$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/658a0ed3-fb77-3710-b9de-363e15a1293b.roa File: 658a0ed3-fb77-3710-b9de-363e15a1293b.roa (raw, json) Hash identifier: qNVCeV7wQyrYfy6RriYLUopW1l77m3GmOE7TmywRNt8= Subject key identifier: 91:12:BD:C2:D9:20:DD:57:DA:C3:4E:FB:6C:0E:78:A9:94:63:2D:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1C9942C5D02095595B0A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/658a0ed3-fb77-3710-b9de-363e15a1293b.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 159.112.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c9:94:2c:5d:02:09:55:95:b0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=c594a646-0176-49e2-8022-7a4c4cc293b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:72:8a:ac:53:bf:7b:49:ff:92:2e:7f:6b:bf: 86:87:4a:4f:02:e6:7d:56:43:60:79:b4:cf:a3:07: 94:93:fc:03:ab:3a:bc:eb:ff:82:76:40:70:78:8d: a5:ef:0a:1a:c1:71:bc:52:19:25:89:09:3b:a0:8f: e4:7c:b4:75:64:e4:6a:c4:ef:85:5f:1d:23:b0:0a: 92:0e:e9:84:be:db:9a:83:42:99:05:c1:3d:74:bd: 5f:03:06:bc:a9:06:e2:c0:21:30:50:35:fe:0a:ca: e7:5a:01:14:7a:db:a4:a8:8f:e7:1e:03:8d:5c:8e: d4:63:fb:0c:d9:58:41:75:47:e6:2d:60:79:9b:5f: b1:e4:5d:2e:34:34:3d:57:65:73:5b:b4:ff:44:cb: 23:0e:97:c9:c9:b7:c8:39:32:d3:af:b2:50:c5:49: f9:64:12:7e:21:ea:71:34:24:2c:b5:33:9f:59:b1: 44:1b:90:7d:4d:6e:e5:e5:58:f9:e3:42:31:64:09: 77:50:57:2f:0e:85:9a:00:7b:f3:92:56:d2:45:4b: 80:11:98:7c:d9:f9:2a:29:70:74:ed:c0:ca:ef:69: be:96:19:9c:07:3d:e9:80:6a:63:7f:6c:04:aa:00: 7c:31:33:0a:0f:6e:6c:e2:3d:7d:2c:36:16:a1:29: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:12:BD:C2:D9:20:DD:57:DA:C3:4E:FB:6C:0E:78:A9:94:63:2D:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/658a0ed3-fb77-3710-b9de-363e15a1293b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.112.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:5c:d0:0c:c1:70:2a:69:f5:8b:10:74:b1:69:72:f8:46:9d: 32:e8:64:d9:c1:ce:00:37:73:f0:ac:5f:5b:25:da:2d:ba:5f: ea:b6:b4:2e:2a:45:a2:74:63:ca:f4:05:60:57:f0:c7:21:e6: b6:e9:4c:2c:bd:a7:b4:f5:b3:39:b1:0e:62:88:0e:3a:6a:4e: 3e:bd:52:c6:05:01:94:3c:72:33:e3:33:ea:6b:f1:07:9e:fb: bd:b2:22:1c:82:b5:b3:a9:b8:3c:44:ac:7e:85:d1:b2:d0:63: 23:35:fa:1a:98:90:9a:94:05:85:19:0f:4b:c8:3c:e7:d5:ba: 26:b3:97:ec:11:81:b1:a6:91:95:6b:41:dc:64:24:88:f1:55: 21:c4:98:57:8b:46:90:d6:5c:14:35:68:1f:a2:0d:be:a0:ed: 8d:d0:9c:45:b2:f4:88:6f:ad:b0:1e:26:6a:a0:62:a5:5c:77: 19:1d:7a:52:98:24:47:7e:2b:3c:54:37:49:7e:f7:32:21:b5: 80:a9:96:68:f8:a0:70:08:09:c0:00:1b:80:e2:e4:2b:aa:24: bb:27:b6:0a:aa:9f:85:d9:1c:2c:44:ac:62:55:23:e2:3e:e4: 6f:20:71:84:cd:b5:13:2c:4b:27:99:35:29:ff:46:51:9a:eb: 3d:fa:b4:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cmULF0CCVWVsKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk YzU5NGE2NDYtMDE3Ni00OWUyLTgwMjItN2E0YzRjYzI5M2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnKKrFO/e0n/ki5/a7+Gh0pPAuZ9VkNgebTP oweUk/wDqzq86/+CdkBweI2l7woawXG8UhkliQk7oI/kfLR1ZORqxO+FXx0jsAqS DumEvtuag0KZBcE9dL1fAwa8qQbiwCEwUDX+CsrnWgEUetukqI/nHgONXI7UY/sM 2VhBdUfmLWB5m1+x5F0uNDQ9V2VzW7T/RMsjDpfJybfIOTLTr7JQxUn5ZBJ+Iepx NCQstTOfWbFEG5B9TW7l5Vj540IxZAl3UFcvDoWaAHvzklbSRUuAEZh82fkqKXB0 7cDK72m+lhmcBz3pgGpjf2wEqgB8MTMKD25s4j19LDYWoSlLeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJESvcLZIN1X2sNO+2wOeKmUYy2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjU4YTBlZDMtZmI3Ny0z NzEwLWI5ZGUtMzYzZTE1YTEyOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn3CsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlc0AzBcCpp9YsQdLFpcvhGnTLoZNnBzgA3c/CsX1sl2i26X+q2tC4q RaJ0Y8r0BWBX8Mch5rbpTCy9p7T1szmxDmKIDjpqTj69UsYFAZQ8cjPjM+pr8Qee +72yIhyCtbOpuDxErH6F0bLQYyM1+hqYkJqUBYUZD0vIPOfVuiazl+wRgbGmkZVr QdxkJIjxVSHEmFeLRpDWXBQ1aB+iDb6g7Y3QnEWy9IhvrbAeJmqgYqVcdxkdelKY JEd+KzxUN0l+9zIhtYCplmj4oHAICcAAG4Di5CuqJLsntgqqn4XZHCxErGJVI+I+ 5G8gcYTNtRMsSyeZNSn/RlGa6z36tNo= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:31 2026 by rpki-client