$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c281c3f-a9c8-33d7-ad5f-0aa56fbed6e0.roa File: 8c281c3f-a9c8-33d7-ad5f-0aa56fbed6e0.roa (raw, json) Hash identifier: 2JMOmplIR/ZGB41Pv59nFCncr+jmTQw3J3uJf72Am2w= Subject key identifier: CE:68:E3:49:3C:28:69:AB:58:F0:BF:C2:EA:46:77:1F:CA:EC:BE:CB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1B1EE88EB5E72E7FE0EC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c281c3f-a9c8-33d7-ad5f-0aa56fbed6e0.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 193.122.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:b1:ee:88:eb:5e:72:e7:fe:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=c6c94ca4-cad9-49f0-a2fb-590ff6f8ab33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:a4:57:be:fb:71:e6:10:c6:fc:f1:04:75: 93:07:47:4c:1e:f2:bd:70:fe:95:57:2f:ce:c6:5a: 8e:31:93:d7:f9:a4:88:be:0d:38:c0:e7:a6:b5:74: 48:12:ac:15:91:4e:37:bc:b2:12:a5:fe:04:9a:11: 44:7d:4e:f9:97:7c:38:08:85:f9:49:4b:c7:7f:46: 68:c6:3f:4e:ea:49:d1:fb:19:3a:99:5c:3a:24:f9: e7:c5:06:f7:63:35:35:42:7d:7b:99:bb:9d:3c:85: da:03:d4:97:41:7f:14:a6:80:96:e3:30:60:b1:7c: 8b:0e:0c:08:88:bc:b5:bc:a1:47:c8:1d:60:19:4a: ed:c6:d0:b9:c8:4f:23:35:1e:de:c5:96:47:cc:dc: dd:f1:3a:e5:5d:82:20:ca:49:51:7f:6a:7e:06:56: fb:3c:ff:71:ef:a2:b7:bd:d2:d1:84:6b:10:39:2e: d6:6d:bd:33:08:01:df:c4:2d:db:2b:21:af:4e:25: 4c:ca:e9:84:79:5e:aa:e5:8b:e3:9f:18:75:34:19: b5:5a:4b:74:9e:a8:28:9e:fe:8a:e3:19:21:f1:ed: 06:b8:ca:e4:b4:49:7d:3d:a9:74:39:4a:95:45:31: 89:1c:bc:51:a2:a2:ab:71:69:29:19:2e:de:9c:c4: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:68:E3:49:3C:28:69:AB:58:F0:BF:C2:EA:46:77:1F:CA:EC:BE:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c281c3f-a9c8-33d7-ad5f-0aa56fbed6e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 193.122.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fa:92:6e:10:7b:a0:46:19:fd:7c:f0:8d:fe:70:8d:f8:eb: 7f:6f:8d:42:b0:3a:c9:b6:7b:1f:61:26:04:67:a0:e9:13:9f: 9a:3a:6f:8f:92:96:8f:9d:59:c7:93:c7:b1:9f:12:0a:46:39: 0a:bf:b7:7f:7c:4b:98:c5:72:5d:4b:c0:fb:fe:94:6c:c2:31: 01:43:64:cb:fc:2e:f9:38:56:6f:ed:e4:4d:55:6f:82:4d:2a: 8c:2e:cc:79:0e:59:9c:9c:a3:0b:fa:fe:b1:e9:7a:05:56:11: cd:5f:cc:68:9e:63:f2:e7:49:70:68:b4:d9:9a:6b:c1:3a:3c: 15:c9:e9:0d:98:75:d5:c0:93:2a:c1:4a:ac:f6:a6:e7:0e:82: d5:f9:bb:81:d2:ba:ff:30:79:7d:21:38:a7:91:ef:b3:af:47: 1e:39:b4:3e:f5:33:ee:0b:1f:a0:8b:31:b2:8f:2c:d0:7b:f1: c2:c7:0b:ca:a7:81:03:ff:72:e2:bd:0e:75:11:25:da:25:4f: fe:15:42:8a:11:7a:5c:db:8e:15:75:aa:fb:dc:a0:c8:c4:56: bf:42:b1:e0:3c:1b:55:71:64:64:49:3e:2f:ce:a6:bd:d7:ec: ed:10:69:77:cf:f2:10:b4:94:15:4d:c4:b3:96:4b:c8:ee:6e: f9:6d:34:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8bHuiOtecuf+DsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk YzZjOTRjYTQtY2FkOS00OWYwLWEyZmItNTkwZmY2ZjhhYjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe2kV777ceYQxvzxBHWTB0dMHvK9cP6VVy/O xlqOMZPX+aSIvg04wOemtXRIEqwVkU43vLISpf4EmhFEfU75l3w4CIX5SUvHf0Zo xj9O6knR+xk6mVw6JPnnxQb3YzU1Qn17mbudPIXaA9SXQX8UpoCW4zBgsXyLDgwI iLy1vKFHyB1gGUrtxtC5yE8jNR7exZZHzNzd8TrlXYIgyklRf2p+Blb7PP9x76K3 vdLRhGsQOS7Wbb0zCAHfxC3bKyGvTiVMyumEeV6q5Yvjnxh1NBm1Wkt0nqgonv6K 4xkh8e0GuMrktEl9Pal0OUqVRTGJHLxRoqKrcWkpGS7enMTZpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5o40k8KGmrWPC/wupGdx/K7L7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGMyODFjM2YtYTljOC0z M2Q3LWFkNWYtMGFhNTZmYmVkNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwXoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT6km4Qe6BGGf188I3+cI34639vjUKwOsm2ex9hJgRnoOkTn5o6b4+S lo+dWceTx7GfEgpGOQq/t398S5jFcl1LwPv+lGzCMQFDZMv8Lvk4Vm/t5E1Vb4JN KowuzHkOWZycowv6/rHpegVWEc1fzGieY/LnSXBotNmaa8E6PBXJ6Q2YddXAkyrB Sqz2pucOgtX5u4HSuv8weX0hOKeR77OvRx45tD71M+4LH6CLMbKPLNB78cLHC8qn gQP/cuK9DnURJdolT/4VQooRelzbjhV1qvvcoMjEVr9CseA8G1VxZGRJPi/Opr3X 7O0QaXfP8hC0lBVNxLOWS8jubvltNPo= -----END CERTIFICATE-----Generated at Thu Feb 26 03:28:01 2026 by rpki-client