$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa File: 4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa (raw, json) Hash identifier: 0wEs4iMw9GWwxNpj6MHRESEIi/+JwqfD0bkNleMDfws= Subject key identifier: BC:AB:19:A2:44:66:E2:A2:FA:D4:F5:52:C6:6A:14:9B:27:8B:9E:DC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA272D51B98890074778C4F0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 159.54.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:2d:51:b9:88:90:07:47:78:c4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=09bb66d1-7d98-4585-9cbc-22cb08571e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d0:8b:3c:74:ff:85:31:17:73:2a:19:d7:af: 30:4a:40:69:3c:31:1a:0b:bc:10:f6:cc:b1:31:78: 3e:fe:55:fa:79:4c:3c:7a:40:e5:0f:c8:76:c2:79: 05:c7:dc:37:b2:af:6f:83:55:55:ae:a3:c9:8b:8c: 1c:a5:23:03:d1:59:1d:2d:68:50:11:4a:cd:8f:6b: 9a:c6:fa:a7:15:b4:26:09:18:03:ff:73:41:bc:50: a6:a3:27:df:6f:0f:6d:24:56:45:c5:a9:bd:8d:aa: 45:8a:d9:25:f6:46:b9:e5:7d:29:74:b9:aa:7e:1c: fb:5d:d6:1f:1c:e5:4d:45:23:2e:f4:7a:47:01:ab: 06:d1:f0:b0:5f:16:2b:38:f0:cf:a0:7e:df:3c:88: fa:a2:0f:61:54:9f:2c:56:05:44:a8:7e:30:95:25: 44:28:86:c6:b3:eb:54:84:9d:8b:d8:1c:f1:4a:2f: 73:14:cb:a1:2f:63:48:38:aa:18:90:5b:95:78:3f: c3:a0:2a:af:10:47:87:46:44:56:8d:53:ad:c1:ae: df:b8:7b:74:c6:b6:58:89:6e:e4:ab:71:06:53:19: ab:43:df:c4:5d:16:8f:89:5e:75:70:49:a5:58:5c: 6d:3b:09:9a:7e:e4:ac:bc:bc:49:ab:26:15:7d:29: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AB:19:A2:44:66:E2:A2:FA:D4:F5:52:C6:6A:14:9B:27:8B:9E:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.54.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:77:c2:ec:6e:07:3d:7d:d7:dc:e9:4d:a8:58:ef:35:86:bd: 1d:87:c9:d1:49:f5:a0:58:dc:8a:5b:00:bb:ce:07:84:25:3a: 2b:f8:9c:db:0d:3f:b6:f6:7c:19:87:70:73:66:0f:c0:f8:42: d0:e1:b9:03:ba:97:ce:5c:75:3f:99:ee:01:89:4a:72:ec:eb: cb:21:bd:58:dd:60:82:32:53:02:f2:a8:a3:f1:89:69:6b:91: 68:b2:93:52:20:dd:4e:80:e6:46:a6:92:b8:cf:20:cc:56:9f: 07:65:0b:f1:83:b5:29:0f:89:80:2e:46:2e:d6:65:bf:7b:dc: 3e:1b:58:66:92:68:c0:53:81:eb:7b:fa:b6:b8:7d:33:93:d0: 9f:ae:3e:a6:f1:d1:bd:e0:2b:c3:e4:f3:98:d0:c3:ec:5e:6b: d3:f6:a8:bf:29:4b:50:49:79:86:a5:3e:45:73:c9:43:6f:eb: 3d:be:29:dd:5b:02:1a:b1:de:6b:64:f4:eb:0f:c2:88:62:0b: 32:ac:1a:dc:c1:0e:e0:4c:04:27:38:76:83:b5:01:71:99:71: 65:bf:e1:5c:76:05:b7:58:c1:42:4e:b9:86:73:63:c6:91:77: 4b:e3:88:99:8c:6c:ee:88:eb:24:69:c0:c8:d3:f0:76:85:22: ed:ca:81:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJy1RuYiQB0d4xPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MDliYjY2ZDEtN2Q5OC00NTg1LTljYmMtMjJjYjA4NTcxZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdCLPHT/hTEXcyoZ168wSkBpPDEaC7wQ9syx MXg+/lX6eUw8ekDlD8h2wnkFx9w3sq9vg1VVrqPJi4wcpSMD0VkdLWhQEUrNj2ua xvqnFbQmCRgD/3NBvFCmoyffbw9tJFZFxam9japFitkl9ka55X0pdLmqfhz7XdYf HOVNRSMu9HpHAasG0fCwXxYrOPDPoH7fPIj6og9hVJ8sVgVEqH4wlSVEKIbGs+tU hJ2L2BzxSi9zFMuhL2NIOKoYkFuVeD/DoCqvEEeHRkRWjVOtwa7fuHt0xrZYiW7k q3EGUxmrQ9/EXRaPiV51cEmlWFxtOwmafuSsvLxJqyYVfSmZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyrGaJEZuKi+tT1UsZqFJsni57cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGVhMjhlODctYTVkMy0z OTM1LWI0NWItNWY5YzkyZjJkMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnzaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB3wuxuBz1919zpTahY7zWGvR2HydFJ9aBY3IpbALvOB4QlOiv4nNsN P7b2fBmHcHNmD8D4QtDhuQO6l85cdT+Z7gGJSnLs68shvVjdYIIyUwLyqKPxiWlr kWiyk1Ig3U6A5kamkrjPIMxWnwdlC/GDtSkPiYAuRi7WZb973D4bWGaSaMBTget7 +ra4fTOT0J+uPqbx0b3gK8Pk85jQw+xea9P2qL8pS1BJeYalPkVzyUNv6z2+Kd1b Ahqx3mtk9OsPwohiCzKsGtzBDuBMBCc4doO1AXGZcWW/4Vx2BbdYwUJOuYZzY8aR d0vjiJmMbO6I6yRpwMjT8HaFIu3KgXY= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:28 2026 by rpki-client