$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11096db7-cad7-30cf-9e41-0bbc8878d393.roa File: 11096db7-cad7-30cf-9e41-0bbc8878d393.roa (raw, json) Hash identifier: n0qc/4e64sIy/ZujblIUOt+rbW8hwwD5RvpijIJ0zIE= Subject key identifier: 8E:3C:DF:52:4F:74:D6:AD:0A:17:EA:99:B3:02:F5:04:F2:A3:AC:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E696D4C5D39A8968941D0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11096db7-cad7-30cf-9e41-0bbc8878d393.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 147.154.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:69:6d:4c:5d:39:a8:96:89:41:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=6f4774e9-349b-4988-b909-54dcf5d3bff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c1:37:01:5a:90:45:cd:1e:5e:00:83:41:cc: 41:68:7e:90:5f:16:7d:be:18:4c:56:29:35:2e:8c: ae:59:ba:34:07:0a:cd:0c:62:8a:4e:18:7e:ff:88: 6a:3a:a7:d9:e8:62:0a:a2:c2:f4:19:0a:0a:84:3e: fc:91:91:d8:56:93:87:9f:74:74:a3:5c:3e:33:98: 22:c7:b3:2e:20:e8:6b:9a:32:90:7e:f8:7e:81:15: 43:5f:95:4d:6d:f5:da:30:ac:48:54:3a:82:3e:35: ca:82:68:72:bd:5d:40:a8:ed:74:c8:0d:d0:39:f5: 07:ee:bf:74:ef:13:32:f0:4b:66:a3:03:83:f4:8c: 1a:b1:a8:06:b4:c6:df:29:f8:35:6f:66:20:48:d5: 13:16:b5:cb:c7:1a:17:c9:77:14:dc:5a:57:80:94: c8:be:37:ea:dc:31:11:de:c3:eb:1d:38:2a:1c:96: ef:e6:b0:b4:32:68:5e:1e:95:ac:c0:91:59:8f:1c: d9:1f:8b:11:be:66:91:60:ce:b5:ee:b1:bc:3a:5d: d2:52:4f:03:b9:71:b1:cc:7c:d0:e4:7a:0e:1c:31: 0a:8f:17:e6:34:d3:97:bd:8d:26:d9:44:79:93:03: 10:c9:c8:17:d5:fd:9b:92:9b:32:bb:ba:0b:28:67: 9e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3C:DF:52:4F:74:D6:AD:0A:17:EA:99:B3:02:F5:04:F2:A3:AC:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11096db7-cad7-30cf-9e41-0bbc8878d393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:bb:28:af:aa:af:a8:18:be:83:4b:25:a0:5d:75:25:ea:f4: 47:68:0d:54:f6:e5:97:1a:cd:ec:9b:51:e7:45:50:a2:a7:5d: 29:cf:3e:5a:aa:c0:7b:e6:17:45:15:25:72:70:4d:09:e4:01: 39:21:84:f1:80:b0:ad:c5:76:23:dc:d4:ea:31:b3:23:f1:b2: 07:ec:b9:1f:f1:6d:a7:eb:63:1e:90:7f:2b:a6:7a:e0:54:7d: af:5d:f1:91:b2:62:65:fd:ff:bb:ad:ca:bd:16:b1:a3:59:64: 6b:d3:c7:18:f0:e3:a9:86:78:22:61:f8:cc:26:2d:bc:c8:24: 32:78:23:f3:57:bd:80:aa:e8:0b:0a:fd:eb:e8:3f:1e:0f:34: d0:65:15:cc:df:6a:7b:77:4c:73:83:bc:dd:21:d9:0a:ae:3e: 7c:f8:a7:e8:43:b1:bd:ec:15:f5:71:d2:0a:bb:ff:4c:34:ba: f5:ff:00:f6:d3:a1:9c:da:29:5f:9f:8a:12:4a:b9:39:f1:bc: 04:b6:fc:a6:b3:e4:ee:2b:6b:3c:76:3c:c1:29:67:7f:06:f6: 66:53:14:19:f4:0f:2e:73:ef:4e:d6:41:81:a9:94:a7:be:d9: f5:d0:94:ee:a1:a2:e0:fd:6f:d9:03:f8:9f:e6:9e:d5:5c:87: 89:52:36:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXmltTF05qJaJQdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NmY0Nzc0ZTktMzQ5Yi00OTg4LWI5MDktNTRkY2Y1ZDNiZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cE3AVqQRc0eXgCDQcxBaH6QXxZ9vhhMVik1 LoyuWbo0BwrNDGKKThh+/4hqOqfZ6GIKosL0GQoKhD78kZHYVpOHn3R0o1w+M5gi x7MuIOhrmjKQfvh+gRVDX5VNbfXaMKxIVDqCPjXKgmhyvV1AqO10yA3QOfUH7r90 7xMy8EtmowOD9IwasagGtMbfKfg1b2YgSNUTFrXLxxoXyXcU3FpXgJTIvjfq3DER 3sPrHTgqHJbv5rC0MmheHpWswJFZjxzZH4sRvmaRYM617rG8Ol3SUk8DuXGxzHzQ 5HoOHDEKjxfmNNOXvY0m2UR5kwMQycgX1f2bkpsyu7oLKGee5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4831JPdNatChfqmbMC9QTyo6yJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTEwOTZkYjctY2FkNy0z MGNmLTllNDEtMGJiYzg4NzhkMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+7KK+qr6gYvoNLJaBddSXq9EdoDVT25ZcazeybUedFUKKnXSnPPlqq wHvmF0UVJXJwTQnkATkhhPGAsK3FdiPc1OoxsyPxsgfsuR/xbafrYx6QfyumeuBU fa9d8ZGyYmX9/7utyr0WsaNZZGvTxxjw46mGeCJh+MwmLbzIJDJ4I/NXvYCq6AsK /evoPx4PNNBlFczfant3THODvN0h2QquPnz4p+hDsb3sFfVx0gq7/0w0uvX/APbT oZzaKV+fihJKuTnxvAS2/Kaz5O4razx2PMEpZ38G9mZTFBn0Dy5z707WQYGplKe+ 2fXQlO6houD9b9kD+J/mntVch4lSNus= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:22 2026 by rpki-client