$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/935c0808-8308-360f-8691-6301e234c891.roa File: 935c0808-8308-360f-8691-6301e234c891.roa (raw, json) Hash identifier: 3ScB/OVMIie6HYHqajWnTITbBuYJYfDPd6eQbjesDbM= Subject key identifier: EE:D0:54:B9:B7:0A:54:34:4B:A4:D4:17:7A:04:58:7A:BB:96:C9:18 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E51CC9099D9A8FB06BE80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/935c0808-8308-360f-8691-6301e234c891.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 152.67.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:51:cc:90:99:d9:a8:fb:06:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e2303f46-fd5a-41e0-be01-ea49b54a7a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9c:59:85:ec:e1:07:24:07:76:13:86:47:fe: 34:4c:c9:97:de:da:35:2a:91:ac:a7:b3:0b:1c:af: 45:b7:d2:6a:f1:9c:3d:af:63:6c:41:4f:b1:bf:a1: 2e:03:cf:4a:31:ae:ef:05:4d:11:93:98:ce:43:ed: b6:1f:b3:32:54:73:9e:53:bc:24:39:4b:2e:36:0d: 36:d2:1f:a0:28:20:61:84:6d:40:dc:0c:6c:f8:dd: 18:fd:34:d5:3a:8d:10:c8:b4:53:05:2e:76:36:08: 3c:2f:d8:fb:23:7e:9c:4d:7d:f3:3e:ba:16:3b:64: ef:c6:c5:d4:e4:fe:9e:6a:20:03:74:27:33:ed:31: 1f:df:c0:5a:18:38:25:af:63:bb:26:d6:04:80:11: f0:06:cf:d9:cd:26:26:ed:40:3e:69:50:42:e8:84: 39:80:3a:d9:45:c3:4b:0a:18:a4:07:9d:fe:a6:86: b9:ec:12:ba:e1:9f:cf:a9:3f:0e:a9:ca:cf:08:0c: b8:6b:99:c2:ec:0c:41:57:dc:18:2c:ff:a1:a6:3f: 6d:4a:e0:e8:76:ee:cd:20:dc:2c:1e:4e:e0:f0:60: 09:34:10:78:17:66:ff:91:9f:ab:37:9b:ba:fd:a9: f8:07:de:d1:f2:23:34:66:a9:31:c2:f7:d0:14:2f: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D0:54:B9:B7:0A:54:34:4B:A4:D4:17:7A:04:58:7A:BB:96:C9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/935c0808-8308-360f-8691-6301e234c891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:71:17:e7:cc:04:cf:98:c4:21:90:5f:26:48:1b:d9:d2:30: 6e:dc:44:b0:5c:3b:6b:e8:e4:3b:d8:b6:52:a5:a2:bd:96:9d: 0d:69:15:52:cb:6d:b3:be:68:6c:64:32:90:07:42:27:be:03: e0:f0:b0:8f:81:53:e5:fd:0f:e6:b8:40:8a:0a:01:1f:df:fa: e4:6d:da:03:05:67:eb:37:3a:77:cb:52:45:52:f1:ec:ec:c2: 6e:99:70:99:92:ef:a6:22:c2:0d:6c:00:0f:73:30:02:0e:74: da:e0:9d:b9:ea:8e:8d:21:69:c2:56:df:6b:10:dc:08:ea:3d: 9a:09:07:f8:5e:19:42:f6:0f:a9:4e:1a:a5:6f:3d:73:17:cd: 4a:05:08:6a:7c:0a:29:3e:c6:ae:e2:6c:59:12:af:46:dd:d3: 26:37:58:e9:85:a8:2e:7d:6d:b7:b4:a0:91:b7:a8:8d:a9:0d: d2:68:f8:f1:5d:03:b7:3e:e2:e0:86:b9:7e:e1:8c:e5:57:be: 98:13:13:7c:d4:3b:50:85:bc:9c:f6:80:34:9b:c0:c9:c8:3f: 89:a5:68:4b:0c:2b:e8:3b:c2:a3:28:ef:07:9d:e4:d2:14:33: b4:10:6f:57:9d:34:c5:d6:5d:2b:75:00:2f:66:4d:e4:c9:48: f4:f3:5b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXlHMkJnZqPsGvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTIzMDNmNDYtZmQ1YS00MWUwLWJlMDEtZWE0OWI1NGE3YTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5xZhezhByQHdhOGR/40TMmX3to1KpGsp7ML HK9Ft9Jq8Zw9r2NsQU+xv6EuA89KMa7vBU0Rk5jOQ+22H7MyVHOeU7wkOUsuNg02 0h+gKCBhhG1A3Axs+N0Y/TTVOo0QyLRTBS52Ngg8L9j7I36cTX3zProWO2TvxsXU 5P6eaiADdCcz7TEf38BaGDglr2O7JtYEgBHwBs/ZzSYm7UA+aVBC6IQ5gDrZRcNL ChikB53+poa57BK64Z/PqT8OqcrPCAy4a5nC7AxBV9wYLP+hpj9tSuDodu7NINws Hk7g8GAJNBB4F2b/kZ+rN5u6/an4B97R8iM0ZqkxwvfQFC82SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7QVLm3ClQ0S6TUF3oEWHq7lskYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTM1YzA4MDgtODMwOC0z NjBmLTg2OTEtNjMwMWUyMzRjODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmEMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9xF+fMBM+YxCGQXyZIG9nSMG7cRLBcO2vo5DvYtlKlor2WnQ1pFVLL bbO+aGxkMpAHQie+A+DwsI+BU+X9D+a4QIoKAR/f+uRt2gMFZ+s3OnfLUkVS8ezs wm6ZcJmS76Yiwg1sAA9zMAIOdNrgnbnqjo0hacJW32sQ3AjqPZoJB/heGUL2D6lO GqVvPXMXzUoFCGp8Cik+xq7ibFkSr0bd0yY3WOmFqC59bbe0oJG3qI2pDdJo+PFd A7c+4uCGuX7hjOVXvpgTE3zUO1CFvJz2gDSbwMnIP4mlaEsMK+g7wqMo7wed5NIU M7QQb1edNMXWXSt1AC9mTeTJSPTzWw4= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:55 2026 by rpki-client