$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa File: 4f0cf56c-094b-3ec5-8954-8e7090994967.roa (raw, json) Hash identifier: C3Q/JckL7m5JFuL1ASjcG+SyxfzSWG5Bd8lsSf9hQuQ= Subject key identifier: A6:6B:91:3B:1B:93:B6:3F:F8:D1:5A:ED:3B:AB:8D:FB:66:31:62:3D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA272D74FAE23650392F5480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 152.67.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:2d:74:fa:e2:36:50:39:2f:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=fc4f54d1-ffe4-4efd-8cb2-1b98c38fd424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0e:c5:7d:6e:7d:c2:8d:89:64:0e:46:f9:36: c7:31:5c:44:68:23:a5:7c:d7:f2:6a:ea:f1:74:98: 6b:df:f8:6e:43:b0:4f:0c:17:7d:41:0b:29:7b:83: cb:d5:83:c2:55:0a:fa:e9:31:7a:f7:3f:1f:7b:6a: 69:63:eb:0f:f8:60:21:f4:9b:9e:4f:ca:59:ac:69: 57:9c:c1:43:d5:aa:28:06:c2:52:5d:a0:3d:f6:5c: cd:67:e2:b5:64:de:c2:51:be:f2:bb:40:3e:c1:f2: 7c:3f:fa:f5:52:52:f7:bf:6e:0b:7f:36:cc:16:a1: ca:56:97:5b:99:2b:4f:a6:c9:e6:0a:89:59:5f:88: ca:42:a9:47:2d:58:dc:75:f8:44:e3:ab:53:77:ea: f7:92:bb:ee:af:2a:92:54:c4:e3:c3:68:9f:21:c2: 11:0d:14:24:5f:73:b6:04:ea:bc:dd:da:28:a0:61: 9d:17:75:fc:53:11:71:19:5d:02:a3:cc:01:6c:7d: 6b:4e:ae:1d:c2:10:5e:97:70:d7:25:e8:53:f7:aa: 85:8b:3d:f1:73:1d:3c:bb:83:dd:2b:25:a6:ff:c7: d4:f0:3b:41:e7:a2:a2:77:82:08:cd:69:c5:f5:64: 1b:4c:d9:f7:18:b7:43:7b:42:4f:42:50:71:5e:4a: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6B:91:3B:1B:93:B6:3F:F8:D1:5A:ED:3B:AB:8D:FB:66:31:62:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a3:f5:b8:03:c9:fe:7d:fa:f0:1b:7b:cd:53:0b:cc:d5:c9: 65:65:35:57:f3:e4:86:1c:13:c9:66:6e:bf:42:3f:b2:8b:19: 94:e9:77:6c:4b:dc:3d:52:7e:63:6f:9b:74:8e:71:e4:f0:4b: cb:ba:4e:a7:54:0c:66:95:e8:17:ed:98:24:d2:9b:20:47:40: 5a:47:5d:0c:ca:66:03:3e:27:40:89:93:eb:b0:3c:b5:59:36: 9e:a5:76:db:5b:a5:0f:ee:8d:56:94:34:9e:81:4d:67:f8:d7: 75:a8:77:40:ad:36:72:2f:54:b1:12:e3:d1:d5:7b:30:8f:27: 33:62:bb:9d:41:f8:04:f8:63:77:79:ed:b5:06:53:fe:1f:ab: 19:72:85:d3:62:a0:cb:79:33:b0:32:0b:97:e1:7c:c3:b5:82: 77:fb:b2:69:37:d4:db:ea:10:d3:13:e0:ef:f1:36:85:7e:b3: ed:b9:de:e9:b2:f1:37:7d:1d:d9:4b:04:1d:1d:6f:22:51:41: a0:3e:f3:79:17:3d:e1:e6:67:df:dd:47:c3:bc:f8:dc:61:9b: 58:79:e9:0f:29:b3:3c:06:cb:1c:e9:7d:13:94:f7:96:59:ac: 47:27:39:14:3c:81:e4:1b:3f:13:c7:0f:03:47:0d:06:92:9a: e0:17:cc:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJy10+uI2UDkvVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ZmM0ZjU0ZDEtZmZlNC00ZWZkLThjYjItMWI5OGMzOGZkNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A7FfW59wo2JZA5G+TbHMVxEaCOlfNfyaurx dJhr3/huQ7BPDBd9QQspe4PL1YPCVQr66TF69z8fe2ppY+sP+GAh9JueT8pZrGlX nMFD1aooBsJSXaA99lzNZ+K1ZN7CUb7yu0A+wfJ8P/r1UlL3v24LfzbMFqHKVpdb mStPpsnmColZX4jKQqlHLVjcdfhE46tTd+r3krvuryqSVMTjw2ifIcIRDRQkX3O2 BOq83doooGGdF3X8UxFxGV0Co8wBbH1rTq4dwhBel3DXJehT96qFiz3xcx08u4Pd KyWm/8fU8DtB56Kid4IIzWnF9WQbTNn3GLdDe0JPQlBxXkqXIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZrkTsbk7Y/+NFa7TurjftmMWI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGYwY2Y1NmMtMDk0Yi0z ZWM1LTg5NTQtOGU3MDkwOTk0OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmENAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+j9bgDyf59+vAbe81TC8zVyWVlNVfz5IYcE8lmbr9CP7KLGZTpd2xL 3D1SfmNvm3SOceTwS8u6TqdUDGaV6BftmCTSmyBHQFpHXQzKZgM+J0CJk+uwPLVZ Np6ldttbpQ/ujVaUNJ6BTWf413Wod0CtNnIvVLES49HVezCPJzNiu51B+AT4Y3d5 7bUGU/4fqxlyhdNioMt5M7AyC5fhfMO1gnf7smk31NvqENMT4O/xNoV+s+253umy 8Td9HdlLBB0dbyJRQaA+83kXPeHmZ9/dR8O8+Nxhm1h56Q8pszwGyxzpfROU95ZZ rEcnORQ8geQbPxPHDwNHDQaSmuAXzFI= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:31 2026 by rpki-client