$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4da36949-f888-3eaa-848b-f974f95eaa71.roa File: 4da36949-f888-3eaa-848b-f974f95eaa71.roa (raw, json) Hash identifier: iFS7X385TXTHkMJ+7UKWGCcS8R6Kvi+1mt7GXGv7ZY0= Subject key identifier: FC:00:24:E9:7F:EF:9B:83:B2:A0:08:CC:53:4B:A6:86:FC:62:11:39 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E73250C226EB0EEDAF380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4da36949-f888-3eaa-848b-f974f95eaa71.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 132.145.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:73:25:0c:22:6e:b0:ee:da:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=265e2b4f-c078-421a-924d-be8fa3c4ced1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:17:fd:0d:70:d6:50:29:b0:d2:87:03:c6: 05:60:c2:b4:e1:0e:e9:5e:54:57:d2:f1:61:05:d3: 25:64:6a:92:c6:f6:1a:eb:d2:4a:fc:1c:ac:f3:33: 9f:7a:23:bb:22:c5:2a:17:c5:77:d1:9d:7e:6c:28: 18:1d:d9:82:63:15:d9:ca:98:04:40:6f:d7:56:ba: 54:0c:f2:7e:63:a0:fc:7f:f0:bf:dc:83:56:cc:2b: a0:e4:53:3b:d2:f5:dd:50:b9:d4:3f:4e:19:b9:d2: 3e:d3:85:a5:f8:ef:ab:3a:e1:3d:4c:9e:6d:90:d9: 5e:0f:f6:28:c9:82:37:e8:bc:22:60:e0:99:82:3f: 34:32:52:c3:00:67:13:df:be:eb:f0:a0:e5:1f:73: 72:b6:71:a7:fd:b1:6f:d3:69:2b:b5:42:af:67:da: 66:4c:52:ff:ff:08:a7:34:39:08:11:20:f2:e4:c1: 0e:e1:22:57:62:88:1e:cf:13:15:bc:a3:64:c8:ce: 6d:8e:ca:d2:a7:70:69:72:7b:d5:71:b0:4f:6c:ba: 9e:61:78:97:ac:da:50:c5:80:ab:8d:ad:64:21:69: 9c:15:d5:f8:db:db:73:fb:e6:76:88:af:9e:e7:61: d5:a4:c1:a6:64:57:de:3a:3b:db:cd:df:af:cb:96: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:00:24:E9:7F:EF:9B:83:B2:A0:08:CC:53:4B:A6:86:FC:62:11:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4da36949-f888-3eaa-848b-f974f95eaa71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f4:98:1e:68:b3:bc:7b:0d:59:8f:0b:af:75:ef:4b:82:a1: 5a:8a:ee:c9:a6:70:c1:e2:48:f0:20:11:41:70:df:ef:44:45: 63:b1:6d:a3:80:1d:19:b4:da:ce:15:90:d8:8f:bd:4b:09:dd: b4:19:37:be:54:07:d9:f5:65:9d:07:b3:74:aa:41:7f:5a:a8: 67:78:f8:34:91:0d:0d:cf:ea:3a:34:61:3f:61:fe:a8:c0:09: 3a:c3:74:b6:b7:7b:77:26:94:41:f6:0e:e6:4a:e3:a8:8a:8d: 30:3e:c3:ef:84:f7:b5:d7:23:53:41:a2:b1:e7:60:be:a2:18: 8d:d9:30:30:fa:42:72:bb:6e:3d:ab:99:46:4e:97:cc:4e:35: 6c:3a:1f:5a:d3:de:d0:e9:6c:53:95:72:85:1a:45:c1:ce:94: 1c:67:00:2f:9b:1b:85:3d:16:76:ed:53:b0:73:23:80:66:e6: 79:d1:6b:bd:8a:a0:8c:c2:9d:66:97:68:a4:bd:5e:e8:47:58: b4:4e:c9:8a:a7:65:c7:d3:6e:f7:e7:09:14:19:13:77:66:cd: ab:65:a1:b5:ce:63:8a:6f:70:5f:ff:35:8a:52:9e:d1:18:29: 70:51:01:36:31:0d:ad:45:49:cb:af:ca:0a:16:64:cf:89:95: 37:f6:97:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXnMlDCJusO7a84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjY1ZTJiNGYtYzA3OC00MjFhLTkyNGQtYmU4ZmEzYzRjZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CUX/Q1w1lApsNKHA8YFYMK04Q7pXlRX0vFh BdMlZGqSxvYa69JK/Bys8zOfeiO7IsUqF8V30Z1+bCgYHdmCYxXZypgEQG/XVrpU DPJ+Y6D8f/C/3INWzCug5FM70vXdULnUP04ZudI+04Wl+O+rOuE9TJ5tkNleD/Yo yYI36LwiYOCZgj80MlLDAGcT377r8KDlH3NytnGn/bFv02krtUKvZ9pmTFL//win NDkIESDy5MEO4SJXYogezxMVvKNkyM5tjsrSp3BpcnvVcbBPbLqeYXiXrNpQxYCr ja1kIWmcFdX429tz++Z2iK+e52HVpMGmZFfeOjvbzd+vy5bd+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwAJOl/75uDsqAIzFNLpob8YhE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGRhMzY5NDktZjg4OC0z ZWFhLTg0OGItZjk3NGY5NWVhYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhJECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX0mB5os7x7DVmPC69170uCoVqK7smmcMHiSPAgEUFw3+9ERWOxbaOA HRm02s4VkNiPvUsJ3bQZN75UB9n1ZZ0Hs3SqQX9aqGd4+DSRDQ3P6jo0YT9h/qjA CTrDdLa3e3cmlEH2DuZK46iKjTA+w++E97XXI1NBorHnYL6iGI3ZMDD6QnK7bj2r mUZOl8xONWw6H1rT3tDpbFOVcoUaRcHOlBxnAC+bG4U9FnbtU7BzI4Bm5nnRa72K oIzCnWaXaKS9XuhHWLROyYqnZcfTbvfnCRQZE3dmzatlobXOY4pvcF//NYpSntEY KXBRATYxDa1FScuvygoWZM+JlTf2l28= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:56 2026 by rpki-client