$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa File: 9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa (raw, json) Hash identifier: 4mGrlFBLSCgzALckoUHNT1Y5FPkerB0/sXa5A99pihE= Subject key identifier: FC:AD:16:1A:87:E4:BC:5A:93:E2:49:6C:A0:5D:3A:3C:6D:E6:4D:D2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA75C7043434B9F69F3BB0800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 31898 IP address blocks: 157.137.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:70:43:43:4b:9f:69:f3:bb:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=e2778d20-4c86-405c-8055-43cc06077482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3e:a3:c5:06:b9:5a:09:29:42:c7:31:3f:de: 2d:d1:bf:7f:54:1a:46:85:dd:57:e8:4a:56:5b:cb: 00:f6:f7:7a:e7:76:a6:3b:cf:32:2d:06:c6:72:a1: e9:4c:90:21:ad:fa:ed:bf:cf:fc:25:2b:b2:86:d9: c8:21:af:b8:29:4a:fb:5c:d0:75:f6:8c:7b:0a:ec: e9:94:d3:c9:5f:1b:c3:88:f1:44:00:f7:e0:66:e7: 48:72:4a:0e:ed:88:a3:da:6a:13:98:1c:2b:46:3d: 02:3e:4c:a3:c8:d3:5f:5b:1b:e9:64:4e:ef:a5:bf: 1d:d1:91:c8:b4:aa:9d:da:74:39:4b:cb:d5:3a:96: 77:50:48:4e:7a:f4:94:a8:c3:e8:d3:aa:66:a0:f1: a3:1e:9e:11:f1:4f:bd:ab:2e:7a:18:49:58:fb:7f: 2e:6e:a3:b3:ee:fe:8b:04:24:85:1e:02:28:36:b2: 29:b0:af:44:3f:e6:1f:da:d9:e7:20:1d:3a:db:9b: a4:43:f8:6f:56:06:2a:8d:65:72:02:18:60:14:9e: b3:c0:1f:02:92:5d:fa:61:63:b8:b5:4f:6a:24:06: 1d:f0:03:13:59:5e:40:0e:f5:25:57:03:ca:bd:fd: 01:d5:e6:f7:0a:db:75:bf:14:3d:dc:09:25:39:72: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AD:16:1A:87:E4:BC:5A:93:E2:49:6C:A0:5D:3A:3C:6D:E6:4D:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d6:1a:65:f8:e3:aa:78:4b:23:52:73:62:68:25:c0:c2:c8: 65:b4:98:19:bc:4f:8c:92:aa:aa:3d:40:52:16:06:9d:59:b9: 14:f6:3d:1a:f7:74:c7:fa:86:99:cd:94:f3:51:62:31:c2:59: 9b:6b:4c:8c:b3:5b:d3:c4:8f:d2:9d:94:a2:e3:25:12:f6:c0: 25:e2:c6:4e:fb:5d:20:4c:47:0a:fe:13:a0:08:c3:37:76:60: 92:75:ca:95:44:1e:ed:6c:04:39:86:f4:77:94:be:5f:04:63: c6:c1:e1:c3:c8:95:21:e7:01:98:99:6b:57:0f:a0:1e:20:5d: 03:09:69:55:41:a2:07:09:2b:ec:8c:30:d9:25:9f:da:27:4e: 11:ea:70:a0:a3:fe:48:7c:c5:28:ed:fd:c0:94:06:63:83:9c: 9e:4f:3b:4c:cf:b9:1e:20:54:3c:6e:2f:2d:bd:59:69:2b:f2: 62:0c:be:b9:db:65:f3:aa:8b:ec:01:93:4e:c8:4e:24:fe:b7: d9:28:65:de:0b:41:98:d3:39:93:75:d5:bc:5a:f2:df:02:6b: d9:7b:97:6b:06:83:93:45:f6:63:c6:7c:57:cc:66:84:21:dd: e7:b3:e6:47:f3:1b:1f:72:6b:1e:ac:58:ab:f2:16:bb:fd:91: ef:8c:f0:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynXHBDQ0ufafO7CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk ZTI3NzhkMjAtNGM4Ni00MDVjLTgwNTUtNDNjYzA2MDc3NDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z6jxQa5WgkpQscxP94t0b9/VBpGhd1X6EpW W8sA9vd653amO88yLQbGcqHpTJAhrfrtv8/8JSuyhtnIIa+4KUr7XNB19ox7Cuzp lNPJXxvDiPFEAPfgZudIckoO7Yij2moTmBwrRj0CPkyjyNNfWxvpZE7vpb8d0ZHI tKqd2nQ5S8vVOpZ3UEhOevSUqMPo06pmoPGjHp4R8U+9qy56GElY+38ubqOz7v6L BCSFHgIoNrIpsK9EP+Yf2tnnIB0625ukQ/hvVgYqjWVyAhhgFJ6zwB8Ckl36YWO4 tU9qJAYd8AMTWV5ADvUlVwPKvf0B1eb3Ctt1vxQ93AklOXLAywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPytFhqH5Lxak+JJbKBdOjxt5k3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWQ0ZDgxYWQtNzQxNi0z OTEyLWJlOWItNGIwY2QyZDFlNDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYn+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLWGmX446p4SyNSc2JoJcDCyGW0mBm8T4ySqqo9QFIWBp1ZuRT2PRr3 dMf6hpnNlPNRYjHCWZtrTIyzW9PEj9KdlKLjJRL2wCXixk77XSBMRwr+E6AIwzd2 YJJ1ypVEHu1sBDmG9HeUvl8EY8bB4cPIlSHnAZiZa1cPoB4gXQMJaVVBogcJK+yM MNkln9onThHqcKCj/kh8xSjt/cCUBmODnJ5PO0zPuR4gVDxuLy29WWkr8mIMvrnb ZfOqi+wBk07ITiT+t9koZd4LQZjTOZN11bxa8t8Ca9l7l2sGg5NF9mPGfFfMZoQh 3eez5kfzGx9yax6sWKvyFrv9ke+M8MM= -----END CERTIFICATE-----Generated at Thu Feb 26 05:00:08 2026 by rpki-client