c4: 30:16:51:d5:94:21:3a:e8:89:6b:9a:27:84:03:c3:3d:6b:2f: ae:32:1d:aa:c3:09:99:a4:6a:89:dc:5e:34:b9:e7:65:9d:aa: 43:c9:26:d7:21:63:4e:7e:e2:fe:51:24:26:10:27:21:f2:00: ba:c3:bb:b4:ea:8c:42:78:b5:e4:f3:fe:fd:5b:f0:12:52:f2: a8:cd:0d:6c:ee:d7:c2:30:c1:e2:33:25:ab:4e:a9:b6:69:52: 0a:13:dd:cd:a7:4d:0b:8c:5f:28:8d:dc:71:7a:24:b4:b2:1a: 25:e4:45:17:99:0b:6a:8d:0c:09:c7:e6:f5:53:ca:ac:b7:3b: f9:5b:49:38:ee:0a:0a:a5:b8:a4:b7:cb:36:cb:f7:32:fc:bf: a1:0b:08:6f:76:4f:a8:9a:e9:ac:87:08:18:a5:e7:53:ef:1a: fa:9c:96:f0:27:33:f4:03:69:24:d5:0e:d9:15:cc:a5:ca:c8: 96:7c:bf:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIFgIK7P95q8KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk MGUxNDJmMTMtOTJiNS00NjExLTk0MzAtMzY5ODk2ZTU3ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltPsSF0PlmArXPdevutiYWVmuLH8p68XpijE LoKL7fou/JUX/ZVWD6xuRA5NbA7EXbeqvZbbkmkOGf1DVmJyuq4UiOuqxmO8AkD4 FEEbRTL4ywJT3THns7OIhL4u0j2mItLCltSmPP95GC8LVXAG0kfdCutadH01Y5gR voCxjwvMkI58qmJ8rNeCQoIs0BbULLjP7nLAIXCfBhmGHtW/3lS8MGOjPLVlKtkg CW8XUn5MBzEgjiQO7vDuJ6zEiciSziMIObAjgkwa7VTxvst665XAweN12RLra0wk qUV8qCQZxnvS9OQNMAQLnZdGK1U2+rv++S3s/DmEUFPpJvCEewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxrnisO2PVPgXFsj+eI6jy0vbZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZjAwOWIyZGItYTEwNS0z NDJkLTlhMzQtMTNjZDM3NDUxMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkBl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+bIArGKe5hMMCFTiQSRRd+N/jjooVtNw0a9tPaiTKHv4i8Lg7Ao/A/ imXpBjOp3Qr+JQxQEsgjSUfEjP6LO1y/orEn4537xDAWUdWUITroiWuaJ4QDwz1r L64yHarDCZmkaoncXjS552WdqkPJJtchY05+4v5RJCYQJyHyALrDu7TqjEJ4teTz /v1b8BJS8qjNDWzu18IwweIzJatOqbZpUgoT3c2nTQuMXyiN3HF6JLSyGiXkRReZ C2qNDAnH5vVTyqy3O/lbSTjuCgqluKS3yzbL9zL8v6ELCG92T6ia6ayHCBil51Pv GvqclvAnM/QDaSTVDtkVzKXKyJZ8vxA= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:41 2026 by rpki-client