$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b48ff0-be7b-3444-a170-06a462458845.roa File: 24b48ff0-be7b-3444-a170-06a462458845.roa (raw, json) Hash identifier: l3qjwEHr13EF0l3VNtgxOie9fv7yvPqLCdsOt/Cx2Kg= Subject key identifier: 2F:93:72:BC:AF:3D:E9:57:B5:14:90:6B:06:82:D6:30:8B:38:0D:86 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAB8C48298DFA16C19FD1AA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b48ff0-be7b-3444-a170-06a462458845.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 31898 IP address blocks: 136.248.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:48:29:8d:fa:16:c1:9f:d1:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=2d6976e8-2dbb-4a08-a619-0d5209326398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:33:80:c1:cb:02:87:33:d3:a8:a1:c6:5a: 4b:7a:2b:6b:a6:d0:0b:99:db:a5:85:0f:8d:d5:35: 86:bf:0b:de:47:76:99:bc:86:ce:bc:59:11:ec:f6: 40:74:46:74:c9:21:15:ff:7c:a5:f1:99:27:c9:80: 51:ba:0d:dc:10:d3:c3:e1:14:a8:77:f2:c6:01:20: 47:eb:75:5e:68:ec:cd:e0:b8:5d:b9:cd:8a:91:b5: 1b:65:b8:b4:81:64:68:2b:5b:43:a2:14:9b:d3:c0: f3:0a:96:be:a8:bc:20:a4:b2:83:9b:d9:f3:29:b9: 2f:c2:e2:27:c3:fa:d1:52:e5:1e:f9:a1:52:94:54: 4d:19:65:21:21:ff:94:d0:0e:af:80:2d:3f:1f:cd: 68:0d:60:25:68:ef:9c:d5:73:4b:de:78:be:b2:78: b2:a2:3b:5a:f8:3c:91:e5:ba:d1:e2:37:2f:84:ba: 4a:2e:3a:23:a7:72:f9:6b:8d:9a:f5:1b:41:7e:8c: fa:78:17:38:ce:0c:94:f4:9c:80:24:ad:21:df:10: 38:0a:e3:5c:84:e5:cc:5c:0e:19:b4:13:d8:86:16: e6:3a:62:0e:23:8c:d3:dc:95:e3:7b:2d:37:1a:97: b0:3f:00:54:e4:7b:36:04:f7:67:9c:67:63:60:a1: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:93:72:BC:AF:3D:E9:57:B5:14:90:6B:06:82:D6:30:8B:38:0D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b48ff0-be7b-3444-a170-06a462458845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:0d:36:49:e5:be:00:48:27:79:17:b5:c9:2b:fa:70:16:45: 6e:6b:74:ad:10:44:5c:54:ae:dc:1f:4e:04:47:e1:1d:82:3a: 25:19:db:d7:80:14:ea:77:0f:41:8b:46:71:99:b3:b6:28:44: c9:4d:f4:3a:84:3a:7b:02:ef:2d:a2:49:13:d8:2d:15:a4:31: 38:30:d6:37:fd:d6:e3:a3:d5:00:2c:8c:be:06:17:ef:b5:cb: 26:9c:f2:c8:f2:ce:6f:d3:01:c8:ae:22:5a:86:a0:ca:08:eb: d3:e2:15:19:b7:6e:ec:5b:db:41:2b:1e:d8:0b:19:60:ec:3c: 5b:25:2f:bd:d2:8c:79:f3:23:17:ea:a9:01:1c:79:2d:e6:28: 75:29:05:e2:a2:d1:41:2c:df:d4:7f:6e:3e:96:73:5e:fa:96: ed:9d:b3:f5:cb:ec:12:88:8f:67:21:fd:57:4e:7e:ba:89:95: cd:79:67:34:01:d7:89:58:8f:8e:20:5d:56:99:84:97:2e:bd: 10:e7:7e:81:7f:aa:c6:d2:0c:62:2b:4f:f5:c0:53:de:37:bb: d6:03:0a:67:57:a2:3c:48:8c:a0:b0:f6:2c:6d:a8:d6:3f:7c: ce:a2:03:33:2c:b4:2b:ad:a4:e5:1e:c1:d7:d7:56:41:0d:c8: e2:1f:d5:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjEgpjfoWwZ/RqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk MmQ2OTc2ZTgtMmRiYi00YTA4LWE2MTktMGQ1MjA5MzI2Mzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgQzgMHLAocz06ihxlpLeitrptALmdulhQ+N 1TWGvwveR3aZvIbOvFkR7PZAdEZ0ySEV/3yl8ZknyYBRug3cENPD4RSod/LGASBH 63VeaOzN4Lhduc2KkbUbZbi0gWRoK1tDohSb08DzCpa+qLwgpLKDm9nzKbkvwuIn w/rRUuUe+aFSlFRNGWUhIf+U0A6vgC0/H81oDWAlaO+c1XNL3ni+sniyojta+DyR 5brR4jcvhLpKLjojp3L5a42a9RtBfoz6eBc4zgyU9JyAJK0h3xA4CuNchOXMXA4Z tBPYhhbmOmIOI4zT3JXjey03GpewPwBU5Hs2BPdnnGdjYKFfTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+TcryvPelXtRSQawaC1jCLOA2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjRiNDhmZjAtYmU3Yi0z NDQ0LWExNzAtMDZhNDYyNDU4ODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiPjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGANNknlvgBIJ3kXtckr+nAWRW5rdK0QRFxUrtwfTgRH4R2COiUZ29eA FOp3D0GLRnGZs7YoRMlN9DqEOnsC7y2iSRPYLRWkMTgw1jf91uOj1QAsjL4GF++1 yyac8sjyzm/TAciuIlqGoMoI69PiFRm3buxb20ErHtgLGWDsPFslL73SjHnzIxfq qQEceS3mKHUpBeKi0UEs39R/bj6Wc176lu2ds/XL7BKIj2ch/VdOfrqJlc15ZzQB 14lYj44gXVaZhJcuvRDnfoF/qsbSDGIrT/XAU943u9YDCmdXojxIjKCw9ixtqNY/ fM6iAzMstCutpOUewdfXVkENyOIf1Q0= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:45 2026 by rpki-client