$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa File: 8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa (raw, json) Hash identifier: X6v3LhIGKSGvGhxe7MSs861+Iw0MMtbsgS6pOTIPqOM= Subject key identifier: DB:38:EC:8A:2B:C3:2D:D6:30:07:E9:C8:B5:B6:29:3F:67:17:C6:EF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA2731ADF2BEBCBECDD6A180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 152.70.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:31:ad:f2:be:bc:be:cd:d6:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=8150d427-5bf3-4a69-94e4-5e5e5c46de79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:c6:ec:16:13:ab:e9:36:53:1d:3d:c7:f5: 4c:e0:95:f0:01:13:e9:c2:fb:34:f8:11:ae:84:9c: 19:52:8b:3a:2d:77:fd:d8:56:17:01:40:3b:c3:06: 31:bd:24:f5:82:be:9d:5c:e9:14:4f:9d:c7:41:f7: 4d:04:81:b4:27:2f:b1:44:2b:97:30:df:98:b0:c2: 59:75:bc:8f:10:c0:f0:78:f2:ad:5e:92:66:13:fc: 40:5c:48:18:96:45:21:eb:15:69:47:1e:50:68:53: fa:74:3a:e3:c6:8f:fc:c7:c6:16:63:ea:9a:13:01: c4:ee:1e:cc:1b:cb:bf:48:15:13:f2:43:ff:3b:60: 1b:0b:f9:ff:c3:c5:05:73:8f:22:3f:c7:60:ab:cd: 77:12:2d:fd:6e:65:e8:2e:a0:3d:5c:80:b3:b6:84: 93:8f:56:94:dd:70:e1:ca:af:da:b2:d2:83:94:44: 4f:ff:5f:7c:23:ef:0f:cf:8d:65:68:35:ab:a8:e0: 6d:9a:86:70:5e:8b:e5:3a:e5:32:08:ca:61:32:dd: b0:6e:35:84:55:ec:7c:ec:fa:74:90:3d:45:2a:68: e3:59:9e:04:c7:fe:80:c5:6b:32:6f:50:e3:03:55: 7f:2f:2d:fd:50:48:e8:a1:f0:2f:81:dd:ed:5b:9c: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:38:EC:8A:2B:C3:2D:D6:30:07:E9:C8:B5:B6:29:3F:67:17:C6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:23:5f:69:c7:16:f9:4d:3a:f2:42:c9:bd:88:b3:bf:a8:79: 95:f6:f5:04:24:10:e2:bc:3c:d9:11:1b:76:59:95:61:a0:63: f1:0c:a8:e8:7b:50:a2:e0:0d:21:20:01:69:9d:7f:15:2a:a5: 91:13:dc:14:b5:c8:88:cf:91:a9:28:90:1b:19:ea:23:5a:9b: 58:0c:2b:1e:fb:62:d5:f6:09:fe:43:44:7d:a5:51:73:8c:43: 68:c8:13:4b:92:17:5d:b2:e4:8c:5d:f5:d0:65:fe:77:41:02: cc:c9:1a:07:ab:d7:4b:44:a7:f4:5b:ac:e9:51:6a:64:c5:51: 80:56:94:f4:37:10:08:64:32:2a:a9:d0:84:a3:23:31:70:8b: 8e:15:e4:3f:f2:eb:d1:fd:77:53:a7:33:fe:d6:e8:5a:19:a6: fe:3f:48:60:4a:33:f6:fe:b3:ab:2f:99:77:8e:f4:8b:b7:25: c0:04:3c:80:ca:22:8b:aa:ea:ba:b0:5d:45:54:ab:5d:f0:6c: 59:43:71:e5:e2:32:8c:a8:c7:52:90:5d:dd:84:97:ef:e7:06: ec:2e:f1:30:0d:e3:69:6f:19:5a:2f:cf:fc:ba:88:5d:14:ae: 1d:c7:0b:f2:14:c3:e5:9c:48:cf:da:15:90:ce:34:56:c2:8d: fa:e6:fa:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJzGt8r68vs3WoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ODE1MGQ0MjctNWJmMy00YTY5LTk0ZTQtNWU1ZTVjNDZkZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGvG7BYTq+k2Ux09x/VM4JXwARPpwvs0+BGu hJwZUos6LXf92FYXAUA7wwYxvST1gr6dXOkUT53HQfdNBIG0Jy+xRCuXMN+YsMJZ dbyPEMDwePKtXpJmE/xAXEgYlkUh6xVpRx5QaFP6dDrjxo/8x8YWY+qaEwHE7h7M G8u/SBUT8kP/O2AbC/n/w8UFc48iP8dgq813Ei39bmXoLqA9XICztoSTj1aU3XDh yq/astKDlERP/198I+8Pz41laDWrqOBtmoZwXovlOuUyCMphMt2wbjWEVex87Pp0 kD1FKmjjWZ4Ex/6AxWsyb1DjA1V/Ly39UEjoofAvgd3tW5yJgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs47Iorwy3WMAfpyLW2KT9nF8bvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODAzNWYwNGUtN2M1MC0z NGYwLWE4OTUtNmM1ZjkyYWNhMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQjX2nHFvlNOvJCyb2Is7+oeZX29QQkEOK8PNkRG3ZZlWGgY/EMqOh7 UKLgDSEgAWmdfxUqpZET3BS1yIjPkakokBsZ6iNam1gMKx77YtX2Cf5DRH2lUXOM Q2jIE0uSF12y5Ixd9dBl/ndBAszJGger10tEp/RbrOlRamTFUYBWlPQ3EAhkMiqp 0ISjIzFwi44V5D/y69H9d1OnM/7W6FoZpv4/SGBKM/b+s6svmXeO9Iu3JcAEPIDK Iouq6rqwXUVUq13wbFlDceXiMoyox1KQXd2El+/nBuwu8TAN42lvGVovz/y6iF0U rh3HC/IUw+WcSM/aFZDONFbCjfrm+tg= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:21 2026 by rpki-client