$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa File: 431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa (raw, json) Hash identifier: 1zBHxJra50VpPhKMsG64Fm+mhNFLNqnbsgNP51SsXe4= Subject key identifier: 1F:7D:92:60:0C:62:1E:08:E6:CC:7F:CE:4A:8C:23:9D:4D:B8:16:8C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1B8A2D6D28066F927C9C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 164.152.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:b8:a2:d6:d2:80:66:f9:27:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=9e5b755f-bd3e-47a8-b869-1760d00d2c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dd:69:a1:f5:ad:e3:6f:20:b8:81:87:f6:87: ec:82:e7:de:cc:02:ee:38:db:17:57:0f:ca:02:f6: 83:1c:2a:ad:6c:57:77:91:2b:ec:6f:d3:17:38:3b: 3f:7d:dc:49:c2:af:83:7d:23:ab:86:55:de:e1:ca: 2b:94:a0:d3:74:10:6c:dd:c5:e1:f8:d9:b3:82:af: 55:c9:bd:8a:37:4c:ce:66:02:3a:e4:76:1b:57:b6: c7:9c:cb:49:84:ba:b0:f8:8d:19:4d:0e:7a:19:0d: f4:09:1d:84:43:44:74:ca:e3:ce:b3:b3:91:0e:f5: 11:0a:1d:20:94:1a:31:7d:92:91:98:e3:d4:80:1c: 77:97:57:9a:87:d1:27:a5:cb:25:01:8f:95:a9:60: d9:0b:00:72:26:6a:3c:c0:25:01:8c:94:19:86:45: 1a:10:38:54:2f:fc:4a:16:8a:1c:7d:90:a5:ae:f2: cb:00:9f:39:53:e9:4d:65:0a:f9:68:8d:c5:bc:d1: dc:de:5a:d5:e2:44:c5:6c:4c:52:cd:0f:22:67:fd: 25:98:06:29:82:2a:2e:ab:53:c4:a1:ab:96:19:0a: 6f:c9:70:3a:8c:5d:54:af:76:95:b1:29:fa:ea:22: 0d:e5:bb:6f:9b:da:29:d4:b5:5a:2a:fa:53:e8:7f: fc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7D:92:60:0C:62:1E:08:E6:CC:7F:CE:4A:8C:23:9D:4D:B8:16:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:08:8c:7e:aa:c8:c8:ae:79:b8:2d:2c:b4:3f:5b:ef:d5:3d: d5:2d:0c:48:51:41:93:93:7f:cd:f9:f7:40:f1:c0:ee:7b:89: 94:95:81:b6:74:ed:c0:3f:3a:0d:d1:d4:df:d3:9f:2c:7f:1a: 38:75:6d:ab:80:36:64:bc:87:ac:2c:c0:c8:71:78:4e:07:70: 42:76:4d:a7:33:a4:82:16:4b:02:fc:2b:fd:29:cc:9d:69:29: b9:1f:e3:09:bd:b8:49:ff:bd:18:11:42:60:ba:1c:fb:ca:95: fc:4a:ca:87:eb:64:2e:ff:18:89:16:3d:ae:d5:58:7a:e6:56: a1:e4:f7:c4:f2:86:ee:26:66:aa:5f:30:33:42:ef:24:27:81: 47:f1:cb:45:9d:d3:1c:66:3c:b4:c1:b1:3d:27:cb:b3:c9:96: 6c:1b:ab:a6:7b:aa:ea:f8:21:b8:b7:0d:67:1f:87:9f:9c:47: c0:d7:9a:18:14:97:0b:c8:7d:21:c5:73:e4:e6:c2:d0:1e:22: 38:49:aa:2b:40:f4:3a:88:08:ef:15:ac:9f:7b:f9:be:a6:08: 0f:fe:dc:97:a3:86:58:b9:7a:c5:30:09:97:09:1f:1e:eb:66: 35:51:cc:18:53:c5:f8:0d:d8:07:29:ea:14:02:c6:20:fe:4f: a1:d7:d0:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8bii1tKAZvknycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk OWU1Yjc1NWYtYmQzZS00N2E4LWI4NjktMTc2MGQwMGQyYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd1pofWt428guIGH9ofsgufezALuONsXVw/K AvaDHCqtbFd3kSvsb9MXODs/fdxJwq+DfSOrhlXe4corlKDTdBBs3cXh+Nmzgq9V yb2KN0zOZgI65HYbV7bHnMtJhLqw+I0ZTQ56GQ30CR2EQ0R0yuPOs7ORDvURCh0g lBoxfZKRmOPUgBx3l1eah9EnpcslAY+VqWDZCwByJmo8wCUBjJQZhkUaEDhUL/xK FoocfZClrvLLAJ85U+lNZQr5aI3FvNHc3lrV4kTFbExSzQ8iZ/0lmAYpgiouq1PE oauWGQpvyXA6jF1Ur3aVsSn66iIN5btvm9op1LVaKvpT6H/8qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB99kmAMYh4I5sx/zkqMI51NuBaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDMxMDUwYzItZTkyZS0z ZTRiLTg3NTItZjdlMWU3YTg0NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpJjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIIjH6qyMiuebgtLLQ/W+/VPdUtDEhRQZOTf83590DxwO57iZSVgbZ0 7cA/Og3R1N/Tnyx/Gjh1bauANmS8h6wswMhxeE4HcEJ2TaczpIIWSwL8K/0pzJ1p Kbkf4wm9uEn/vRgRQmC6HPvKlfxKyofrZC7/GIkWPa7VWHrmVqHk98Tyhu4mZqpf MDNC7yQngUfxy0Wd0xxmPLTBsT0ny7PJlmwbq6Z7qur4Ibi3DWcfh5+cR8DXmhgU lwvIfSHFc+TmwtAeIjhJqitA9DqICO8VrJ97+b6mCA/+3Jejhli5esUwCZcJHx7r ZjVRzBhTxfgN2Acp6hQCxiD+T6HX0Dc= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:27 2026 by rpki-client