$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa File: 2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa (raw, json) Hash identifier: EW6g2ZiQjhZh+MI9AQpZQLiLewgfduDK4i4qw453NmM= Subject key identifier: 85:A0:A7:BB:8B:38:1D:4B:3E:E7:B3:1D:04:6A:33:9D:09:3D:55:6D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CB81C9608700C1D55BA324500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 152.70.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:96:08:70:0c:1d:55:ba:32:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=815709d1-c564-4fc3-a8a4-00a38776e6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:af:1a:9c:eb:e6:6e:a4:2c:2c:5a:06:b3: c5:cf:91:61:1a:2a:07:a2:3e:58:0b:8d:2b:1e:a1: 84:0e:7e:bf:07:c6:85:9d:5c:19:b0:b4:2b:7b:2e: 2b:ee:2a:8e:10:6a:0d:0a:4b:73:57:7e:8c:5d:1f: 8d:5f:d9:fb:b3:e4:73:ef:40:42:8b:41:18:4b:07: cd:23:69:d4:1e:3f:0c:21:fe:56:ae:26:64:24:86: 78:3f:2c:c8:27:96:3c:6e:72:4d:74:48:79:0f:08: d0:ee:bc:45:4d:6f:7b:be:32:f2:41:07:50:f5:3e: 18:e2:01:fd:c1:1d:29:3a:ba:d2:75:77:ba:0e:3a: 45:31:75:55:f5:a3:e5:f5:3a:35:ca:7d:25:0b:1d: 4f:bd:2d:a0:d3:3f:87:f0:cb:73:54:23:30:60:0b: 22:02:c9:94:b0:99:e1:0d:5b:ba:92:90:c1:7e:b0: f4:54:17:7d:b1:6c:f6:d3:c3:89:c0:f9:37:62:64: 54:09:cd:20:00:5e:81:b0:d6:36:b6:57:d7:19:59: f4:82:20:82:49:75:60:02:df:c5:f2:fd:58:d2:68: 80:98:b5:af:e8:4f:4e:c3:62:97:b6:72:ad:f1:2e: 7a:3a:1a:71:23:02:54:34:7f:9d:0f:2f:08:83:8e: 20:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A0:A7:BB:8B:38:1D:4B:3E:E7:B3:1D:04:6A:33:9D:09:3D:55:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:42:e0:91:4b:15:89:8f:98:38:0b:6f:03:50:8b:7b:c0:21: c5:62:42:b1:dd:38:32:f2:87:3e:f3:e3:5d:72:39:4b:61:09: 9e:eb:23:43:a6:ea:4f:a3:73:eb:98:58:5e:0c:21:f4:8f:a3: ff:6a:42:35:d7:81:10:74:30:17:69:10:2b:40:70:7e:00:ab: 1e:ed:3c:c3:26:53:42:b5:6e:d2:c2:0e:eb:3c:ee:e2:98:57: e1:ba:8d:b0:bb:cd:06:f5:09:df:ec:77:1b:f4:e6:47:86:85: c5:86:30:4e:13:2d:b6:f3:c4:0c:f4:a8:62:fd:47:ef:52:eb: 88:f3:7f:34:b3:53:09:6c:a0:2a:c5:c7:8f:ec:43:d3:99:a1: f4:0a:88:57:87:ff:db:86:c6:e1:c0:e8:72:fe:81:a2:6d:34: 1e:f3:50:1e:c7:d9:01:d4:5a:3f:fe:9c:df:ba:a7:38:a1:23: c8:98:79:d2:bd:58:fa:ab:d6:e8:ba:cc:39:d1:b6:4c:cb:92: 42:f4:33:d5:3e:c0:8d:84:62:7e:c6:52:48:2c:a5:ce:9d:0e: c3:f5:63:a9:63:a4:69:10:3d:51:2e:b0:23:92:3b:0b:88:bb: cd:49:cc:d0:ef:cb:91:7d:5a:15:d5:e2:42:78:26:3a:2c:f8: 19:94:15:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HJYIcAwdVboyRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk ODE1NzA5ZDEtYzU2NC00ZmMzLWE4YTQtMDBhMzg3NzZlNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YGvGpzr5m6kLCxaBrPFz5FhGioHoj5YC40r HqGEDn6/B8aFnVwZsLQrey4r7iqOEGoNCktzV36MXR+NX9n7s+Rz70BCi0EYSwfN I2nUHj8MIf5WriZkJIZ4PyzIJ5Y8bnJNdEh5DwjQ7rxFTW97vjLyQQdQ9T4Y4gH9 wR0pOrrSdXe6DjpFMXVV9aPl9To1yn0lCx1PvS2g0z+H8MtzVCMwYAsiAsmUsJnh DVu6kpDBfrD0VBd9sWz208OJwPk3YmRUCc0gAF6BsNY2tlfXGVn0giCCSXVgAt/F 8v1Y0miAmLWv6E9Ow2KXtnKt8S56OhpxIwJUNH+dDy8Ig44gLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWgp7uLOB1LPuezHQRqM50JPVVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmU4NDc1MGQtMWU3ZC0z YTQ3LWJhYzMtOTVjMTM5YWI5ZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmEYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNC4JFLFYmPmDgLbwNQi3vAIcViQrHdODLyhz7z411yOUthCZ7rI0Om 6k+jc+uYWF4MIfSPo/9qQjXXgRB0MBdpECtAcH4Aqx7tPMMmU0K1btLCDus87uKY V+G6jbC7zQb1Cd/sdxv05keGhcWGME4TLbbzxAz0qGL9R+9S64jzfzSzUwlsoCrF x4/sQ9OZofQKiFeH/9uGxuHA6HL+gaJtNB7zUB7H2QHUWj/+nN+6pzihI8iYedK9 WPqr1ui6zDnRtkzLkkL0M9U+wI2EYn7GUkgspc6dDsP1Y6ljpGkQPVEusCOSOwuI u81JzNDvy5F9WhXV4kJ4Jjos+BmUFQQ= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:10 2026 by rpki-client