$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98a21c25-1db0-328b-bc09-edca32ee2b9a.roa File: 98a21c25-1db0-328b-bc09-edca32ee2b9a.roa (raw, json) Hash identifier: GmbuNhzPQa3RVSSV+cjRa84lVkH4hW37P7gldWqcnrU= Subject key identifier: 31:BC:8F:A1:13:F7:15:A1:F8:6E:80:85:01:05:72:86:81:36:DE:D9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CBDB1EF37C90472182E09D100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98a21c25-1db0-328b-bc09-edca32ee2b9a.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 31898 IP address blocks: 157.137.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:ef:37:c9:04:72:18:2e:09:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=ac8b0938-f164-4f34-a5fe-0729e187436f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:8e:88:8b:71:63:8f:b9:2d:29:de:3a:ff: 94:32:0b:69:3b:5c:16:57:5e:e9:86:ee:01:32:78: c0:06:b6:f9:e3:99:96:a3:e5:43:bb:9f:e9:2e:97: a6:c0:11:a7:94:f4:b1:35:62:d3:b8:ef:7f:9e:11: f8:3d:b1:c8:2a:c1:9d:38:20:81:13:05:5e:59:96: 55:63:9d:c2:2a:54:a0:ca:43:af:9e:83:79:45:b6: 22:d3:8a:eb:e7:3b:f9:b6:59:51:49:82:6d:18:7e: bb:51:0c:22:46:d7:d2:1e:44:47:8c:00:8b:d1:eb: da:f2:c4:f7:a7:2d:1c:c2:ab:72:e4:ed:e1:c1:52: 13:89:1b:10:b6:7d:17:e1:70:7e:54:66:d0:01:38: 45:41:6c:c8:35:0a:a4:aa:a9:5f:d7:b6:ca:70:b6: ff:40:93:1d:31:88:89:74:d3:29:07:ed:a4:4f:cb: 99:90:ef:56:15:68:4c:10:e2:2f:e2:9e:a8:40:d3: 27:bc:6e:af:64:75:52:64:1e:8b:6f:cf:5a:dc:f0: 98:86:27:22:bf:bf:da:3d:86:33:61:98:5e:e7:83: 19:e6:40:b5:64:3c:ee:13:e6:59:87:b4:ce:d8:54: 84:56:c2:10:f6:95:e4:9d:57:e9:7e:f8:88:b9:85: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BC:8F:A1:13:F7:15:A1:F8:6E:80:85:01:05:72:86:81:36:DE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98a21c25-1db0-328b-bc09-edca32ee2b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:51:d4:92:b6:df:cb:88:ca:b1:d9:94:a5:b0:f3:5f:42:d9: a8:c1:37:4e:a9:e1:1a:4d:e0:35:23:79:db:2d:94:92:d1:3a: 8c:43:80:f9:0c:a2:9f:ca:35:b5:8d:5d:cf:da:18:ac:17:11: 90:97:df:bb:5b:fc:8b:e9:9a:74:5d:cb:e6:65:2a:65:04:c9: 2c:af:a4:97:b7:67:48:e6:aa:aa:d7:ec:59:b6:65:ac:fc:e7: 9d:f2:cb:50:1d:b6:e4:25:90:ee:42:ea:db:85:5e:e9:18:4b: 59:13:77:4a:3b:79:48:e0:cd:a0:8b:4d:76:6b:59:6c:27:a2: b7:d4:96:ac:9a:d9:97:3d:58:cd:ae:ca:11:9b:52:b9:58:bf: 00:1e:c5:90:51:0f:ea:a4:b1:2f:85:3b:cd:da:2b:af:97:af: c9:c2:a8:a3:20:48:b6:ed:a5:72:7a:f2:6e:f9:a7:60:f5:ce: ea:0b:71:c7:1a:fa:c4:24:d5:da:5e:76:5b:e9:3d:2c:1a:05: 7b:ca:0f:93:66:6d:66:d4:cb:b4:fa:c6:c2:d8:84:fd:f7:c5: 05:21:e0:95:99:73:85:9f:d1:83:69:9d:88:10:44:a2:ca:ee: 6d:75:6b:6d:05:38:8b:36:30:89:f4:e0:96:13:cf:ed:5a:75: 12:a1:10:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9se83yQRyGC4J0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk YWM4YjA5MzgtZjE2NC00ZjM0LWE1ZmUtMDcyOWUxODc0MzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+COiItxY4+5LSneOv+UMgtpO1wWV17phu4B MnjABrb545mWo+VDu5/pLpemwBGnlPSxNWLTuO9/nhH4PbHIKsGdOCCBEwVeWZZV Y53CKlSgykOvnoN5RbYi04rr5zv5tllRSYJtGH67UQwiRtfSHkRHjACL0eva8sT3 py0cwqty5O3hwVITiRsQtn0X4XB+VGbQAThFQWzINQqkqqlf17bKcLb/QJMdMYiJ dNMpB+2kT8uZkO9WFWhMEOIv4p6oQNMnvG6vZHVSZB6Lb89a3PCYhiciv7/aPYYz YZhe54MZ5kC1ZDzuE+ZZh7TO2FSEVsIQ9pXknVfpfviIuYUdLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG8j6ET9xWh+G6AhQEFcoaBNt7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOThhMjFjMjUtMWRiMC0z MjhiLWJjMDktZWRjYTMyZWUyYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYn1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlR1JK238uIyrHZlKWw819C2ajBN06p4RpN4DUjedstlJLROoxDgPkM op/KNbWNXc/aGKwXEZCX37tb/IvpmnRdy+ZlKmUEySyvpJe3Z0jmqqrX7Fm2Zaz8 553yy1AdtuQlkO5C6tuFXukYS1kTd0o7eUjgzaCLTXZrWWwnorfUlqya2Zc9WM2u yhGbUrlYvwAexZBRD+qksS+FO83aK6+Xr8nCqKMgSLbtpXJ68m75p2D1zuoLccca +sQk1dpedlvpPSwaBXvKD5NmbWbUy7T6xsLYhP33xQUh4JWZc4Wf0YNpnYgQRKLK 7m11a20FOIs2MIn04JYTz+1adRKhEFk= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:33 2026 by rpki-client