$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa File: 0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa (raw, json) Hash identifier: dDDvevsmObCZgFyjIlpk3aw2a7qN0tk9EtuW+J9US0w= Subject key identifier: 77:B3:C3:11:9E:48:90:BD:B4:78:16:DB:7D:54:7B:52:CE:F0:DA:83 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA26FFEB9EC3929614B0EBC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 192.29.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:26:ff:eb:9e:c3:92:96:14:b0:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=c6384619-aa7d-4f82-a82b-5b5503f87b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:89:f9:17:53:d1:e8:23:e7:fc:02:74:c2: 3c:9b:db:f6:4b:8b:98:04:43:60:48:c1:a0:74:89: 38:79:44:b9:17:97:42:e4:f5:50:52:48:54:95:97: 8b:34:3d:5a:89:6a:53:d9:da:dd:9d:b8:d0:4d:5b: c8:3d:0e:f4:3a:69:b3:77:48:26:89:f2:99:65:b5: 2a:e7:7b:39:70:59:6f:7e:62:ad:2e:3a:57:ab:97: 9a:1b:59:ee:38:77:a2:39:93:94:eb:8b:bd:11:51: 6d:da:1a:74:72:bd:68:5b:5e:e4:fc:cc:2a:d0:01: 8e:d5:4e:58:c6:12:aa:e9:83:52:c8:ac:a5:cc:19: f6:44:07:72:90:49:75:5b:f2:5e:d5:6b:85:8b:f9: 8d:1d:41:fb:9c:9f:88:b7:89:c3:ed:79:ed:ad:be: 1e:f4:71:a9:40:33:90:f7:be:7f:cc:25:fd:f1:30: 73:33:e4:df:b4:fb:f2:8b:b6:10:fb:45:d6:04:e7: 76:d9:fd:37:c6:6e:92:68:58:35:3b:18:35:89:70: ab:7f:e5:c9:52:e8:b1:77:d9:84:ea:e8:fa:51:c9: a1:19:22:a2:64:b8:d3:ba:e9:50:91:65:81:42:7f: 0c:a4:0c:ad:db:3a:11:98:e4:cc:67:c5:b9:e6:cd: 92:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B3:C3:11:9E:48:90:BD:B4:78:16:DB:7D:54:7B:52:CE:F0:DA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:de:ed:9c:77:2e:df:f2:44:3c:5b:39:b4:fa:28:8c:64:71: a0:63:f7:79:b5:cb:e2:13:d6:e1:4a:cd:09:7c:43:14:35:13: 73:22:06:bb:9a:d7:a3:f7:0b:5a:a7:8c:b9:19:e4:f2:91:94: 66:b7:01:09:6d:cb:bf:2a:5a:b7:9d:0f:94:6a:e0:ac:e3:01: c3:83:f9:f6:28:e0:47:ad:d1:e6:67:d8:ba:9c:76:36:d2:d7: 5b:30:be:49:29:39:99:5e:ab:07:03:93:d6:f1:4a:1d:8c:b9: ac:a9:52:e6:27:e4:3c:65:fc:20:19:25:35:cc:c8:7a:6c:ec: 61:bb:e8:ed:da:63:ac:b4:40:09:4f:df:3b:39:7e:70:50:52: 46:29:3e:6a:0d:99:11:b7:2f:45:6c:15:0d:19:2e:7f:94:7d: ce:fd:f2:d5:c4:0a:ba:53:1b:5c:0a:ea:5e:f1:3d:7b:94:8f: 77:4a:f4:80:da:ce:1b:7e:90:55:89:94:82:3c:2c:68:e1:5d: 70:d5:d1:cf:3a:b3:65:7c:1c:a1:cc:ca:cc:57:a8:a3:b8:3e: 7e:15:b3:9a:9a:d7:f8:69:4d:32:d9:96:93:d3:41:28:98:c6: 0c:8c:98:ed:73:5c:ba:be:c8:7a:2e:36:ce:6c:28:2b:c3:bd: 3d:a7:3b:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJv/rnsOSlhSw68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk YzYzODQ2MTktYWE3ZC00ZjgyLWE4MmItNWI1NTAzZjg3YjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl6J+RdT0egj5/wCdMI8m9v2S4uYBENgSMGg dIk4eUS5F5dC5PVQUkhUlZeLND1aiWpT2drdnbjQTVvIPQ70Ommzd0gmifKZZbUq 53s5cFlvfmKtLjpXq5eaG1nuOHeiOZOU64u9EVFt2hp0cr1oW17k/Mwq0AGO1U5Y xhKq6YNSyKylzBn2RAdykEl1W/Je1WuFi/mNHUH7nJ+It4nD7Xntrb4e9HGpQDOQ 975/zCX98TBzM+TftPvyi7YQ+0XWBOd22f03xm6SaFg1Oxg1iXCrf+XJUuixd9mE 6uj6UcmhGSKiZLjTuulQkWWBQn8MpAyt2zoRmOTMZ8W55s2SAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHezwxGeSJC9tHgW231Ue1LO8NqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDAxNjQzM2QtOGYxYy0z NDFhLWE1ZWMtOWVmZDVjNmFlZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHe7Zx3Lt/yRDxbObT6KIxkcaBj93m1y+IT1uFKzQl8QxQ1E3MiBrua 16P3C1qnjLkZ5PKRlGa3AQlty78qWredD5Rq4KzjAcOD+fYo4Eet0eZn2LqcdjbS 11swvkkpOZleqwcDk9bxSh2MuaypUuYn5Dxl/CAZJTXMyHps7GG76O3aY6y0QAlP 3zs5fnBQUkYpPmoNmRG3L0VsFQ0ZLn+Ufc798tXECrpTG1wK6l7xPXuUj3dK9IDa zht+kFWJlII8LGjhXXDV0c86s2V8HKHMysxXqKO4Pn4Vs5qa1/hpTTLZlpPTQSiY xgyMmO1zXLq+yHouNs5sKCvDvT2nO1A= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:29 2026 by rpki-client