$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c33d3b-70ee-3a23-9e0a-a7376935c77a.roa File: 97c33d3b-70ee-3a23-9e0a-a7376935c77a.roa (raw, json) Hash identifier: skBTW/G4NbWeTFG2dE7RsFfyjTKgysH5xdKAm3swxgY= Subject key identifier: 6B:AF:1A:3C:7D:32:23:6E:C8:F8:83:EC:8D:65:03:FE:F2:D7:2C:37 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA2704C47F46AA80CDBEFB40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c33d3b-70ee-3a23-9e0a-a7376935c77a.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 140.238.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:04:c4:7f:46:aa:80:cd:be:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=4e14c631-c60d-4743-9ac2-6f2fb0e60066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:82:a1:4e:d0:e1:c4:a4:da:6b:ee:67:45: fc:ac:f4:2d:57:fa:9c:34:e6:ed:2d:fb:98:19:18: 72:af:de:56:e6:d5:ab:23:bf:b2:4d:8d:f5:70:74: f5:05:d0:fa:7d:34:42:dd:56:11:f7:39:4b:11:cd: e0:a9:f2:dc:75:f8:16:a6:1e:db:a7:e3:09:8e:ad: 2e:dc:5b:0a:29:91:25:b7:98:03:2a:48:8f:a6:8f: 7e:82:e5:1e:b4:f3:de:cf:5d:fa:e4:d7:fe:a1:40: 1f:f0:9c:cd:c7:82:69:86:b7:02:98:18:4c:68:34: 47:29:c8:df:e6:74:4e:14:fe:b1:67:d6:d9:81:2e: 0e:37:2c:b5:6e:e2:84:d5:df:96:77:cf:79:07:3a: 11:8d:dd:f0:8a:db:81:47:91:fa:0c:e0:85:75:86: 9d:f6:d5:11:08:93:96:96:7a:40:b5:07:20:b8:86: 7a:80:1d:02:22:c9:74:28:57:f9:57:df:5f:40:7f: a6:15:b2:d3:31:d5:03:d2:2b:e8:6b:24:81:ff:27: d6:e8:2f:26:12:de:05:92:2a:bf:c6:0e:d6:8e:86: 93:b7:7c:28:25:16:b9:56:1b:4f:a0:a0:00:eb:0e: 79:e7:4c:b6:de:1e:58:bf:fc:a3:46:79:d5:c0:73: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AF:1A:3C:7D:32:23:6E:C8:F8:83:EC:8D:65:03:FE:F2:D7:2C:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c33d3b-70ee-3a23-9e0a-a7376935c77a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:49:5c:7a:10:70:6a:ee:4d:51:55:27:ec:b3:5e:90:bd:ff: 43:f0:9c:59:a8:9d:92:4f:eb:c3:6b:20:aa:91:58:5e:b7:8b: 46:70:f5:47:c9:75:c8:cb:61:b7:dd:87:92:e9:40:0d:29:4b: 13:13:21:f7:a2:0e:24:4e:c7:cb:fc:e8:90:92:e1:be:04:b1: f9:4a:45:bb:7f:43:c0:3f:8a:c9:8a:82:66:e2:7c:1d:94:8d: b2:56:7e:f5:86:f2:86:0f:55:73:0c:04:ed:30:a1:62:17:05: bf:28:19:2c:a8:0b:cf:34:36:f3:e5:e0:2b:14:03:01:26:ec: eb:0d:04:b0:01:a5:b2:93:01:bc:ab:bf:b8:56:20:35:9a:3b: 63:2e:a7:d3:84:3b:6a:35:e2:cd:d0:b8:e5:f9:86:c3:89:12: dd:6f:59:67:a5:45:16:a3:bb:12:87:cf:f6:f9:16:0b:8f:c2: 31:5f:37:f8:b9:e1:27:79:69:57:6d:16:81:99:ab:83:4c:f4: 04:d4:97:46:23:ba:f4:28:a5:f8:f4:fa:5a:d4:8e:c9:25:c7: f7:e0:4c:42:db:ff:3a:dd:54:3b:9a:f0:24:ed:eb:b6:d9:39: f6:bd:00:03:f7:a4:3e:58:d0:98:ba:9b:91:77:ec:94:69:19: ad:a5:92:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwTEf0aqgM2++0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NGUxNGM2MzEtYzYwZC00NzQzLTlhYzItNmYyZmIwZTYwMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseKCoU7Q4cSk2mvuZ0X8rPQtV/qcNObtLfuY GRhyr95W5tWrI7+yTY31cHT1BdD6fTRC3VYR9zlLEc3gqfLcdfgWph7bp+MJjq0u 3FsKKZElt5gDKkiPpo9+guUetPPez1365Nf+oUAf8JzNx4JphrcCmBhMaDRHKcjf 5nROFP6xZ9bZgS4ONyy1buKE1d+Wd895BzoRjd3wituBR5H6DOCFdYad9tURCJOW lnpAtQcguIZ6gB0CIsl0KFf5V99fQH+mFbLTMdUD0ivoaySB/yfW6C8mEt4Fkiq/ xg7WjoaTt3woJRa5VhtPoKAA6w5550y23h5Yv/yjRnnVwHPGwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuvGjx9MiNuyPiD7I1lA/7y1yw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTdjMzNkM2ItNzBlZS0z YTIzLTllMGEtYTczNzY5MzVjNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjO6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFJXHoQcGruTVFVJ+yzXpC9/0PwnFmonZJP68NrIKqRWF63i0Zw9UfJ dcjLYbfdh5LpQA0pSxMTIfeiDiROx8v86JCS4b4EsflKRbt/Q8A/ismKgmbifB2U jbJWfvWG8oYPVXMMBO0woWIXBb8oGSyoC880NvPl4CsUAwEm7OsNBLABpbKTAbyr v7hWIDWaO2Mup9OEO2o14s3QuOX5hsOJEt1vWWelRRajuxKHz/b5FguPwjFfN/i5 4Sd5aVdtFoGZq4NM9ATUl0YjuvQopfj0+lrUjsklx/fgTELb/zrdVDua8CTt67bZ Ofa9AAP3pD5Y0Ji6m5F37JRpGa2lklA= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:16 2026 by rpki-client