$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa File: 97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa (raw, json) Hash identifier: ihGKqyj/h1yBOYYVpSGKUf22CVm76XPM5c/Hk9eunvs= Subject key identifier: 89:0F:69:28:C8:76:7D:CF:EE:B4:E9:B9:60:01:5C:63:20:33:62:F8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA75C676FC5EAF8771CE97800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 31898 IP address blocks: 158.247.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:67:6f:c5:ea:f8:77:1c:e9:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=1cb7e557-4f25-4c43-aa3c-4920ec461ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ff:55:fe:4d:33:97:84:4f:76:38:f8:c6:ac: 7a:5f:f2:89:a7:87:1a:c7:fd:a3:05:f8:10:98:ce: d6:d0:39:27:f9:37:8e:53:35:e6:6a:cf:42:fd:51: 23:de:70:bf:58:c8:f5:a2:b6:57:df:b0:9f:4e:30: 7e:71:ea:55:78:26:c6:ff:55:df:2d:bb:6f:4f:cb: 20:07:58:a7:5d:f3:cf:90:b0:c5:a9:02:a1:0a:50: d5:47:92:31:84:7e:1d:b3:9d:3f:be:b8:13:6f:fd: 8a:07:15:d4:c2:7f:77:4d:c6:62:64:3c:b9:6e:98: 40:ec:41:9c:97:28:e8:d1:bb:d4:e7:83:50:b0:e4: a8:81:ad:3e:77:09:e2:fe:cd:61:37:97:6e:a3:77: 7f:52:c3:e6:81:5b:8d:19:fb:f8:42:7e:f1:52:0e: 50:98:84:be:3e:c6:13:f8:72:44:eb:b8:1c:24:d0: 79:1f:4c:d1:bb:a1:b9:16:cd:ff:f5:57:c2:e6:db: 5c:16:07:7a:f6:f6:41:83:a0:e7:bf:75:08:35:2a: d2:de:25:6c:f4:24:10:4d:3a:1b:a5:54:c1:a4:69: 42:da:85:b3:9b:73:77:c1:6c:28:ef:b7:3e:ff:39: d2:33:52:71:b9:47:7b:90:e8:44:37:f5:95:fe:9d: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0F:69:28:C8:76:7D:CF:EE:B4:E9:B9:60:01:5C:63:20:33:62:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.247.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:0c:56:ed:59:1e:fc:87:13:cb:d4:f7:61:b4:1d:b9:c5:0c: 1a:44:8e:39:b5:dc:61:a7:5f:c5:57:3c:4e:4c:30:d1:00:c8: 60:d8:b4:de:26:82:d0:26:8e:66:2f:1c:e6:d1:22:21:22:60: c0:f0:b3:31:34:f2:71:a9:b6:1f:0a:92:81:31:9f:3c:0e:d8: 32:72:6a:bb:6a:15:2a:58:9b:9d:a1:5d:cc:89:e2:65:8e:2e: 1d:b2:f4:10:3c:43:03:9e:e6:1a:05:87:33:a7:a7:46:9b:0a: 64:66:e7:a3:80:5b:7b:22:57:f5:bf:6e:d9:ca:7d:4b:d4:e3: 1e:fd:3c:dd:ac:07:c5:4b:93:1d:24:a5:58:84:1b:af:0d:a3: b5:40:36:86:1c:ba:86:f2:e7:4d:26:4b:be:52:9b:20:dd:bb: b0:07:67:7a:ba:58:40:04:74:bb:f4:dd:35:10:32:57:41:fe: 0b:72:45:95:b2:8a:3c:04:75:cc:6f:96:c4:fe:00:1f:6e:0f: e3:55:3b:eb:ea:5c:78:c5:92:20:43:13:af:45:a9:b2:6a:61: 75:13:89:2d:af:65:ac:9b:5f:ef:13:b4:7c:2e:9a:77:94:70: 46:66:0a:15:0e:d2:81:48:17:51:99:c1:cb:91:73:36:50:b6: e1:b4:13:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynXGdvxer4dxzpeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk MWNiN2U1NTctNGYyNS00YzQzLWFhM2MtNDkyMGVjNDYxZWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif9V/k0zl4RPdjj4xqx6X/KJp4cax/2jBfgQ mM7W0Dkn+TeOUzXmas9C/VEj3nC/WMj1orZX37CfTjB+cepVeCbG/1XfLbtvT8sg B1inXfPPkLDFqQKhClDVR5IxhH4ds50/vrgTb/2KBxXUwn93TcZiZDy5bphA7EGc lyjo0bvU54NQsOSoga0+dwni/s1hN5duo3d/UsPmgVuNGfv4Qn7xUg5QmIS+PsYT +HJE67gcJNB5H0zRu6G5Fs3/9VfC5ttcFgd69vZBg6Dnv3UINSrS3iVs9CQQTTob pVTBpGlC2oWzm3N3wWwo77c+/znSM1JxuUd7kOhEN/WV/p0IPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkPaSjIdn3P7rTpuWABXGMgM2L4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTdjNGFiY2UtNzFhNC0z ZWQ2LWIxYWUtYTI3MjQ4M2YzMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnvdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIMVu1ZHvyHE8vU92G0HbnFDBpEjjm13GGnX8VXPE5MMNEAyGDYtN4m gtAmjmYvHObRIiEiYMDwszE08nGpth8KkoExnzwO2DJyartqFSpYm52hXcyJ4mWO Lh2y9BA8QwOe5hoFhzOnp0abCmRm56OAW3siV/W/btnKfUvU4x79PN2sB8VLkx0k pViEG68No7VANoYcuoby500mS75SmyDdu7AHZ3q6WEAEdLv03TUQMldB/gtyRZWy ijwEdcxvlsT+AB9uD+NVO+vqXHjFkiBDE69FqbJqYXUTiS2vZaybX+8TtHwumneU cEZmChUO0oFIF1GZwcuRczZQtuG0E1w= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:40 2026 by rpki-client