$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3d38c3-2745-3fbe-979e-b091f0fd75b7.roa File: 1a3d38c3-2745-3fbe-979e-b091f0fd75b7.roa (raw, json) Hash identifier: zY+JcdQK4jsnaZVYoPObe6gMHsaFPT+oOocqWyOsL1o= Subject key identifier: 2B:E1:F9:7B:3F:82:18:17:AF:4F:49:18:16:F2:FD:8B:36:6A:07:D8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA5F74B6864B95644DD8E5600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3d38c3-2745-3fbe-979e-b091f0fd75b7.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 193.123.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:4b:68:64:b9:56:44:dd:8e:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=6280ccc5-5578-4666-b1a3-3fc26741f8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2f:95:02:b3:a1:92:49:e1:fe:6d:c9:f4:42: 6d:12:e7:0f:4c:74:4b:44:29:00:60:69:73:89:87: 49:94:87:20:16:c3:13:b0:0d:19:36:3b:7a:17:56: f5:93:e2:c3:1b:87:54:73:b6:f3:fa:90:dd:b7:7b: 42:fd:2c:1b:86:75:dc:dc:93:d3:cd:a8:97:ca:e5: 31:94:5a:4a:ee:54:4f:41:cc:48:eb:7f:4e:94:48: fe:5d:22:ec:55:30:67:96:47:2f:17:fd:84:d6:cf: 6e:f1:e5:71:a3:49:74:ca:d3:3b:b7:a3:bd:e2:db: 46:cf:13:3e:10:82:f7:36:c7:07:16:b8:9f:d3:63: f2:0b:24:08:3a:d5:65:f5:38:f3:08:5b:eb:f0:b0: 88:29:c6:9b:b1:2f:74:13:c3:59:d5:87:0c:88:5a: b3:d5:aa:cc:0a:3d:b7:3d:56:e3:8c:f0:b6:2d:06: c5:93:72:2c:49:6d:0a:7a:67:6e:31:b2:44:a6:d2: 55:cf:4b:a5:4f:ab:fd:58:d0:10:ce:7d:4a:29:6d: 70:17:71:bb:99:2c:2a:e9:da:21:14:e9:e0:02:c0: f3:9d:82:b9:5e:78:1b:c1:2b:f9:e0:86:29:40:7e: 36:9c:be:09:2e:59:48:e2:8e:e5:1b:9f:ee:87:84: 38:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E1:F9:7B:3F:82:18:17:AF:4F:49:18:16:F2:FD:8B:36:6A:07:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3d38c3-2745-3fbe-979e-b091f0fd75b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 193.123.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3e:92:ea:ac:ed:80:00:e7:28:0e:0f:37:1e:59:91:61:32: b8:75:a3:88:26:63:bc:f0:13:4e:3a:49:00:01:b0:4d:f9:95: 99:c7:45:9d:ba:db:c0:55:66:a3:92:a5:7d:05:c8:78:f0:95: 92:1d:ae:cb:d4:b3:97:da:31:c5:fa:d5:f2:81:df:6b:3d:73: 31:3f:d5:5a:63:7a:72:73:f3:19:4a:25:f0:f1:4e:a0:e5:3e: ff:dd:67:56:f7:25:aa:96:b4:40:b3:aa:85:dc:3a:ad:ed:79: b1:22:01:b6:e7:b1:00:28:5d:5b:b8:fa:93:32:af:21:1a:92: da:6f:77:e9:84:d9:65:f9:65:7b:88:98:8d:4a:24:42:2e:8b: fb:6c:05:59:80:61:ed:6b:41:60:2c:89:84:d9:71:2c:82:7c: 10:78:cd:e0:5a:d7:1f:99:31:84:22:6c:67:c6:61:d9:6c:a4: 54:27:d1:b0:19:d5:20:18:eb:2c:b7:ad:55:2a:5c:d3:a4:74: 03:6e:38:9f:a8:98:13:40:0c:44:44:4a:b1:52:1a:80:df:12: 0b:a0:df:5c:09:7c:11:cc:4d:cd:5e:73:0b:a8:88:df:7e:bb: ac:0c:fd:47:51:48:6d:6b:8c:a8:38:97:38:e5:09:e6:b7:e4: a7:8a:9b:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90toZLlWRN2OVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NjI4MGNjYzUtNTU3OC00NjY2LWIxYTMtM2ZjMjY3NDFmOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi+VArOhkknh/m3J9EJtEucPTHRLRCkAYGlz iYdJlIcgFsMTsA0ZNjt6F1b1k+LDG4dUc7bz+pDdt3tC/SwbhnXc3JPTzaiXyuUx lFpK7lRPQcxI639OlEj+XSLsVTBnlkcvF/2E1s9u8eVxo0l0ytM7t6O94ttGzxM+ EIL3NscHFrif02PyCyQIOtVl9TjzCFvr8LCIKcabsS90E8NZ1YcMiFqz1arMCj23 PVbjjPC2LQbFk3IsSW0KemduMbJEptJVz0ulT6v9WNAQzn1KKW1wF3G7mSwq6doh FOngAsDznYK5XngbwSv54IYpQH42nL4JLllI4o7lG5/uh4Q4UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvh+Xs/ghgXr09JGBby/Ys2agfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWEzZDM4YzMtMjc0NS0z ZmJlLTk3OWUtYjA5MWYwZmQ3NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwXugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU+kuqs7YAA5ygODzceWZFhMrh1o4gmY7zwE046SQABsE35lZnHRZ26 28BVZqOSpX0FyHjwlZIdrsvUs5faMcX61fKB32s9czE/1VpjenJz8xlKJfDxTqDl Pv/dZ1b3JaqWtECzqoXcOq3tebEiAbbnsQAoXVu4+pMyryEaktpvd+mE2WX5ZXuI mI1KJEIui/tsBVmAYe1rQWAsiYTZcSyCfBB4zeBa1x+ZMYQibGfGYdlspFQn0bAZ 1SAY6yy3rVUqXNOkdANuOJ+omBNADERESrFSGoDfEgug31wJfBHMTc1ecwuoiN9+ u6wM/UdRSG1rjKg4lzjlCea35KeKm1s= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:12 2026 by rpki-client