$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88d4b247-3902-310b-8300-2a28d16b3a6d.roa File: 88d4b247-3902-310b-8300-2a28d16b3a6d.roa (raw, json) Hash identifier: f6yz1fXMXhxGd7mjcfR7mC1tFNBANFxy2cXj1AtKzHg= Subject key identifier: 04:43:5A:82:DC:B7:10:9A:18:B1:45:04:21:14:15:CA:9C:26:C5:34 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA2710AEE4D81F1C38F7B8A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88d4b247-3902-310b-8300-2a28d16b3a6d.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 152.70.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:10:ae:e4:d8:1f:1c:38:f7:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=2a0b4f0b-2aac-4a62-941a-41d72cb3cd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4b:38:f2:cb:4a:4b:7a:25:68:b4:7a:1e:83: f4:b9:d1:a0:39:a2:71:45:ee:57:4c:42:9b:75:a0: f5:5b:a6:ba:00:1c:26:a3:2a:32:b1:b2:af:f3:72: 76:3b:3f:0d:1b:3b:ca:04:87:a0:87:45:86:4b:c5: 7e:45:48:24:27:a3:bd:e2:f1:98:c3:f2:79:02:58: 2c:60:64:5e:77:4d:6b:6d:0d:8b:41:94:6f:6b:cb: d1:b1:f9:c8:59:ff:2f:b4:2e:f1:a9:01:d3:5c:34: 48:59:6b:64:19:16:10:a0:98:42:95:49:66:b3:7a: c9:8b:b5:d3:1e:57:ab:db:48:7f:7c:bf:7f:9f:23: 73:10:22:71:b2:6b:06:b5:de:c6:d3:f9:6a:f5:9f: e0:4d:02:e1:c6:9a:f2:68:d8:0f:5d:81:e0:44:2b: e8:76:4c:60:24:f1:31:43:64:4b:c2:c8:ba:27:e6: 10:37:fa:63:9b:8a:72:6e:a1:6d:76:b8:b1:6f:a5: 02:82:9c:2c:dd:da:b0:d1:d2:70:15:c7:30:a7:59: e9:94:cf:86:7f:77:83:e2:99:be:eb:bf:36:56:f0: 61:ae:a5:4d:e2:79:b2:99:a6:46:55:39:e5:8d:cb: 7d:29:ae:35:90:78:ba:72:8a:f8:aa:f7:6e:24:f9: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:43:5A:82:DC:B7:10:9A:18:B1:45:04:21:14:15:CA:9C:26:C5:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88d4b247-3902-310b-8300-2a28d16b3a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:0c:e6:cd:eb:ea:14:90:bb:8e:58:c2:86:2b:6e:06:70:05: eb:a6:ce:92:52:27:0e:75:12:bf:1a:11:5e:7e:da:02:a6:88: 0f:4a:5d:b8:56:0c:94:56:68:00:1b:39:d6:09:83:d0:e7:d2: 8d:5c:38:a9:7d:d2:cf:96:32:59:b8:6d:05:7a:0f:22:be:20: 85:f6:3f:0e:62:a7:e7:fc:81:77:d1:66:1d:e6:7f:de:b6:29: 09:ae:30:e6:30:a8:0b:0c:20:81:c3:1a:0a:fb:c0:c5:dc:97: aa:2f:54:0b:d0:cc:99:be:eb:e9:de:50:bf:09:91:d7:9d:90: 78:aa:70:b0:55:6f:04:b2:c8:53:47:ad:3e:ab:f6:d0:32:9f: 7b:5f:e4:d1:42:5b:f3:a1:84:94:60:a3:91:cb:fc:43:ce:fd: 00:5a:85:d1:3a:93:3f:01:ab:ce:67:c3:f7:b7:bf:64:88:4a: d8:83:94:04:57:64:3e:61:b8:72:31:f6:34:15:4a:e5:42:5b: 49:49:12:73:70:4b:4d:26:c1:4c:65:c8:9c:67:5c:d5:be:3f: cb:77:7a:ff:9e:16:7a:a7:51:26:d4:d6:00:fd:ba:78:cc:8a: 7a:14:bf:09:5a:2d:0b:eb:29:be:16:1c:ff:29:67:ba:8f:fc: 95:ea:56:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxCu5NgfHDj3uKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MmEwYjRmMGItMmFhYy00YTYyLTk0MWEtNDFkNzJjYjNjZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUs48stKS3olaLR6HoP0udGgOaJxRe5XTEKb daD1W6a6ABwmoyoysbKv83J2Oz8NGzvKBIegh0WGS8V+RUgkJ6O94vGYw/J5Algs YGRed01rbQ2LQZRva8vRsfnIWf8vtC7xqQHTXDRIWWtkGRYQoJhClUlms3rJi7XT Hler20h/fL9/nyNzECJxsmsGtd7G0/lq9Z/gTQLhxpryaNgPXYHgRCvodkxgJPEx Q2RLwsi6J+YQN/pjm4pybqFtdrixb6UCgpws3dqw0dJwFccwp1nplM+Gf3eD4pm+ 6782VvBhrqVN4nmymaZGVTnljct9Ka41kHi6cor4qvduJPlFVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARDWoLctxCaGLFFBCEUFcqcJsU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODhkNGIyNDctMzkwMi0z MTBiLTgzMDAtMmEyOGQxNmIzYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmEZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQM5s3r6hSQu45YwoYrbgZwBeumzpJSJw51Er8aEV5+2gKmiA9KXbhW DJRWaAAbOdYJg9Dn0o1cOKl90s+WMlm4bQV6DyK+IIX2Pw5ip+f8gXfRZh3mf962 KQmuMOYwqAsMIIHDGgr7wMXcl6ovVAvQzJm+6+neUL8JkdedkHiqcLBVbwSyyFNH rT6r9tAyn3tf5NFCW/OhhJRgo5HL/EPO/QBahdE6kz8Bq85nw/e3v2SIStiDlARX ZD5huHIx9jQVSuVCW0lJEnNwS00mwUxlyJxnXNW+P8t3ev+eFnqnUSbU1gD9unjM inoUvwlaLQvrKb4WHP8pZ7qP/JXqVow= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:23 2026 by rpki-client