$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43c9d163-584e-332a-89e1-2f2991d177ed.roa File: 43c9d163-584e-332a-89e1-2f2991d177ed.roa (raw, json) Hash identifier: GtTuTiHuShD4UGsrMVPEkKKAMgntaiFuXe3cVTM/iV4= Subject key identifier: 93:1A:15:E9:CE:99:22:03:E0:25:5D:79:D1:2C:B7:ED:33:1F:83:8B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1CAB156C7BAC390FA1380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43c9d163-584e-332a-89e1-2f2991d177ed.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 168.107.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:ca:b1:56:c7:ba:c3:90:fa:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=ea2b8bab-ba67-48a0-b42e-93e5d2ed898b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:75:2c:77:14:42:a1:98:9a:e8:ec:76:57: 39:fd:5f:f9:6e:9f:71:c7:04:e7:ca:1d:84:a4:c4: 08:30:93:8c:4f:75:24:d2:9b:35:ae:b4:b0:01:74: 8c:2a:ce:21:6b:b9:ed:ae:25:d1:31:b1:2e:ac:f8: cb:71:d7:cf:b5:86:6f:c3:4c:c8:82:cd:74:a6:21: 09:68:9f:7d:3b:65:5d:ac:70:96:28:54:70:1e:9a: a7:e7:d0:c9:5e:e6:22:c6:77:12:31:84:ac:6f:e1: 90:98:ac:b4:00:2f:b4:81:72:36:c4:6b:d7:81:1c: 6c:b3:3e:01:b0:1c:52:3c:50:4f:f0:01:94:1d:a8: c8:f7:58:04:b5:ca:c2:12:67:91:cd:3a:2e:03:ed: 02:e9:d6:6d:40:0f:fc:6c:93:a9:6a:1f:ed:47:01: 6b:2d:b9:68:9f:77:6e:1f:b8:72:aa:93:1e:a1:0d: d7:96:06:52:e2:1b:62:67:3d:f3:b0:ab:34:5f:eb: c9:02:60:3d:4b:97:c6:09:6e:cc:85:ce:88:36:52: 15:32:55:ce:d8:33:57:63:be:19:c9:00:27:1d:a5: b7:4f:df:e6:af:19:ca:95:15:a6:6b:e5:db:e2:28: 35:c8:75:87:a4:b8:bb:0f:7b:50:a8:56:3c:dc:20: f4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1A:15:E9:CE:99:22:03:E0:25:5D:79:D1:2C:B7:ED:33:1F:83:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43c9d163-584e-332a-89e1-2f2991d177ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:67:5c:f7:bf:8a:ab:c1:0b:dc:90:4f:ae:f6:4c:96:cf:6f: 0e:eb:79:9e:ab:17:18:3b:78:52:3c:43:13:70:14:2c:73:d2: c1:70:a2:7a:71:12:30:96:db:46:71:41:6c:ad:cc:32:f3:1c: d2:e9:de:68:8e:90:de:4c:a5:e8:23:62:b3:62:e9:dd:37:b3: 88:85:0c:f5:3d:6d:10:4f:e4:45:e3:3f:15:ba:49:d9:1e:9f: ee:e4:6e:07:04:05:fd:ce:57:7c:fe:a9:26:93:0a:0d:9d:c9: eb:a0:e5:4d:2d:c5:09:18:d5:6d:ae:9a:a3:d8:f9:36:9f:ca: 39:81:cc:d6:76:b3:1c:db:28:7a:8d:12:b2:6b:46:a9:33:09: 24:0f:13:16:41:41:ce:17:97:63:7d:33:0d:74:f4:f0:4d:dc: 87:64:35:45:e8:98:98:7e:96:a7:37:6c:54:6f:ef:d2:20:20: 85:66:d1:fe:dd:31:08:f1:c0:90:c6:f1:e9:3d:e0:ea:5a:98: 6b:c1:82:49:12:4e:47:95:e8:84:eb:41:c4:40:c9:fc:4a:68: 81:27:94:cc:82:95:19:96:80:b8:bc:76:ca:85:5b:4c:b5:50: a7:ea:9a:cd:8f:62:44:94:69:95:e8:f9:47:c0:1c:a5:32:94: 10:e3:24:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cqxVse6w5D6E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk ZWEyYjhiYWItYmE2Ny00OGEwLWI0MmUtOTNlNWQyZWQ4OThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOh1LHcUQqGYmujsdlc5/V/5bp9xxwTnyh2E pMQIMJOMT3Uk0ps1rrSwAXSMKs4ha7ntriXRMbEurPjLcdfPtYZvw0zIgs10piEJ aJ99O2VdrHCWKFRwHpqn59DJXuYixncSMYSsb+GQmKy0AC+0gXI2xGvXgRxssz4B sBxSPFBP8AGUHajI91gEtcrCEmeRzTouA+0C6dZtQA/8bJOpah/tRwFrLblon3du H7hyqpMeoQ3XlgZS4htiZz3zsKs0X+vJAmA9S5fGCW7Mhc6INlIVMlXO2DNXY74Z yQAnHaW3T9/mrxnKlRWma+Xb4ig1yHWHpLi7D3tQqFY83CD0owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMaFenOmSID4CVdedEst+0zH4OLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDNjOWQxNjMtNTg0ZS0z MzJhLTg5ZTEtMmYyOTkxZDE3N2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqGtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpnXPe/iqvBC9yQT672TJbPbw7reZ6rFxg7eFI8QxNwFCxz0sFwonpx EjCW20ZxQWytzDLzHNLp3miOkN5MpegjYrNi6d03s4iFDPU9bRBP5EXjPxW6Sdke n+7kbgcEBf3OV3z+qSaTCg2dyeug5U0txQkY1W2umqPY+TafyjmBzNZ2sxzbKHqN ErJrRqkzCSQPExZBQc4Xl2N9Mw109PBN3IdkNUXomJh+lqc3bFRv79IgIIVm0f7d MQjxwJDG8ek94OpamGvBgkkSTkeV6ITrQcRAyfxKaIEnlMyClRmWgLi8dsqFW0y1 UKfqms2PYkSUaZXo+UfAHKUylBDjJAY= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:45 2026 by rpki-client