$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a141069-404f-3e55-bf4f-d430e1c5eb32.roa File: 4a141069-404f-3e55-bf4f-d430e1c5eb32.roa (raw, json) Hash identifier: cSFa5eS/VQr+6gmQe/AEiEYiZIfdJrZDiea+5hqdUVk= Subject key identifier: 3A:0B:64:85:D6:08:E9:DC:49:48:C4:A6:66:DD:D9:3C:56:9F:98:8F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC745549E4522A08C56000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a141069-404f-3e55-bf4f-d430e1c5eb32.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 193.123.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:74:55:49:e4:52:2a:08:c5:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=0d8551b5-cc8d-4c40-9439-a0ec1d2518d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e6:79:bf:7e:a3:ac:09:be:46:e8:82:7f:e5: 7e:10:40:71:ea:4b:9b:06:b1:c1:35:a7:9f:84:ff: d6:62:f5:fc:9e:24:76:d7:74:e1:cc:5e:7b:45:f8: c3:6f:84:9d:dc:f4:a4:b3:11:3a:49:f4:9c:4e:c2: 2b:68:f2:57:1a:72:15:f1:b2:8e:d4:b3:6d:b4:11: 6a:79:b1:61:65:8f:bd:c5:59:70:a3:88:2f:f9:89: c1:bd:2d:8e:5b:c0:38:f3:91:b4:50:0a:5c:85:a8: 6f:41:41:c0:c8:1c:9c:ee:ac:41:5e:9a:9a:a8:2f: 77:ae:38:f9:05:8f:b4:30:91:d2:1a:73:b5:db:f9: 2f:81:55:49:cc:73:97:1a:78:f8:10:77:21:d2:56: 7f:1a:f1:c1:cb:aa:94:a2:5c:3a:61:5b:b9:ba:c3: 07:9c:65:0d:c7:6b:a0:b7:bb:f6:58:f1:56:90:14: 8b:3f:30:d3:58:e1:39:16:57:90:5a:46:ee:5b:a7: 3a:3c:8b:f2:bf:ca:95:56:18:4d:ee:06:59:73:d3: de:22:de:0c:bc:36:37:07:12:c1:bd:da:d2:f6:4b: 58:79:32:df:53:bd:dc:b9:99:59:1e:c8:cd:e7:af: a8:4c:d0:a4:ea:5e:7c:3c:6f:73:83:69:c3:1a:40: a9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0B:64:85:D6:08:E9:DC:49:48:C4:A6:66:DD:D9:3C:56:9F:98:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a141069-404f-3e55-bf4f-d430e1c5eb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 193.123.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4d:2d:75:90:6e:c4:53:f5:a5:f6:3a:c4:fb:e1:b8:39:3a: a7:db:6b:94:cf:62:e3:92:30:e2:ce:71:90:18:22:d1:c6:b5: c9:38:c5:60:b0:2b:24:73:98:dd:20:e0:a2:b6:a4:bf:7c:73: 3b:f4:9e:f1:7c:5c:d6:e9:c6:00:af:ad:fb:83:71:f3:44:fa: 5b:a6:4a:d6:d2:d6:ce:8f:2c:05:cb:71:47:e3:3a:00:ea:ef: 3e:87:6d:73:c4:de:57:37:6a:ef:fb:1f:cf:25:12:aa:7b:bb: 77:4f:0f:95:53:7b:51:9b:e3:23:27:c8:da:87:7d:e8:db:56: 0e:32:e8:3d:16:6e:99:11:a6:40:64:5a:8e:64:ee:e2:7f:fa: 89:61:7d:e7:b1:cb:ea:ee:5f:57:c2:f5:74:47:da:30:9c:a7: 4b:49:32:c5:b5:93:8c:8d:01:ec:34:e0:90:55:c7:f8:c2:f1: f7:00:d4:24:2b:a2:d5:ab:9e:79:98:a3:18:fe:1d:f0:91:bf: d3:1e:49:85:81:9b:80:dd:7c:3f:00:92:d8:37:11:61:b5:29: 9c:17:2f:95:58:5a:48:b0:04:da:50:0e:b5:8e:b9:b4:2c:bb: cc:cd:39:9b:d8:51:fa:c9:61:45:91:40:9d:aa:fd:0c:59:d8: 84:e0:c9:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHRVSeRSKgjFYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk MGQ4NTUxYjUtY2M4ZC00YzQwLTk0MzktYTBlYzFkMjUxOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuZ5v36jrAm+RuiCf+V+EEBx6kubBrHBNaef hP/WYvX8niR213ThzF57RfjDb4Sd3PSksxE6SfScTsIraPJXGnIV8bKO1LNttBFq ebFhZY+9xVlwo4gv+YnBvS2OW8A485G0UApchahvQUHAyByc7qxBXpqaqC93rjj5 BY+0MJHSGnO12/kvgVVJzHOXGnj4EHch0lZ/GvHBy6qUolw6YVu5usMHnGUNx2ug t7v2WPFWkBSLPzDTWOE5FleQWkbuW6c6PIvyv8qVVhhN7gZZc9PeIt4MvDY3BxLB vdrS9ktYeTLfU73cuZlZHsjN56+oTNCk6l58PG9zg2nDGkCpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoLZIXWCOncSUjEpmbd2TxWn5iPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGExNDEwNjktNDA0Zi0z ZTU1LWJmNGYtZDQzMGUxYzVlYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwXvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxNLXWQbsRT9aX2OsT74bg5Oqfba5TPYuOSMOLOcZAYItHGtck4xWCw KyRzmN0g4KK2pL98czv0nvF8XNbpxgCvrfuDcfNE+lumStbS1s6PLAXLcUfjOgDq 7z6HbXPE3lc3au/7H88lEqp7u3dPD5VTe1Gb4yMnyNqHfejbVg4y6D0WbpkRpkBk Wo5k7uJ/+olhfeexy+ruX1fC9XRH2jCcp0tJMsW1k4yNAew04JBVx/jC8fcA1CQr otWrnnmYoxj+HfCRv9MeSYWBm4DdfD8Aktg3EWG1KZwXL5VYWkiwBNpQDrWOubQs u8zNOZvYUfrJYUWRQJ2q/QxZ2ITgyR0= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:30 2026 by rpki-client