$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2f3f8a81-2eef-3a1f-a495-27604b1abf95.roa File: 2f3f8a81-2eef-3a1f-a495-27604b1abf95.roa (raw, json) Hash identifier: DGYbes9seO2TvD6nL4hoEpmSM5HSiNi8yoNIgO+mW/4= Subject key identifier: 9D:20:AE:D8:34:DF:B7:3F:02:A3:DF:94:98:96:D3:38:96:31:D5:C9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA272F50F8239DC1DC0DF380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2f3f8a81-2eef-3a1f-a495-27604b1abf95.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 152.67.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:2f:50:f8:23:9d:c1:dc:0d:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=91ad833f-2782-4bd0-a13e-90630186da12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:97:f0:2e:7c:9b:94:23:45:82:dc:fe:f2: de:36:3c:0b:af:09:58:f8:3f:f4:bd:49:2b:9b:75: f0:22:56:f3:22:df:8b:c7:46:c0:65:60:a3:bc:97: c6:48:c2:08:40:a8:d3:10:23:9a:62:f9:8c:49:48: 80:13:d5:40:2a:21:e9:86:3f:c6:f6:4f:0b:99:01: a2:a8:77:ac:03:1c:7f:97:9a:16:d2:4e:78:18:38: 8d:da:20:94:3f:db:6e:66:26:34:63:7b:e4:b9:f9: 09:88:3e:df:11:24:cc:a0:25:d7:9e:34:c9:79:d2: 7c:aa:e4:aa:3d:a1:9d:a8:6a:ad:02:98:7d:b2:33: 56:61:2d:98:65:b5:6f:bc:c6:3b:2c:12:b4:12:2d: fa:ea:6b:be:25:74:1f:b4:fa:31:50:55:76:24:cb: 55:0b:5e:21:18:68:eb:b3:b6:16:07:18:ec:08:53: 03:a9:1d:b1:78:ab:12:33:cf:a0:d4:48:df:92:d1: 9c:89:71:da:8a:db:4a:66:04:fc:18:10:70:5c:12: b6:67:73:f9:3f:5e:17:d1:4e:63:e7:25:4f:93:b5: 0d:99:53:30:7c:34:23:c7:d4:c6:25:7f:12:6e:17: f3:0a:27:33:21:71:c7:99:76:da:69:d1:3b:f6:81: d8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:20:AE:D8:34:DF:B7:3F:02:A3:DF:94:98:96:D3:38:96:31:D5:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2f3f8a81-2eef-3a1f-a495-27604b1abf95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e8:33:1e:33:7e:57:37:52:74:ec:70:0b:0a:25:2e:fe:d9: da:0d:0f:60:7d:9c:d2:39:3c:c0:38:a3:3a:b4:5a:5a:39:af: 2d:41:86:90:e6:5b:c1:5a:7e:3f:fb:39:93:27:84:32:0e:af: bf:cf:93:a5:68:53:cf:5d:0a:a5:57:3f:2b:10:a4:57:a1:3a: d5:d2:f9:25:3d:53:7a:4d:ab:10:34:4a:7a:be:71:e3:9d:a0: 24:d2:11:33:1f:ca:6f:2f:7e:9c:86:1b:7c:96:98:d6:03:12: f1:80:4b:b4:67:69:e3:c4:21:d2:00:86:e8:de:1b:53:4e:b3: c0:0d:85:5c:fa:a0:dc:42:e7:0e:5d:e3:7d:59:44:4c:9b:ea: 88:c6:d9:72:a6:bb:6a:86:a0:87:62:38:ae:25:d4:19:e9:a3: e0:22:9f:a6:38:4d:6c:c1:19:bc:54:69:ad:0d:9a:e4:13:43: 91:a9:81:3d:08:db:d3:7e:96:8d:5c:b2:4e:47:71:bd:7f:da: 64:c4:90:07:be:73:1f:ef:2c:8d:29:14:aa:a2:51:89:ae:21: 2a:0b:43:c8:a6:57:d2:3d:f9:37:d9:f2:1b:19:35:e1:ff:75: 22:2d:56:18:2c:98:d6:19:36:9b:d4:56:ad:91:86:56:a7:1a: 33:d7:63:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJy9Q+COdwdwN84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk OTFhZDgzM2YtMjc4Mi00YmQwLWExM2UtOTA2MzAxODZkYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaiX8C58m5QjRYLc/vLeNjwLrwlY+D/0vUkr m3XwIlbzIt+Lx0bAZWCjvJfGSMIIQKjTECOaYvmMSUiAE9VAKiHphj/G9k8LmQGi qHesAxx/l5oW0k54GDiN2iCUP9tuZiY0Y3vkufkJiD7fESTMoCXXnjTJedJ8quSq PaGdqGqtAph9sjNWYS2YZbVvvMY7LBK0Ei366mu+JXQftPoxUFV2JMtVC14hGGjr s7YWBxjsCFMDqR2xeKsSM8+g1EjfktGciXHaittKZgT8GBBwXBK2Z3P5P14X0U5j 5yVPk7UNmVMwfDQjx9TGJX8SbhfzCiczIXHHmXbaadE79oHYiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0grtg037c/AqPflJiW0ziWMdXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmYzZjhhODEtMmVlZi0z YTFmLWE0OTUtMjc2MDRiMWFiZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmENwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/oMx4zflc3UnTscAsKJS7+2doND2B9nNI5PMA4ozq0Wlo5ry1BhpDm W8Fafj/7OZMnhDIOr7/Pk6VoU89dCqVXPysQpFehOtXS+SU9U3pNqxA0Snq+ceOd oCTSETMfym8vfpyGG3yWmNYDEvGAS7RnaePEIdIAhujeG1NOs8ANhVz6oNxC5w5d 431ZREyb6ojG2XKmu2qGoIdiOK4l1Bnpo+Ain6Y4TWzBGbxUaa0NmuQTQ5GpgT0I 29N+lo1csk5Hcb1/2mTEkAe+cx/vLI0pFKqiUYmuISoLQ8imV9I9+TfZ8hsZNeH/ dSItVhgsmNYZNpvUVq2RhlanGjPXY4U= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:32 2026 by rpki-client