$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa File: 437dc54a-5df5-31db-a160-9f56a183b007.roa (raw, json) Hash identifier: F8tutcyWnKwNXFkRZV3TIEqg0OJrSCWUIVLJgmmah3s= Subject key identifier: E1:26:24:0F:64:2F:0E:C7:B9:FF:F7:97:A1:18:66:58:22:93:7F:AA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE571E8EDBD492B3175D5900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 146.235.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:1e:8e:db:d4:92:b3:17:5d:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d19afc5c-5fba-4074-aee6-b4a12b7f845e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d1:c0:ac:48:2b:a8:f7:1a:d6:fd:5d:ec:e3: 8e:e7:f4:cf:56:f0:6c:66:89:4d:b6:00:ba:24:fc: 2d:26:96:5b:23:af:93:05:a4:af:ce:56:44:1c:62: 4c:3c:c8:69:19:49:42:64:8c:e7:40:20:46:fc:54: bc:bd:19:86:38:92:7a:9c:8c:92:d8:89:aa:90:c5: bd:51:82:0f:d4:9f:1d:ea:ac:5c:bc:f2:0d:14:33: f3:5f:a5:07:6b:ef:06:c1:92:70:36:b6:d9:8e:b8: 2d:f3:ff:b0:a6:ec:3b:55:9f:f3:9d:02:c6:90:96: ea:f5:d2:66:c3:44:87:45:24:14:a8:ac:cc:ec:d5: c5:95:a1:7a:a3:84:16:65:1d:d9:f3:c1:d9:c7:b4: e8:39:a8:64:6f:0e:e7:53:1b:84:1b:67:69:e8:5b: 8e:41:83:68:2f:ec:60:1e:be:82:38:4a:17:bf:c4: 52:48:62:72:f9:6f:4b:3a:e1:e4:7a:81:96:82:5b: d0:40:0f:d0:e2:41:0d:eb:55:af:cb:7e:9c:7f:a9: f0:67:7c:91:2f:39:b4:95:64:6b:28:d9:47:11:6f: 82:9c:42:80:d1:cc:0b:b6:31:41:0f:96:ec:3c:fa: 66:b5:ed:9e:d3:eb:2e:d1:84:16:ca:cc:32:8b:3e: 71:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:26:24:0F:64:2F:0E:C7:B9:FF:F7:97:A1:18:66:58:22:93:7F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 146.235.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c0:00:c8:bc:aa:a6:38:47:3c:10:74:15:84:63:05:2b:38: 7f:32:ce:3d:9e:7e:d6:f6:73:40:49:99:91:96:6d:3e:f2:2a: 72:cc:df:1d:b1:d9:a9:86:f2:e7:98:b0:25:4b:39:16:54:20: c5:d0:73:98:49:74:7e:01:3f:7d:87:76:72:45:41:b0:41:be: 07:79:c6:ba:e3:18:73:6f:83:03:0e:73:72:8e:3e:3d:ef:15: 58:72:ec:09:ca:b6:9b:b1:2c:92:12:a7:26:57:4a:b6:44:65: 31:68:da:42:a9:0d:33:38:73:9a:bf:79:60:b2:b2:57:87:6b: 9f:36:0b:cf:3a:b6:99:23:3a:44:ac:53:0e:cc:a4:53:15:9f: e0:0a:5e:fb:4a:e8:5e:d9:dc:3c:ad:ca:58:ef:c6:e7:79:82: 1e:40:a8:44:d6:fd:a8:93:76:0f:a7:28:a7:06:4e:72:b3:f6: 8b:55:88:16:50:32:67:6a:63:bd:f1:0d:57:33:8b:01:9c:24: cd:40:44:74:2c:e4:83:c9:00:bb:7f:b1:f2:8c:aa:93:6c:26: e6:36:93:03:57:d4:80:e7:72:cd:07:71:57:0e:47:e8:57:5a: 88:a9:65:87:b1:9c:52:fd:bc:82:c0:a9:d4:34:35:54:4f:ad: 8b:fd:34:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVx6O29SSsxddWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDE5YWZjNWMtNWZiYS00MDc0LWFlZTYtYjRhMTJiN2Y4NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdHArEgrqPca1v1d7OOO5/TPVvBsZolNtgC6 JPwtJpZbI6+TBaSvzlZEHGJMPMhpGUlCZIznQCBG/FS8vRmGOJJ6nIyS2ImqkMW9 UYIP1J8d6qxcvPINFDPzX6UHa+8GwZJwNrbZjrgt8/+wpuw7VZ/znQLGkJbq9dJm w0SHRSQUqKzM7NXFlaF6o4QWZR3Z88HZx7ToOahkbw7nUxuEG2dp6FuOQYNoL+xg Hr6COEoXv8RSSGJy+W9LOuHkeoGWglvQQA/Q4kEN61Wvy36cf6nwZ3yRLzm0lWRr KNlHEW+CnEKA0cwLtjFBD5bsPPpmte2e0+su0YQWyswyiz5xOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEmJA9kLw7Huf/3l6EYZlgik3+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDM3ZGM1NGEtNWRmNS0z MWRiLWExNjAtOWY1NmExODNiMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkusYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPAAMi8qqY4RzwQdBWEYwUrOH8yzj2eftb2c0BJmZGWbT7yKnLM3x2x 2amG8ueYsCVLORZUIMXQc5hJdH4BP32HdnJFQbBBvgd5xrrjGHNvgwMOc3KOPj3v FVhy7AnKtpuxLJISpyZXSrZEZTFo2kKpDTM4c5q/eWCysleHa582C886tpkjOkSs Uw7MpFMVn+AKXvtK6F7Z3Dytyljvxud5gh5AqETW/aiTdg+nKKcGTnKz9otViBZQ MmdqY73xDVcziwGcJM1ARHQs5IPJALt/sfKMqpNsJuY2kwNX1IDncs0HcVcOR+hX WoipZYexnFL9vILAqdQ0NVRPrYv9NF0= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:44 2026 by rpki-client