$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4173deef-ef45-3ca1-90ff-a2212aa5790b.roa File: 4173deef-ef45-3ca1-90ff-a2212aa5790b.roa (raw, json) Hash identifier: x+x91QFYGnEUQv9DSnPhx1LnSre94UXpg9grBTt14kQ= Subject key identifier: 3C:A3:44:E4:A8:04:14:CA:2B:F5:47:16:EE:98:38:A3:55:43:40:59 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E6342B62C29B83A14F6C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4173deef-ef45-3ca1-90ff-a2212aa5790b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 165.1.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:63:42:b6:2c:29:b8:3a:14:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=1ae9bf03-a62e-433d-92b7-7503a074a9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:0c:57:5e:3b:6e:31:14:8f:fd:3d:29:36: 21:66:2c:db:17:81:54:19:5a:d0:3a:0b:69:c2:93: 3e:72:bd:01:a4:30:99:5b:c1:d6:32:b8:00:3a:63: 11:6e:95:5c:06:98:e4:46:ab:2e:e6:21:6e:de:62: 56:f3:0d:e5:f6:90:5e:fd:de:63:cb:46:33:23:0f: 27:fa:77:01:22:62:74:21:2f:5c:c9:1a:b2:b3:a7: ca:23:21:7f:f7:d3:fb:45:4f:2e:9d:4e:95:29:98: bb:07:03:07:e7:f9:34:5f:28:e0:ae:ba:6d:44:2d: 1b:60:d5:9c:58:45:41:6b:b4:4a:a0:af:c9:98:96: db:ee:7f:d5:3e:b9:80:82:bd:d7:22:2c:02:3a:ef: 48:56:f2:9d:9c:58:39:1f:96:c0:91:e7:18:2d:b0: 3c:ef:50:fb:f2:d6:dc:82:4c:43:ac:75:c0:a7:2a: 44:d9:61:87:4a:29:53:34:49:5b:b4:22:31:24:6b: 79:bd:a6:76:95:5c:0d:f2:e5:05:b9:b7:0f:24:03: 9a:e9:13:cf:d5:42:b3:70:c2:bd:33:a0:47:f4:ef: d9:f4:70:94:57:40:d2:06:9f:89:a5:df:0f:cf:dc: b0:eb:b0:2f:ac:24:79:73:3d:b1:24:ad:2a:8d:44: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A3:44:E4:A8:04:14:CA:2B:F5:47:16:EE:98:38:A3:55:43:40:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4173deef-ef45-3ca1-90ff-a2212aa5790b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 165.1.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0c:79:db:33:df:fc:e1:8c:0b:d8:5c:93:d3:fa:39:c6:76: 6b:44:4f:d2:a0:11:20:75:b3:a5:22:ee:f8:23:0a:1a:02:0b: d9:a7:58:82:cb:ae:73:e8:9b:fd:de:06:b0:da:47:fc:77:79: 0b:23:cd:ca:be:83:a3:4e:a2:c7:80:f8:7d:b9:22:b4:fb:d9: 12:b2:aa:93:12:e5:99:f2:a7:22:7b:1b:a4:a7:58:f7:6d:79: 67:e3:37:7c:07:3e:16:33:fe:f0:9d:50:b1:c7:c6:d6:a2:3f: 36:c1:c9:5f:0e:20:a3:dc:14:6b:b6:be:2b:62:53:f8:cf:df: cd:1c:8d:6b:b3:d8:db:8d:ac:0c:bd:c9:d0:fc:03:9b:2e:f5: 15:81:3c:da:a6:d6:b0:7b:69:ab:2a:88:de:21:a1:d3:62:9f: 60:06:46:2e:c7:70:39:6d:70:ea:61:a8:b8:f5:1a:2a:f6:81: 81:ba:14:bb:9e:95:3f:74:57:6c:a9:77:b5:45:55:2b:f1:3c: e0:81:ac:d2:7f:c3:07:86:e9:83:f3:d2:04:74:4d:bd:91:82: e4:fb:5a:7c:db:7f:9b:2f:8e:3f:64:c1:1b:47:28:28:b3:f2: 1d:bc:bc:b9:5b:1f:21:22:73:50:b4:0d:fa:81:22:e3:62:70: f2:3c:5d:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXmNCtiwpuDoU9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWFlOWJmMDMtYTYyZS00MzNkLTkyYjctNzUwM2EwNzRhOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdYMV147bjEUj/09KTYhZizbF4FUGVrQOgtp wpM+cr0BpDCZW8HWMrgAOmMRbpVcBpjkRqsu5iFu3mJW8w3l9pBe/d5jy0YzIw8n +ncBImJ0IS9cyRqys6fKIyF/99P7RU8unU6VKZi7BwMH5/k0XyjgrrptRC0bYNWc WEVBa7RKoK/JmJbb7n/VPrmAgr3XIiwCOu9IVvKdnFg5H5bAkecYLbA871D78tbc gkxDrHXApypE2WGHSilTNElbtCIxJGt5vaZ2lVwN8uUFubcPJAOa6RPP1UKzcMK9 M6BH9O/Z9HCUV0DSBp+Jpd8Pz9yw67AvrCR5cz2xJK0qjURBBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyjROSoBBTKK/VHFu6YOKNVQ0BZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDE3M2RlZWYtZWY0NS0z Y2ExLTkwZmYtYTIyMTJhYTU3OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpQFuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkMedsz3/zhjAvYXJPT+jnGdmtET9KgESB1s6Ui7vgjChoCC9mnWILL rnPom/3eBrDaR/x3eQsjzcq+g6NOoseA+H25IrT72RKyqpMS5ZnypyJ7G6SnWPdt eWfjN3wHPhYz/vCdULHHxtaiPzbByV8OIKPcFGu2vitiU/jP380cjWuz2NuNrAy9 ydD8A5su9RWBPNqm1rB7aasqiN4hodNin2AGRi7HcDltcOphqLj1Gir2gYG6FLue lT90V2ypd7VFVSvxPOCBrNJ/wweG6YPz0gR0Tb2RguT7Wnzbf5svjj9kwRtHKCiz 8h28vLlbHyEic1C0DfqBIuNicPI8Xd4= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:58 2026 by rpki-client