$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa File: 0122ee3f-e947-3c1e-888d-9590ebad2788.roa (raw, json) Hash identifier: 70DrtT2k2BNqS0YN4UnjEy07wc1qUdQjSCFPQVFVJDA= Subject key identifier: 2F:99:68:F2:5F:27:3C:06:21:AF:85:D3:DE:2F:F8:9F:80:61:8A:36 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA272FA12EEDB9A8CD663B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 140.238.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:2f:a1:2e:ed:b9:a8:cd:66:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=7316ae9d-d11a-4c51-91d6-ed1481a0772d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:fc:e4:15:c9:4e:81:21:b9:ac:95:b8:18: b6:e6:3d:f9:d9:7e:a3:11:47:42:3c:2a:9f:30:f9: 43:49:a7:b8:79:3e:3e:48:7a:2a:d7:06:03:56:e3: 40:f5:65:cb:d7:a7:77:45:4d:97:a4:da:e1:4f:e7: 0b:d8:3c:ce:9b:1c:4c:54:fd:8e:f9:77:8c:75:f7: 06:6d:53:0d:d5:9c:d6:08:e9:9a:0d:a0:25:97:d7: da:5b:36:73:c6:6a:88:47:73:d8:5e:f6:27:a8:f3: e0:03:b6:bb:c3:76:74:b0:16:c3:23:aa:72:0d:3b: ff:2d:63:99:7c:cf:74:4d:71:80:96:03:c0:25:75: e6:6c:f0:f6:29:f5:b6:a7:ba:26:bc:b7:ff:b7:26: 00:30:12:b6:f2:57:30:f7:ef:27:53:83:05:d2:9b: a3:40:20:6b:ab:c2:92:ff:6c:b4:56:04:da:0c:44: 82:a1:2c:bd:ed:7d:72:d8:64:5a:fb:9e:22:ff:e8: 4f:4a:58:d3:cf:5e:15:21:18:24:31:1c:50:33:92: 3e:d9:e0:c9:97:b6:d7:ab:30:b1:a0:79:8d:f6:db: 79:6e:ef:66:f3:33:62:89:ab:69:b6:f2:d4:5a:eb: 8e:a0:5f:fc:d2:51:23:93:f7:50:08:5b:79:08:b9: 00:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:99:68:F2:5F:27:3C:06:21:AF:85:D3:DE:2F:F8:9F:80:61:8A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:99:a0:99:1c:da:ce:17:51:9c:2a:ad:70:56:9b:9e:ca:f7: 80:69:65:7b:b9:79:24:4b:18:87:a2:1a:77:d4:06:99:0f:02: 69:14:fc:2e:db:ec:84:77:2c:3a:92:80:45:32:60:d3:ae:19: 05:0c:a1:a1:2d:09:1b:fd:40:4f:c4:e1:1a:89:9a:14:96:a0: ff:6e:5d:7e:37:cd:de:bc:58:4c:56:ee:18:40:93:a9:64:da: c7:1d:1d:8b:c2:fc:c9:32:c7:88:ad:a6:b4:a4:79:65:05:a5: 38:d2:0f:f8:18:86:2f:38:63:ad:65:8b:ec:be:46:bd:4c:23: 04:1f:d3:ec:aa:a4:e4:28:05:ac:5d:f8:69:8b:37:c6:46:1d: 3a:18:1a:0f:24:f8:61:1c:73:78:7a:9a:6e:bd:d6:cf:0c:14: 15:3d:31:f8:82:18:85:8e:4f:6e:74:2a:bb:cc:0e:7f:63:f3: 43:90:7a:88:e4:ab:bc:b7:03:3b:7c:9c:fa:52:1c:88:9a:c2: d9:99:5e:ca:16:07:32:ab:10:35:04:ea:d0:92:be:a9:a1:9a: 3c:74:df:f5:ed:93:80:4a:d5:1a:75:14:80:b7:4c:91:df:26: a8:1a:93:e9:4b:c5:9f:34:6c:48:b7:9d:65:b8:fb:1b:3d:31: 95:b6:2c:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJy+hLu25qM1mOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NzMxNmFlOWQtZDExYS00YzUxLTkxZDYtZWQxNDgxYTA3NzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+385BXJToEhuayVuBi25j352X6jEUdCPCqf MPlDSae4eT4+SHoq1wYDVuNA9WXL16d3RU2XpNrhT+cL2DzOmxxMVP2O+XeMdfcG bVMN1ZzWCOmaDaAll9faWzZzxmqIR3PYXvYnqPPgA7a7w3Z0sBbDI6pyDTv/LWOZ fM90TXGAlgPAJXXmbPD2KfW2p7omvLf/tyYAMBK28lcw9+8nU4MF0pujQCBrq8KS /2y0VgTaDESCoSy97X1y2GRa+54i/+hPSljTz14VIRgkMRxQM5I+2eDJl7bXqzCx oHmN9tt5bu9m8zNiiatptvLUWuuOoF/80lEjk/dQCFt5CLkAJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+ZaPJfJzwGIa+F094v+J+AYYo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDEyMmVlM2YtZTk0Ny0z YzFlLTg4OGQtOTU5MGViYWQyNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjO6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeZoJkc2s4XUZwqrXBWm57K94BpZXu5eSRLGIeiGnfUBpkPAmkU/C7b 7IR3LDqSgEUyYNOuGQUMoaEtCRv9QE/E4RqJmhSWoP9uXX43zd68WExW7hhAk6lk 2scdHYvC/Mkyx4itprSkeWUFpTjSD/gYhi84Y61li+y+Rr1MIwQf0+yqpOQoBaxd +GmLN8ZGHToYGg8k+GEcc3h6mm691s8MFBU9MfiCGIWOT250KrvMDn9j80OQeojk q7y3Azt8nPpSHIiawtmZXsoWBzKrEDUE6tCSvqmhmjx03/Xtk4BK1Rp1FIC3TJHf Jqgak+lLxZ80bEi3nWW4+xs9MZW2LGM= -----END CERTIFICATE-----Generated at Thu Feb 26 03:28:02 2026 by rpki-client