$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/191f70a9-426f-3c7a-800e-db0b3c8e7a41.roa File: 191f70a9-426f-3c7a-800e-db0b3c8e7a41.roa (raw, json) Hash identifier: t2P/wy4s/LfvppwNVynt9IUwiKTggj63oJLx3NMg5XA= Subject key identifier: 0B:80:12:24:BD:2C:2A:63:62:41:16:E0:9C:42:4C:AF:CA:01:D6:83 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA5F74CBC48088A6621D84880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/191f70a9-426f-3c7a-800e-db0b3c8e7a41.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 132.145.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:4c:bc:48:08:8a:66:21:d8:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=3b08fc12-42e7-4c2c-8644-6ce328d0bbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0d:ce:64:cb:cd:63:ac:bb:07:a1:78:bc:18: 8b:f2:6a:4a:1d:65:82:29:ce:72:8c:cd:51:46:3a: ab:60:0d:a9:50:94:50:32:d1:4e:98:eb:fc:cb:85: 6d:20:c0:b4:d1:13:dd:e6:a4:a0:a7:01:67:34:f3: 87:0a:db:9b:a4:33:e9:e4:95:3e:69:c0:df:3a:e9: aa:ab:21:86:93:b7:d5:8d:7d:2d:e4:04:02:ff:de: b8:72:f1:f7:dc:c3:b4:3e:3f:b4:b9:a2:ff:0c:8c: 5c:2b:52:8c:a2:27:6e:88:b4:fe:6e:e3:7c:ca:b8: 4e:a1:13:e3:25:c2:89:35:30:17:2c:2a:1f:5b:69: 0c:8e:fd:c2:a7:63:43:31:1d:78:1e:3a:42:c8:b0: 0a:48:8c:2f:22:4d:a4:be:02:64:01:20:09:8d:98: 1d:9f:18:6e:63:a4:48:ec:f9:76:b2:fb:46:8c:fa: 67:42:3a:d6:39:c8:32:b0:ac:c4:02:81:8e:08:ab: 47:91:35:90:de:ea:d4:b4:2d:ec:d8:6d:74:f1:1a: c1:40:93:1b:52:ff:2f:d1:1a:9a:41:12:46:af:7b: 58:9d:f2:64:d2:13:83:f9:78:16:9b:83:e6:00:11: a5:28:c0:c3:d7:6e:30:80:0a:38:d5:95:52:3e:9a: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:80:12:24:BD:2C:2A:63:62:41:16:E0:9C:42:4C:AF:CA:01:D6:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/191f70a9-426f-3c7a-800e-db0b3c8e7a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ad:88:24:8e:65:f4:aa:84:1b:75:6a:b1:01:7b:e0:8d:b5: 17:ca:38:e1:ad:13:d7:51:27:9c:68:b6:1c:fa:2e:2b:52:31: 3c:36:59:d9:0f:7e:85:2c:f3:bf:5b:10:2f:5f:d9:c5:06:93: 20:80:02:9e:24:4c:65:40:da:dc:2e:67:ae:57:fe:47:e8:47: 57:44:b7:b4:4a:b3:32:05:13:51:f9:00:86:f7:0a:01:59:1a: 11:1a:7e:e3:fe:2c:73:b1:6d:89:45:69:30:43:62:49:d7:dd: 51:ea:69:34:97:1d:ec:1b:89:cb:95:36:9a:86:38:a1:14:81: 23:ca:91:9d:ea:66:7f:79:f0:27:2e:46:d1:32:57:f5:01:c1: 15:d1:88:3e:89:22:6b:02:cd:89:35:cd:eb:1f:15:a3:7d:bd: 81:b8:8f:89:eb:92:3d:85:48:77:9a:64:ee:32:e4:76:47:20: eb:0b:7b:21:ff:a5:51:a1:3f:19:f5:09:66:07:e3:b5:85:b1: 97:c0:e3:6f:af:6b:a8:46:e4:21:96:6c:23:1a:5e:90:11:d6: d0:96:5b:9a:98:07:15:60:23:6e:49:d9:40:38:13:cf:c2:2f: 57:73:f1:45:57:ea:4b:a1:9b:28:09:c9:8b:4f:c2:a0:84:a6: 68:35:0b:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90y8SAiKZiHYSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk M2IwOGZjMTItNDJlNy00YzJjLTg2NDQtNmNlMzI4ZDBiYmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A3OZMvNY6y7B6F4vBiL8mpKHWWCKc5yjM1R RjqrYA2pUJRQMtFOmOv8y4VtIMC00RPd5qSgpwFnNPOHCtubpDPp5JU+acDfOumq qyGGk7fVjX0t5AQC/964cvH33MO0Pj+0uaL/DIxcK1KMoiduiLT+buN8yrhOoRPj JcKJNTAXLCofW2kMjv3Cp2NDMR14HjpCyLAKSIwvIk2kvgJkASAJjZgdnxhuY6RI 7Pl2svtGjPpnQjrWOcgysKzEAoGOCKtHkTWQ3urUtC3s2G108RrBQJMbUv8v0Rqa QRJGr3tYnfJk0hOD+XgWm4PmABGlKMDD124wgAo41ZVSPprraQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuAEiS9LCpjYkEW4JxCTK/KAdaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTkxZjcwYTktNDI2Zi0z YzdhLTgwMGUtZGIwYjNjOGU3YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChJFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGtiCSOZfSqhBt1arEBe+CNtRfKOOGtE9dRJ5xothz6LitSMTw2WdkP foUs879bEC9f2cUGkyCAAp4kTGVA2twuZ65X/kfoR1dEt7RKszIFE1H5AIb3CgFZ GhEafuP+LHOxbYlFaTBDYknX3VHqaTSXHewbicuVNpqGOKEUgSPKkZ3qZn958Ccu RtEyV/UBwRXRiD6JImsCzYk1zesfFaN9vYG4j4nrkj2FSHeaZO4y5HZHIOsLeyH/ pVGhPxn1CWYH47WFsZfA42+va6hG5CGWbCMaXpAR1tCWW5qYBxVgI25J2UA4E8/C L1dz8UVX6kuhmygJyYtPwqCEpmg1CwI= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:29 2026 by rpki-client