$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/27a5088f-8621-34d9-ae6d-e1a014bd6668.roa File: 27a5088f-8621-34d9-ae6d-e1a014bd6668.roa (raw, json) Hash identifier: F2eptsNX9fgYjDEF8Y19x1iVngSR3L5EYmRgsrIFe+Y= Subject key identifier: 1E:94:8D:F7:23:64:45:26:7E:AB:6F:B6:0F:9D:E2:E6:E2:2E:4B:0A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC771E27B40B2FD2099740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/27a5088f-8621-34d9-ae6d-e1a014bd6668.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 147.154.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:77:1e:27:b4:0b:2f:d2:09:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=d5b1b35d-3c69-427f-94ec-43734b042bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0a:ca:fb:0a:94:67:cb:87:12:18:0d:04:f7: 8a:ff:04:f3:72:b8:47:61:f4:1e:e1:dc:3d:43:97: 7f:7d:8c:7f:eb:7c:19:e9:0c:34:ee:46:34:73:56: b6:37:d0:10:10:10:7a:86:39:9d:b5:a3:04:61:2c: 12:5b:44:3e:38:ab:41:03:6a:64:2e:19:a7:6f:19: d4:8f:fa:6a:34:a4:2d:ad:51:9b:f3:dd:80:1d:e3: 2d:d3:ef:37:12:88:4f:98:41:b6:c5:e3:a7:c0:ba: bd:39:f9:bb:b5:66:70:12:50:6e:f2:4f:56:a9:76: 6f:00:39:bc:59:98:4d:19:e4:e1:36:d8:86:0c:a6: 34:26:0c:b7:a4:26:b7:a4:ae:75:ac:61:ad:07:66: 07:47:df:e6:4a:68:07:b3:86:bb:64:bd:09:d7:bf: 22:6c:a2:48:34:0c:88:e2:d2:5b:62:0c:4b:15:f3: ae:10:39:19:65:b3:fb:06:d4:5f:b6:c1:c5:b1:19: e9:f4:db:b3:e5:ef:9c:0e:32:2f:72:63:73:48:66: 07:fe:5d:3a:b5:49:b1:87:ae:2e:a8:d6:e1:03:d0: 99:59:37:fa:35:88:9a:8c:7a:a6:71:ca:38:a0:8c: a5:d0:64:9b:42:b0:bb:82:7e:7a:67:e8:20:b9:98: 98:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:94:8D:F7:23:64:45:26:7E:AB:6F:B6:0F:9D:E2:E6:E2:2E:4B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/27a5088f-8621-34d9-ae6d-e1a014bd6668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:99:ef:50:2a:7e:14:76:3c:44:61:d0:76:f9:a9:a6:09:22: da:24:0b:3f:25:f4:d4:bb:36:c8:ca:a4:3d:26:64:43:b1:b8: c1:e3:84:97:c4:e2:6c:04:0c:ad:40:f0:bb:30:65:4b:cc:8f: 97:74:40:22:c7:84:1c:0c:c9:ff:ae:8d:7e:97:cb:a5:3b:41: e0:59:06:9f:12:3d:3e:21:5b:f4:ad:94:e5:bf:8c:c3:37:df: 41:70:00:35:cb:24:a9:ff:90:0d:66:ec:b5:8f:b5:40:8e:4e: e2:2b:ef:82:ae:5a:ac:fb:3a:d3:4c:51:b7:8d:d7:38:24:c6: 74:16:31:a3:4d:c5:04:90:49:f1:ca:04:c6:0e:b7:a0:c1:9a: 41:66:82:18:02:6f:ef:66:70:f2:e5:22:c4:3f:fd:74:b3:8f: 24:d2:f0:3a:a7:f3:45:ba:1d:18:89:dd:18:59:75:69:9e:bf: 45:13:80:ef:41:39:35:50:b0:bb:6e:44:2b:4b:73:4e:24:09: d5:2a:dc:9a:2a:1f:9d:8d:d1:54:22:e0:f1:0e:2c:29:a4:1b: 04:96:e5:a0:20:f0:bb:d6:e6:e4:5d:92:ca:b8:f3:91:92:28: 01:5e:7b:73:57:14:02:84:38:e3:a6:d2:49:8f:cc:1e:51:3c: f6:5a:e7:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHceJ7QLL9IJl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZDViMWIzNWQtM2M2OS00MjdmLTk0ZWMtNDM3MzRiMDQyYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQrK+wqUZ8uHEhgNBPeK/wTzcrhHYfQe4dw9 Q5d/fYx/63wZ6Qw07kY0c1a2N9AQEBB6hjmdtaMEYSwSW0Q+OKtBA2pkLhmnbxnU j/pqNKQtrVGb892AHeMt0+83EohPmEG2xeOnwLq9Ofm7tWZwElBu8k9WqXZvADm8 WZhNGeThNtiGDKY0Jgy3pCa3pK51rGGtB2YHR9/mSmgHs4a7ZL0J178ibKJINAyI 4tJbYgxLFfOuEDkZZbP7BtRftsHFsRnp9Nuz5e+cDjIvcmNzSGYH/l06tUmxh64u qNbhA9CZWTf6NYiajHqmcco4oIyl0GSbQrC7gn56Z+gguZiYyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6UjfcjZEUmfqtvtg+d4ubiLksKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjdhNTA4OGYtODYyMS0z NGQ5LWFlNmQtZTFhMDE0YmQ2NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5pgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCZ71AqfhR2PERh0Hb5qaYJItokCz8l9NS7NsjKpD0mZEOxuMHjhJfE 4mwEDK1A8LswZUvMj5d0QCLHhBwMyf+ujX6Xy6U7QeBZBp8SPT4hW/StlOW/jMM3 30FwADXLJKn/kA1m7LWPtUCOTuIr74KuWqz7OtNMUbeN1zgkxnQWMaNNxQSQSfHK BMYOt6DBmkFmghgCb+9mcPLlIsQ//XSzjyTS8Dqn80W6HRiJ3RhZdWmev0UTgO9B OTVQsLtuRCtLc04kCdUq3JoqH52N0VQi4PEOLCmkGwSW5aAg8LvW5uRdksq485GS KAFee3NXFAKEOOOm0kmPzB5RPPZa58w= -----END CERTIFICATE-----Generated at Thu Feb 26 03:28:03 2026 by rpki-client