$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4edf815a-03f2-3138-af2a-25b8d01e79fc.roa File: 4edf815a-03f2-3138-af2a-25b8d01e79fc.roa (raw, json) Hash identifier: HYJriNSkLqrx+Wcd2qORc/O8MqcQqXKfttiw8AZ+HL0= Subject key identifier: 99:BE:07:C2:A1:4B:7D:69:87:A5:4D:BC:86:D3:54:AC:C3:2E:41:90 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC7B40E1B127A9CC7555E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4edf815a-03f2-3138-af2a-25b8d01e79fc.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 168.129.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:7b:40:e1:b1:27:a9:cc:75:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=c5146fb8-259c-433a-a31e-011d162e33f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8c:13:3c:4d:15:c4:30:01:24:56:5b:6c:11: 8f:19:dc:3d:d1:eb:88:98:27:29:9c:9a:59:73:14: a8:18:1f:b5:9b:46:7d:b0:cb:94:06:fc:cf:a4:64: d7:cf:c2:25:83:23:e1:de:7a:a1:e2:1b:8b:2e:17: ea:37:cb:6f:d1:54:4b:5b:d0:de:60:47:18:2d:68: fe:20:1a:11:d0:b4:1c:91:62:f3:34:78:40:d4:d0: 4d:f6:fd:7c:a0:e8:8e:81:54:ad:4e:2b:68:1c:0d: 93:f1:06:ca:72:27:c5:32:bf:24:a7:98:7a:3d:64: 46:2f:f4:51:71:6a:80:6f:bc:47:ce:46:c5:27:83: f4:ef:44:50:68:d0:50:39:73:57:24:f7:9c:55:64: cd:07:e1:ee:84:31:99:ec:bd:e9:e0:ff:93:ec:1f: f0:17:e0:73:3f:04:e1:59:76:3c:fb:99:79:3f:8b: f7:90:73:13:e7:11:cc:2f:6c:01:6e:65:65:48:b5: 22:86:c9:2f:4b:d0:52:97:d9:96:29:a6:19:e5:a1: 0c:0f:b5:1a:ae:7b:ae:67:ff:bb:d3:96:2c:6d:9a: a1:82:e0:d5:4a:ef:99:c0:29:ed:e5:d6:ff:80:3f: 39:8b:22:3c:6e:c1:5f:9a:e2:06:79:68:b5:64:c0: d7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BE:07:C2:A1:4B:7D:69:87:A5:4D:BC:86:D3:54:AC:C3:2E:41:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4edf815a-03f2-3138-af2a-25b8d01e79fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:13:56:06:54:f6:ab:2e:7f:fc:84:2d:ec:d5:e8:10:00:86: 09:da:49:b7:6f:80:a2:04:96:a9:23:a5:47:b8:7e:05:cc:cd: 4f:5c:e2:65:0a:fc:de:27:ae:83:fb:60:e0:2f:2d:85:b0:aa: 35:5e:82:06:f6:96:17:43:cb:53:f0:ab:85:40:af:de:2b:e2: 38:d9:cb:31:c4:72:ed:1b:ed:0d:8c:39:1b:fc:30:c2:98:10: 25:7c:9e:02:6d:8b:1b:96:6a:a9:b3:2e:8b:6a:d8:2f:66:22: c9:52:29:03:da:5d:d8:04:6a:ae:71:91:92:df:7f:26:8f:2c: f7:a9:12:9d:ac:18:bc:61:ed:52:8e:59:9e:1b:83:52:68:56: 0a:4c:e9:9c:41:e9:24:d4:4e:ac:d6:14:73:94:43:07:78:0a: e9:9b:1f:58:1b:28:d9:b5:6f:ce:dc:3e:39:d6:35:ab:ed:ba: d7:b0:21:e3:72:12:4f:21:fd:e5:75:61:a6:a9:a4:a9:8d:37: dd:87:21:99:f7:1a:50:ca:a4:96:5b:32:7e:07:5c:7b:60:d3: 34:ae:8d:92:00:b2:38:19:e4:02:f7:f2:6b:3d:27:92:e1:7f: b1:46:3b:b0:76:05:ec:21:32:67:af:8f:4e:ee:3d:84:07:28: d5:64:c0:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHtA4bEnqcx1VeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YzUxNDZmYjgtMjU5Yy00MzNhLWEzMWUtMDExZDE2MmUzM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4wTPE0VxDABJFZbbBGPGdw90euImCcpnJpZ cxSoGB+1m0Z9sMuUBvzPpGTXz8IlgyPh3nqh4huLLhfqN8tv0VRLW9DeYEcYLWj+ IBoR0LQckWLzNHhA1NBN9v18oOiOgVStTitoHA2T8QbKcifFMr8kp5h6PWRGL/RR cWqAb7xHzkbFJ4P070RQaNBQOXNXJPecVWTNB+HuhDGZ7L3p4P+T7B/wF+BzPwTh WXY8+5l5P4v3kHMT5xHML2wBbmVlSLUihskvS9BSl9mWKaYZ5aEMD7UarnuuZ/+7 05YsbZqhguDVSu+ZwCnt5db/gD85iyI8bsFfmuIGeWi1ZMDXxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm+B8KhS31ph6VNvIbTVKzDLkGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGVkZjgxNWEtMDNmMi0z MTM4LWFmMmEtMjViOGQwMWU3OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqIHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4TVgZU9qsuf/yELezV6BAAhgnaSbdvgKIElqkjpUe4fgXMzU9c4mUK /N4nroP7YOAvLYWwqjVeggb2lhdDy1Pwq4VAr94r4jjZyzHEcu0b7Q2MORv8MMKY ECV8ngJtixuWaqmzLotq2C9mIslSKQPaXdgEaq5xkZLffyaPLPepEp2sGLxh7VKO WZ4bg1JoVgpM6ZxB6STUTqzWFHOUQwd4CumbH1gbKNm1b87cPjnWNavtutewIeNy Ek8h/eV1YaappKmNN92HIZn3GlDKpJZbMn4HXHtg0zSujZIAsjgZ5AL38ms9J5Lh f7FGO7B2BewhMmevj07uPYQHKNVkwCY= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:17 2026 by rpki-client