$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa File: 4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa (raw, json) Hash identifier: iHdp4ECBQeKmqC0V93MCyzRS8QxS1cMd/3vdqidVUzU= Subject key identifier: CC:BD:8F:8A:EC:2E:39:64:B5:A9:AD:79:13:FE:FB:B0:1E:2F:12:E7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CBDB20E4BA577DCF156A2D240 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 31898 IP address blocks: 168.107.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b2:0e:4b:a5:77:dc:f1:56:a2:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=19aac813-7b5a-41ef-92dc-48ee2aadb0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:df:56:c2:20:a7:94:ed:f9:49:a5:b6:09:29: 4d:6f:84:cf:8a:64:40:82:20:7c:9c:86:c9:ec:84: 84:e6:e6:4c:75:90:e2:8f:03:f3:b6:5f:c8:b8:64: a0:3f:5a:79:09:03:78:9c:0d:2a:18:7e:8f:19:7e: 40:a1:5d:c5:7f:e2:d8:d0:46:16:e7:ed:9e:4d:23: 88:1a:46:76:32:1a:d1:c2:29:6c:4e:a8:1c:10:9f: 19:4a:45:23:08:f5:b0:36:bc:46:1d:e2:6c:54:2d: 16:0a:71:83:f8:4e:d4:8c:fc:80:76:56:42:6a:70: a0:ac:4b:a1:71:68:f5:ba:0e:38:9d:1e:3d:4d:b1: da:80:fd:90:ac:63:76:eb:1e:46:94:c3:fe:2f:ef: c9:08:c3:e9:b3:59:fe:02:4b:62:27:7c:26:88:7c: 5d:8d:8a:52:77:62:7f:3b:a6:eb:66:4e:da:0b:81: b1:4b:c1:41:7a:7f:d0:a5:ae:90:53:a8:16:52:17: c0:8f:0c:1c:e5:1e:68:17:1c:db:2c:fc:ec:a6:95: 2e:a2:db:63:65:fb:95:70:0c:40:d6:6c:4b:f7:04: 6a:d0:27:36:38:ec:26:e5:a5:be:66:5b:9c:56:ad: 98:94:95:aa:de:90:2b:37:75:d3:fc:45:89:ec:e4: 00:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BD:8F:8A:EC:2E:39:64:B5:A9:AD:79:13:FE:FB:B0:1E:2F:12:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7c:ce:5d:e6:f7:3d:15:29:8d:24:74:e6:8e:c3:bc:a9:cd: 17:02:2d:e6:35:0e:4b:db:9b:23:5a:bc:3d:be:18:28:6c:a9: d6:45:f4:b8:77:41:e4:2b:c8:4e:0d:9a:f6:c0:0f:ea:77:b4: bf:a1:cc:c8:85:5a:cc:65:11:52:cf:b5:b3:6b:27:98:fc:2b: ea:3b:a2:b2:ec:43:8c:6f:43:e0:80:d3:37:ce:a1:9f:f6:6a: 67:d7:41:1b:69:91:fc:99:90:2a:01:23:32:fc:49:9f:52:a7: 44:02:03:6a:f5:5f:47:e6:9e:c6:d4:ca:22:bc:c0:c6:18:49: 5d:d3:85:0e:76:8b:43:02:42:61:5f:7a:8b:3a:f2:fe:9c:1e: fe:61:e2:58:5d:cf:e8:22:40:3d:88:67:17:ad:d2:0e:b4:f0: 3c:19:df:79:e9:ee:20:1b:82:71:59:a1:6c:02:9d:ad:ad:04: 5e:8a:37:7e:7c:db:30:8a:bd:92:29:f0:33:5b:6a:74:92:87: 7e:aa:20:a4:4f:c8:bd:06:36:ad:89:69:ed:c4:0e:3a:ff:1d: 2d:2e:50:a2:c9:f7:1a:e9:1d:fb:41:a3:e4:12:dc:79:3e:1e: 9e:47:28:03:40:b5:ba:d7:fc:98:a4:64:2f:b7:1f:44:89:b5: 96:58:8c:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sg5LpXfc8Vai0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk MTlhYWM4MTMtN2I1YS00MWVmLTkyZGMtNDhlZTJhYWRiMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt9WwiCnlO35SaW2CSlNb4TPimRAgiB8nIbJ 7ISE5uZMdZDijwPztl/IuGSgP1p5CQN4nA0qGH6PGX5AoV3Ff+LY0EYW5+2eTSOI GkZ2MhrRwilsTqgcEJ8ZSkUjCPWwNrxGHeJsVC0WCnGD+E7UjPyAdlZCanCgrEuh cWj1ug44nR49TbHagP2QrGN26x5GlMP+L+/JCMPps1n+AktiJ3wmiHxdjYpSd2J/ O6brZk7aC4GxS8FBen/Qpa6QU6gWUhfAjwwc5R5oFxzbLPzsppUuottjZfuVcAxA 1mxL9wRq0Cc2OOwm5aW+ZlucVq2YlJWq3pArN3XT/EWJ7OQA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMy9j4rsLjlktamteRP++7AeLxLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGZmYjZjZTYtNDI1Yi0z MTQwLTljZmMtMzllYjZkMjU3OTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp8zl3m9z0VKY0kdOaOw7ypzRcCLeY1DkvbmyNavD2+GChsqdZF9Lh3 QeQryE4NmvbAD+p3tL+hzMiFWsxlEVLPtbNrJ5j8K+o7orLsQ4xvQ+CA0zfOoZ/2 amfXQRtpkfyZkCoBIzL8SZ9Sp0QCA2r1X0fmnsbUyiK8wMYYSV3ThQ52i0MCQmFf eos68v6cHv5h4lhdz+giQD2IZxet0g608DwZ33np7iAbgnFZoWwCna2tBF6KN358 2zCKvZIp8DNbanSSh36qIKRPyL0GNq2Jae3EDjr/HS0uUKLJ9xrpHftBo+QS3Hk+ Hp5HKANAtbrX/JikZC+3H0SJtZZYjIg= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:22 2026 by rpki-client