$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa File: 8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa (raw, json) Hash identifier: YyVxtD1edCMAlWhXvVtAXlbuh6qvhObWh34kbWhVo9E= Subject key identifier: 05:2F:0D:CD:2D:53:73:15:92:55:B3:82:0C:78:79:79:26:6A:2B:B6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA272E6498317739DD99A3C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 132.145.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:2e:64:98:31:77:39:dd:99:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=4dc3b303-5a0f-4325-b93f-0b4eb393c82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:c7:7c:5f:01:21:0a:3b:26:de:1b:23:1b: 57:57:87:a5:97:6a:eb:17:44:a7:40:04:40:e7:33: d8:42:93:56:61:58:f6:10:62:17:98:34:a7:01:45: 28:61:90:7b:15:e7:20:1b:82:35:90:b6:31:8c:81: e4:fe:07:01:61:86:d4:cb:cd:89:da:c0:ad:c3:95: 45:90:50:f0:92:91:c3:82:fb:ac:cd:e0:b7:f7:77: 89:f5:be:bc:72:e4:e3:c3:72:c8:48:08:ca:d4:be: ef:e9:77:0d:c1:a6:15:91:bd:5e:af:58:1c:f9:9f: 29:b8:72:59:78:7c:ad:a1:d6:bd:13:ba:b9:0c:ec: a5:fe:54:9a:66:23:13:45:cd:02:df:8b:9a:3f:f8: a8:6d:bb:16:1c:fd:15:c7:b2:50:b0:27:20:7a:48: e8:5b:ae:46:44:24:7e:8f:e6:c4:5a:45:02:09:9c: 61:95:32:b4:db:41:82:f2:d9:dc:f9:03:01:82:41: 72:fd:41:f3:5e:39:13:6e:f4:26:54:4d:e1:a9:51: 54:1e:84:4c:62:bc:bd:56:3d:3f:f9:d6:69:54:9c: c2:95:36:85:5a:04:81:fb:6b:49:58:f2:ac:f6:46: 95:a6:60:bd:33:10:ff:49:16:29:04:a8:b7:f7:91: a2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2F:0D:CD:2D:53:73:15:92:55:B3:82:0C:78:79:79:26:6A:2B:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:7b:39:b3:c3:03:5b:25:73:56:0d:c6:c1:ee:3c:47:6c:4c: fe:b5:78:1f:c0:fa:48:03:13:7e:99:2e:dd:5b:11:f1:ca:02: 08:d1:e5:ee:0f:27:d5:48:c1:7c:b0:ac:8d:0d:a3:aa:dd:70: e3:c4:1a:f2:c6:3f:ed:3f:81:55:28:82:7b:4c:a5:f2:88:70: a1:31:64:84:d2:72:7b:7c:39:e6:d7:3f:fd:4a:78:eb:2e:19: cb:0e:9c:bf:20:c4:89:f7:8b:73:51:bb:e7:ce:e5:63:69:9b: fa:26:5f:89:43:42:7c:20:26:a9:6d:40:f7:8e:93:65:5a:0a: 98:52:fa:be:e8:06:17:a9:c5:49:2f:55:f8:80:21:88:11:63: 9b:cc:f0:41:e3:74:51:e0:13:c7:fa:a0:bc:5f:4e:55:5f:6d: a1:59:66:2d:24:42:88:6a:5f:cf:6b:f4:d4:6d:91:b6:0b:ff: 02:0b:d2:39:6e:4f:e1:52:4b:70:a3:5f:55:67:db:de:b0:64: 15:17:5c:4b:69:74:0f:75:d7:d4:0f:c8:7d:a3:b9:b8:aa:14: 25:b2:ea:06:eb:02:1a:e1:40:7b:84:b3:36:61:b1:02:c3:68: b0:43:93:d3:a8:1c:65:d6:bd:81:57:9b:b1:c6:62:93:6e:d2: 57:9f:2e:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJy5kmDF3Od2Zo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NGRjM2IzMDMtNWEwZi00MzI1LWI5M2YtMGI0ZWIzOTNjODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIjHfF8BIQo7Jt4bIxtXV4ell2rrF0SnQARA 5zPYQpNWYVj2EGIXmDSnAUUoYZB7FecgG4I1kLYxjIHk/gcBYYbUy82J2sCtw5VF kFDwkpHDgvuszeC393eJ9b68cuTjw3LISAjK1L7v6XcNwaYVkb1er1gc+Z8puHJZ eHytoda9E7q5DOyl/lSaZiMTRc0C34uaP/iobbsWHP0Vx7JQsCcgekjoW65GRCR+ j+bEWkUCCZxhlTK020GC8tnc+QMBgkFy/UHzXjkTbvQmVE3hqVFUHoRMYry9Vj0/ +dZpVJzClTaFWgSB+2tJWPKs9kaVpmC9MxD/SRYpBKi395GiiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUvDc0tU3MVklWzggx4eXkmaiu2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODU5NWY3ODQtZWYxNC0z YjBiLTg1YzAtZTRiMGRlYmI0OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChJFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh7ObPDA1slc1YNxsHuPEdsTP61eB/A+kgDE36ZLt1bEfHKAgjR5e4P J9VIwXywrI0No6rdcOPEGvLGP+0/gVUogntMpfKIcKExZITScnt8OebXP/1KeOsu GcsOnL8gxIn3i3NRu+fO5WNpm/omX4lDQnwgJqltQPeOk2VaCphS+r7oBhepxUkv VfiAIYgRY5vM8EHjdFHgE8f6oLxfTlVfbaFZZi0kQohqX89r9NRtkbYL/wIL0jlu T+FSS3CjX1Vn296wZBUXXEtpdA9119QPyH2jubiqFCWy6gbrAhrhQHuEszZhsQLD aLBDk9OoHGXWvYFXm7HGYpNu0lefLr4= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:29 2026 by rpki-client