$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa File: 87d7fdf1-6104-31af-b7e7-145ec462444b.roa (raw, json) Hash identifier: m4i2/0oH31/ZLBAvmrPCT0NbXXxbqwRg9c5djt3ij9E= Subject key identifier: 6A:EA:27:D3:2A:81:44:0C:DB:73:D8:A1:FD:95:9A:7A:B5:5C:C8:E0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA75C691245F9D3530DA7C080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 31898 IP address blocks: 158.247.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:69:12:45:f9:d3:53:0d:a7:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=7a5d6868-cf2c-4257-8cc9-4f43a0548c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:7e:b1:82:39:6b:3d:09:c8:8a:67:16:13: 8e:fd:51:4a:37:25:16:cc:c0:40:95:bd:32:7f:14: c9:98:1f:8b:8e:19:48:88:b0:4f:60:42:d3:ec:f1: f9:59:1f:c3:45:64:d7:8f:80:d2:ce:05:fc:99:f4: 22:7f:c6:10:4e:23:5c:b0:2f:e2:01:6c:51:e3:28: fb:ab:f2:4a:4b:88:7f:72:6d:84:17:9b:59:be:dd: 20:51:f8:3e:79:d9:f7:60:ec:9d:1a:3a:48:ff:aa: c3:72:3b:10:92:28:06:0f:cd:41:86:e5:d6:87:83: 63:56:54:08:8b:53:2a:80:f9:30:19:2e:5d:d3:ad: 9c:50:b8:84:a0:6f:52:d5:7f:8b:ec:f7:6e:d8:c6: 7d:19:d7:00:d6:e0:20:99:30:a6:78:e7:34:ac:31: 6f:9d:72:dd:a6:8a:c5:29:a0:29:5c:d8:02:20:aa: 33:96:60:46:95:cd:94:2a:0d:ff:ea:62:35:04:89: da:4c:41:eb:19:3d:4d:14:b5:46:e5:e8:dc:9a:eb: dc:5e:2c:a9:0c:74:89:00:26:62:25:8c:12:08:2f: f6:6e:de:b2:8d:ca:30:9f:d9:e4:be:b5:bf:77:87: e3:7c:45:a8:00:f8:20:d8:af:3b:4a:a6:90:46:96: 76:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EA:27:D3:2A:81:44:0C:DB:73:D8:A1:FD:95:9A:7A:B5:5C:C8:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.247.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:90:d1:79:af:cb:e1:da:f3:7a:ed:8c:8e:24:54:b2:73:d6: 3f:9d:0c:5b:af:cf:09:54:f7:cc:74:40:a6:21:db:ee:ef:7a: 68:73:c6:31:92:6c:7c:18:a8:91:36:07:e9:40:c5:a3:6c:67: 9f:95:87:b4:33:1b:6d:f2:ae:17:d1:0c:83:8f:c5:27:9a:5a: 79:41:56:2b:9b:0d:7a:a9:14:9d:e4:15:3f:65:a3:f1:cb:67: 3b:ae:2a:60:ba:9d:f9:34:2d:f4:64:40:b3:f4:bb:03:c2:02: b2:65:29:48:91:02:5b:40:35:6d:15:c4:80:f3:27:72:9d:dc: 38:1a:f8:ac:59:18:3e:c3:04:4f:bf:2e:f9:82:18:d1:2e:1c: 8e:fa:cd:31:0f:55:57:e8:3c:6b:b0:aa:16:18:7b:b9:bb:64: e2:bf:6d:50:a1:74:79:48:8e:42:80:cf:2c:a7:37:a6:e1:98: ff:dd:50:58:38:40:da:5b:51:ba:42:fb:f8:8b:7c:11:84:b3: 4a:25:12:72:17:0a:82:70:1f:0e:b4:06:7d:2d:fd:14:5c:de: b9:9a:4b:d6:56:ab:42:b6:01:8d:4d:66:e8:e4:01:c5:bd:3d: 4f:1e:56:b8:14:44:e6:d3:7d:c0:83:71:24:bf:f1:11:5c:65: a6:88:2b:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynXGkSRfnTUw2nwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk N2E1ZDY4NjgtY2YyYy00MjU3LThjYzktNGY0M2EwNTQ4YzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJl+sYI5az0JyIpnFhOO/VFKNyUWzMBAlb0y fxTJmB+LjhlIiLBPYELT7PH5WR/DRWTXj4DSzgX8mfQif8YQTiNcsC/iAWxR4yj7 q/JKS4h/cm2EF5tZvt0gUfg+edn3YOydGjpI/6rDcjsQkigGD81BhuXWh4NjVlQI i1MqgPkwGS5d062cULiEoG9S1X+L7Pdu2MZ9GdcA1uAgmTCmeOc0rDFvnXLdporF KaApXNgCIKozlmBGlc2UKg3/6mI1BInaTEHrGT1NFLVG5ejcmuvcXiypDHSJACZi JYwSCC/2bt6yjcown9nkvrW/d4fjfEWoAPgg2K87SqaQRpZ2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrqJ9MqgUQM23PYof2Vmnq1XMjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODdkN2ZkZjEtNjEwNC0z MWFmLWI3ZTctMTQ1ZWM0NjI0NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnvdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeQ0Xmvy+Ha83rtjI4kVLJz1j+dDFuvzwlU98x0QKYh2+7vemhzxjGS bHwYqJE2B+lAxaNsZ5+Vh7QzG23yrhfRDIOPxSeaWnlBViubDXqpFJ3kFT9lo/HL ZzuuKmC6nfk0LfRkQLP0uwPCArJlKUiRAltANW0VxIDzJ3Kd3Dga+KxZGD7DBE+/ LvmCGNEuHI76zTEPVVfoPGuwqhYYe7m7ZOK/bVChdHlIjkKAzyynN6bhmP/dUFg4 QNpbUbpC+/iLfBGEs0olEnIXCoJwHw60Bn0t/RRc3rmaS9ZWq0K2AY1NZujkAcW9 PU8eVrgURObTfcCDcSS/8RFcZaaIKz4= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:39 2026 by rpki-client