$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa File: 4faebc4b-4621-371a-b55b-980b9dfaa752.roa (raw, json) Hash identifier: hNZ8fM+TDTzsahHTez9A1kQeCgju4ALWPc3c7MBBV7Y= Subject key identifier: 1C:72:5E:58:43:70:8C:ED:49:B2:53:0F:8E:4E:42:63:14:85:64:29 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1C510742D75A9B30EF180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 164.152.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c5:10:74:2d:75:a9:b3:0e:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=769e4cef-f7cf-4f56-94f0-5aafa588e35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:06:46:b8:9a:bf:a4:ec:37:bb:ba:7d:4a:a1: 7d:af:1e:ed:8e:37:ed:ee:51:03:3f:a0:2d:e2:ea: b3:04:b1:57:ff:84:ef:be:a8:5f:9c:1e:12:d4:97: 1e:6f:7e:a6:47:ca:64:4d:bf:78:fe:0b:5d:d4:97: 00:13:6e:fb:65:22:d3:39:aa:95:2d:50:97:e6:4d: f7:6e:72:0e:44:61:03:54:75:d1:81:f4:02:7e:a9: 09:94:b9:11:f4:8e:65:a2:c6:18:50:4b:2a:45:9b: a3:b1:37:09:06:1b:1b:e8:ca:17:9f:ee:96:56:b0: c7:0e:92:4c:63:3b:0b:a0:3e:6f:2f:0a:29:bc:7a: c6:c4:5e:d6:7c:56:de:f5:70:fc:7c:81:0e:e2:8e: 41:e9:ef:f9:8c:79:1e:b2:85:a5:b9:51:dd:be:39: 06:e2:2e:fa:3e:01:a7:ef:3f:74:00:38:52:d2:e8: b8:26:96:40:8e:c4:c1:cb:de:4e:66:72:55:09:70: ca:9a:98:df:6c:e1:10:7d:e8:ce:d6:d0:cb:ee:05: 22:f7:f1:da:dc:bc:3d:ac:54:87:bf:35:52:fc:0e: af:e6:2f:b8:8f:6c:c1:15:95:62:0c:20:93:53:7d: 9a:89:2b:fb:bc:c6:3d:3a:e5:ee:b6:a5:56:d2:58: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:72:5E:58:43:70:8C:ED:49:B2:53:0F:8E:4E:42:63:14:85:64:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1d:23:99:5d:1b:e9:a5:68:91:38:b4:d8:08:df:34:68:e7: c7:a7:c4:86:d4:d9:cf:ad:29:b5:bb:b4:56:95:c7:d8:70:ad: 86:e6:aa:94:a2:ae:90:54:0c:19:45:c4:30:3e:1c:cd:49:d3: 8b:c9:f8:9d:7f:75:95:45:7b:14:2c:30:42:0a:54:95:de:58: 2a:cc:48:d8:60:f8:e6:0d:15:ab:e3:a3:5a:4f:8c:23:1d:33: 27:14:13:47:23:00:34:36:0d:97:83:e1:67:75:25:1e:2b:c0: 7c:a0:b7:c3:83:51:7b:98:d8:0c:99:d1:8d:3d:7d:22:50:13: 62:52:41:e6:08:03:4f:00:59:19:f2:19:1d:3e:48:1e:37:86: 65:6d:42:88:de:7d:a8:64:17:5f:06:88:78:07:08:04:76:e7: 2d:76:b2:c0:2e:6f:9a:84:50:b1:6c:ca:ce:a4:50:8a:44:eb: 23:50:42:e6:a5:72:a8:05:0b:2f:d5:f0:f5:61:34:8f:82:4b: 21:51:7a:88:6a:b9:f6:45:ca:22:a5:6a:2f:7b:42:a8:89:34: 77:4f:d3:33:e3:f6:9d:89:17:fa:5f:ae:d3:de:39:2b:c7:48: ca:0f:b9:01:0a:0c:05:d6:e5:47:4d:35:5c:e6:86:e9:47:27: f8:7b:68:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cUQdC11qbMO8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk NzY5ZTRjZWYtZjdjZi00ZjU2LTk0ZjAtNWFhZmE1ODhlMzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQZGuJq/pOw3u7p9SqF9rx7tjjft7lEDP6At 4uqzBLFX/4TvvqhfnB4S1Jceb36mR8pkTb94/gtd1JcAE277ZSLTOaqVLVCX5k33 bnIORGEDVHXRgfQCfqkJlLkR9I5losYYUEsqRZujsTcJBhsb6MoXn+6WVrDHDpJM YzsLoD5vLwopvHrGxF7WfFbe9XD8fIEO4o5B6e/5jHkesoWluVHdvjkG4i76PgGn 7z90ADhS0ui4JpZAjsTBy95OZnJVCXDKmpjfbOEQfejO1tDL7gUi9/Ha3Lw9rFSH vzVS/A6v5i+4j2zBFZViDCCTU32aiSv7vMY9OuXutqVW0lgmjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxyXlhDcIztSbJTD45OQmMUhWQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGZhZWJjNGItNDYyMS0z NzFhLWI1NWItOTgwYjlkZmFhNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpJjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAodI5ldG+mlaJE4tNgI3zRo58enxIbU2c+tKbW7tFaVx9hwrYbmqpSi rpBUDBlFxDA+HM1J04vJ+J1/dZVFexQsMEIKVJXeWCrMSNhg+OYNFavjo1pPjCMd MycUE0cjADQ2DZeD4Wd1JR4rwHygt8ODUXuY2AyZ0Y09fSJQE2JSQeYIA08AWRny GR0+SB43hmVtQojefahkF18GiHgHCAR25y12ssAub5qEULFsys6kUIpE6yNQQual cqgFCy/V8PVhNI+CSyFReohqufZFyiKlai97QqiJNHdP0zPj9p2JF/pfrtPeOSvH SMoPuQEKDAXW5UdNNVzmhulHJ/h7aB4= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:15 2026 by rpki-client