$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d2c255b-afa5-33e5-a18d-ce37611a6fa1.roa File: 9d2c255b-afa5-33e5-a18d-ce37611a6fa1.roa (raw, json) Hash identifier: h0CjpAEBqXVron46X2koFxKisi9L81h05bgL9krhgRs= Subject key identifier: 56:70:58:7D:1E:85:19:67:84:9D:1E:AB:A0:E0:A4:C1:15:F9:DC:C9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E5A77E89D1B05E53EDA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d2c255b-afa5-33e5-a18d-ce37611a6fa1.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 159.112.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:5a:77:e8:9d:1b:05:e5:3e:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=61e815f8-cdf4-499f-b95e-a7937e8a78c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:84:4d:24:d9:38:c2:2e:d1:a9:69:48:c6: 03:9e:69:cd:eb:1f:1f:99:62:bd:d0:6e:0b:98:85: 47:b4:e9:f1:d8:40:4e:0d:ba:c0:17:ae:67:73:26: 2a:c8:88:af:d3:a6:d1:46:5b:ff:7b:20:ee:46:93: 2d:e9:ae:2e:36:b9:d1:7f:94:a6:82:58:c3:1a:9c: b0:c5:9b:42:fc:7f:27:c5:97:7c:31:52:aa:7d:90: d1:18:08:31:4d:c1:95:61:67:77:e5:79:ab:80:d0: 2a:b1:59:0e:d6:c3:e5:45:47:a9:26:fc:75:cf:34: c1:fc:12:c1:7e:72:a6:a6:73:a2:b6:2f:4e:34:34: 19:1f:ac:e1:ac:d5:71:9e:db:67:fa:da:22:50:cf: c0:11:c3:8e:39:e9:26:a0:66:f7:40:0b:db:15:f6: 76:1f:84:25:47:5c:bf:cb:a8:0e:1d:19:2f:1e:18: dd:23:cf:71:49:33:22:f6:ab:30:d0:44:d3:28:c9: 29:a8:40:5c:ca:2f:6c:b3:0a:4d:3f:23:67:f2:4e: aa:d6:72:8b:b8:33:1f:83:2e:8f:2f:f8:57:67:0c: 5a:e1:ee:a9:0c:f7:a6:84:5e:66:9f:82:bb:69:db: be:5b:61:ed:30:73:c4:42:ea:a6:a3:1b:00:49:0a: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:70:58:7D:1E:85:19:67:84:9D:1E:AB:A0:E0:A4:C1:15:F9:DC:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d2c255b-afa5-33e5-a18d-ce37611a6fa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ee:f1:f2:92:3b:09:72:77:8f:db:2b:d1:11:bb:75:0a:f7: a9:15:48:55:83:ca:b7:60:0d:fa:71:e6:e8:75:37:9c:de:a2: c8:35:80:ec:0c:1e:b5:88:c2:d2:c1:ed:71:2f:53:e5:31:99: ed:7b:93:7b:eb:8c:5f:9d:03:88:40:8f:23:67:65:cf:16:cb: fd:4a:37:39:c3:b7:ce:99:4c:7d:5c:a0:70:aa:ea:02:28:20: ac:06:88:00:c0:35:96:2c:04:1a:e8:9e:e8:3d:53:34:2f:ec: 70:0c:80:d0:2d:4d:17:50:e2:10:20:df:56:9f:a9:6a:a6:45: 96:d6:5e:eb:91:a2:c5:0a:93:fc:f0:1c:0c:8f:84:28:5f:af: 55:24:d7:31:3c:60:0f:fd:59:dd:65:16:c7:08:65:82:f0:9d: 5b:a8:ce:4d:f2:b4:fc:d6:da:61:8f:47:3d:dd:35:c4:55:84: 0a:9f:df:23:62:52:26:9e:45:aa:42:70:2d:f4:d2:92:f4:2a: 9a:d0:d7:c5:ed:17:f8:ec:79:4b:c0:20:3a:76:93:8f:a7:e3: c3:66:34:62:e8:cb:df:91:f1:b3:9c:d5:b9:72:e1:3e:11:cc: 6c:da:8f:43:45:6e:8a:f6:d0:66:76:62:20:3d:9d:a4:06:78: d1:fe:0b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXlp36J0bBeU+2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NjFlODE1ZjgtY2RmNC00OTlmLWI5NWUtYTc5MzdlOGE3OGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzleETSTZOMIu0alpSMYDnmnN6x8fmWK90G4L mIVHtOnx2EBODbrAF65ncyYqyIiv06bRRlv/eyDuRpMt6a4uNrnRf5SmgljDGpyw xZtC/H8nxZd8MVKqfZDRGAgxTcGVYWd35XmrgNAqsVkO1sPlRUepJvx1zzTB/BLB fnKmpnOiti9ONDQZH6zhrNVxnttn+toiUM/AEcOOOekmoGb3QAvbFfZ2H4QlR1y/ y6gOHRkvHhjdI89xSTMi9qsw0ETTKMkpqEBcyi9sswpNPyNn8k6q1nKLuDMfgy6P L/hXZwxa4e6pDPemhF5mn4K7adu+W2HtMHPEQuqmoxsASQrqiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZwWH0ehRlnhJ0eq6DgpMEV+dzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWQyYzI1NWItYWZhNS0z M2U1LWExOGQtY2UzNzYxMWE2ZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn3CAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzu8fKSOwlyd4/bK9ERu3UK96kVSFWDyrdgDfpx5uh1N5zeosg1gOwM HrWIwtLB7XEvU+Uxme17k3vrjF+dA4hAjyNnZc8Wy/1KNznDt86ZTH1coHCq6gIo IKwGiADANZYsBBronug9UzQv7HAMgNAtTRdQ4hAg31afqWqmRZbWXuuRosUKk/zw HAyPhChfr1Uk1zE8YA/9Wd1lFscIZYLwnVuozk3ytPzW2mGPRz3dNcRVhAqf3yNi UiaeRapCcC300pL0KprQ18XtF/jseUvAIDp2k4+n48NmNGLoy9+R8bOc1bly4T4R zGzaj0NFbor20GZ2YiA9naQGeNH+C0U= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:33 2026 by rpki-client