$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81725f95-aa9b-39b5-8c47-b89056bb8193.roa File: 81725f95-aa9b-39b5-8c47-b89056bb8193.roa (raw, json) Hash identifier: nVIqDrj7PX6qKgZDneQlLj6I8UvsF5zfxY2LgQl6H2I= Subject key identifier: BF:9D:DA:E2:55:89:42:F8:FE:33:08:DC:84:96:2F:D2:A7:74:A8:05 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E64325015C89DC3C7FC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81725f95-aa9b-39b5-8c47-b89056bb8193.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 147.154.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:64:32:50:15:c8:9d:c3:c7:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=475ec935-71cb-4fa7-80a6-3d725daccbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:ab:e6:8d:e9:b7:3e:c1:70:ab:a0:49:70: 65:49:25:6d:22:62:8c:68:73:a1:8e:0b:b3:2b:b0: 7c:ef:88:0f:58:c3:aa:b2:75:07:10:33:d0:6f:60: 7d:3e:8c:fc:53:d1:74:4e:30:45:94:ac:8e:fa:53: 53:2b:5e:06:7a:3c:20:3e:e9:67:d9:a4:16:05:d8: f3:c7:4e:fe:35:01:bb:78:11:2f:43:75:01:c3:74: 01:6f:f0:45:6e:50:30:02:f9:d5:10:21:5d:42:01: ac:12:22:90:4a:ad:09:4e:69:4f:9d:a7:9e:ac:bb: 50:64:0a:ba:82:ee:f7:0d:14:0b:26:8c:3f:b6:98: 74:d7:27:e2:7c:21:b7:6b:a9:01:b0:51:6c:20:54: c7:40:bd:60:b1:96:87:50:d1:c0:3d:8c:00:69:ff: 91:7c:3c:de:05:48:77:ae:35:2e:ed:41:50:fa:39: d9:7a:df:77:0d:79:84:00:01:dc:55:28:78:84:63: 73:e4:79:06:11:f6:79:88:ee:73:cb:a4:d5:43:80: 87:9f:f3:f4:92:2b:5d:8c:c3:0b:d6:21:76:f1:6c: f4:0d:80:9e:c2:53:76:1a:7f:0b:a6:f0:06:b5:3e: dc:80:84:3c:86:f9:24:3a:2a:db:6a:a3:90:31:f3: 5a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9D:DA:E2:55:89:42:F8:FE:33:08:DC:84:96:2F:D2:A7:74:A8:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81725f95-aa9b-39b5-8c47-b89056bb8193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:cd:bb:07:fc:0d:ea:f9:f0:27:1b:53:f5:f0:cd:e9:49:fc: d3:f2:c2:1a:a6:4a:a6:86:3c:33:34:7c:ab:0e:58:2f:41:e8: dc:ca:99:00:04:ea:66:ae:9a:a7:9a:8e:b3:5f:ea:7a:be:70: cc:10:af:8f:b5:34:7b:b1:51:ea:35:b9:e7:8d:14:33:a3:d8: 64:85:c6:cf:41:60:d5:81:6b:54:c1:f0:98:db:76:a9:3e:af: f3:b5:7b:2a:46:16:2f:3c:88:7f:5f:22:9c:34:38:6b:49:04: 36:9c:d3:12:1c:60:22:20:1b:7a:0a:f4:15:63:44:e0:ab:5a: 37:77:e2:c4:fd:5e:b8:c5:b9:c4:a3:71:7a:cd:00:e5:01:d9: 9b:74:f9:37:3b:fe:9e:96:5e:62:0b:79:dc:ea:f7:92:16:22: 3c:cd:29:a8:71:ae:22:db:38:cf:b0:91:47:9c:f1:f9:02:41: de:89:bc:09:0c:43:61:c1:48:64:3c:69:41:a2:96:53:1d:2f: 59:87:9f:3c:3c:43:2b:fc:bd:b1:35:b8:e8:f7:06:89:79:1a: 55:00:e2:f7:8e:31:1a:e7:a1:54:60:5f:2e:aa:e3:2c:d1:d0: 13:e8:7a:56:51:05:f8:29:d5:2a:27:92:43:68:e8:3f:38:ce: a3:a9:07:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXmQyUBXIncPH/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDc1ZWM5MzUtNzFjYi00ZmE3LTgwYTYtM2Q3MjVkYWNjYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdir5o3ptz7BcKugSXBlSSVtImKMaHOhjguz K7B874gPWMOqsnUHEDPQb2B9Poz8U9F0TjBFlKyO+lNTK14GejwgPuln2aQWBdjz x07+NQG7eBEvQ3UBw3QBb/BFblAwAvnVECFdQgGsEiKQSq0JTmlPnaeerLtQZAq6 gu73DRQLJow/tph01yfifCG3a6kBsFFsIFTHQL1gsZaHUNHAPYwAaf+RfDzeBUh3 rjUu7UFQ+jnZet93DXmEAAHcVSh4hGNz5HkGEfZ5iO5zy6TVQ4CHn/P0kitdjMML 1iF28Wz0DYCewlN2Gn8LpvAGtT7cgIQ8hvkkOirbaqOQMfNaVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+d2uJViUL4/jMI3ISWL9KndKgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODE3MjVmOTUtYWE5Yi0z OWI1LThjNDctYjg5MDU2YmI4MTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk5rQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3Nuwf8Der58CcbU/XwzelJ/NPywhqmSqaGPDM0fKsOWC9B6NzKmQAE 6maumqeajrNf6nq+cMwQr4+1NHuxUeo1ueeNFDOj2GSFxs9BYNWBa1TB8Jjbdqk+ r/O1eypGFi88iH9fIpw0OGtJBDac0xIcYCIgG3oK9BVjROCrWjd34sT9XrjFucSj cXrNAOUB2Zt0+Tc7/p6WXmILedzq95IWIjzNKahxriLbOM+wkUec8fkCQd6JvAkM Q2HBSGQ8aUGillMdL1mHnzw8Qyv8vbE1uOj3Bol5GlUA4veOMRrnoVRgXy6q4yzR 0BPoelZRBfgp1SonkkNo6D84zqOpBxY= -----END CERTIFICATE-----Generated at Thu Feb 26 03:31:49 2026 by rpki-client