$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa File: 9f402ac2-805b-33f9-8973-e24027b97258.roa (raw, json) Hash identifier: IHwVbFgvvcfzVuD5/djnLQAcPQORynhJ0ANcwnCy4Ak= Subject key identifier: 22:D0:82:6D:BD:07:A6:35:FB:ED:A7:01:A9:25:54:A9:D3:47:FD:A3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CBDB215806E5FF0AB689DA1C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 31898 IP address blocks: 168.107.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b2:15:80:6e:5f:f0:ab:68:9d:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=a3cef378-c2df-4be9-a6d6-986b7f5d2786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:49:22:30:58:c8:5f:f8:b0:28:ec:95:68:2c: c2:7e:3e:59:a8:6a:53:4b:9d:eb:37:0d:d5:c2:af: 1b:f7:50:24:a0:c0:2e:16:35:f2:25:f4:8f:aa:ec: 03:fb:28:f0:44:6c:ba:24:96:e8:fe:05:8f:7d:de: 4f:ea:d6:ac:87:f0:49:1b:9d:6d:32:9c:0d:3c:20: 59:c8:5f:ba:ce:b2:e0:c1:b7:68:a3:c0:ff:7e:db: df:53:00:be:0f:ba:f5:a2:68:1a:5f:ec:34:c9:d0: 00:85:9c:2d:5d:b6:2f:48:e3:8d:06:e2:cb:8e:08: f9:a0:bb:f1:21:fc:67:1e:43:6a:e2:31:c9:88:e1: 7f:d2:ae:77:1f:59:4b:a1:1b:ed:0e:62:90:0a:bb: 7f:3f:b3:07:09:be:1b:ae:4e:e9:44:0e:21:c6:02: 18:2b:e3:2c:69:8a:8d:fa:72:65:6a:c6:57:54:b1: 66:d9:db:17:4c:c9:8a:3a:a7:2b:e7:3d:61:d6:0f: db:8d:05:64:f0:42:c7:01:ab:77:a8:d5:c8:04:d0: 13:e7:46:36:f2:87:a7:d6:09:54:08:03:e0:b4:3c: 6d:0e:75:d7:77:58:53:25:2e:9e:1a:cd:36:ab:14: 33:7c:c2:f8:70:7a:24:8d:f4:70:08:c9:f3:56:ec: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D0:82:6D:BD:07:A6:35:FB:ED:A7:01:A9:25:54:A9:D3:47:FD:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:bc:8f:ce:d0:fa:28:c0:42:f0:39:55:a2:15:b1:5a:94:e8: 3d:01:9d:10:5e:94:80:da:97:2c:9d:05:82:43:b6:42:47:43: c4:60:a8:fe:c5:ad:16:e9:b3:8b:db:2d:f3:17:42:fe:12:b6: bd:2d:cb:2e:d1:2a:de:0f:23:80:25:e5:9c:97:05:69:fc:82: b3:8d:98:cc:4a:81:c1:f3:f3:3a:86:06:8b:e2:b1:6f:ed:cd: 14:11:fb:70:cf:e1:2f:9f:df:ba:f6:cd:b6:3e:f2:b0:5f:b6: 82:5c:35:fc:a6:1b:6d:d3:25:72:f2:a5:71:b2:09:f8:4b:2e: f3:47:a8:7e:b0:f0:db:ae:2e:5b:f2:22:b1:85:a0:ef:55:4c: d7:1a:23:a5:6d:22:c4:ba:ce:7b:5f:65:3a:8f:3c:d7:70:34: 75:85:57:b3:6c:15:c8:96:8e:c2:da:c5:43:2d:6c:32:b9:af: 97:ce:f2:da:5f:e0:54:7a:ff:9f:d6:92:1d:d6:15:14:1c:12: a5:91:52:02:18:4c:1e:5d:ac:a5:7c:87:ad:06:7e:39:e6:94: 5f:7e:e8:eb:7f:10:d0:a0:3c:3a:c4:91:02:16:4e:1e:ef:55: 61:49:8b:7d:98:59:72:5a:b7:54:ba:29:5d:0f:46:9d:e8:6a: 09:8b:5c:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9shWAbl/wq2idocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk YTNjZWYzNzgtYzJkZi00YmU5LWE2ZDYtOTg2YjdmNWQyNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEkiMFjIX/iwKOyVaCzCfj5ZqGpTS53rNw3V wq8b91AkoMAuFjXyJfSPquwD+yjwRGy6JJbo/gWPfd5P6tash/BJG51tMpwNPCBZ yF+6zrLgwbdoo8D/ftvfUwC+D7r1omgaX+w0ydAAhZwtXbYvSOONBuLLjgj5oLvx IfxnHkNq4jHJiOF/0q53H1lLoRvtDmKQCrt/P7MHCb4brk7pRA4hxgIYK+MsaYqN +nJlasZXVLFm2dsXTMmKOqcr5z1h1g/bjQVk8ELHAat3qNXIBNAT50Y28oen1glU CAPgtDxtDnXXd1hTJS6eGs02qxQzfML4cHokjfRwCMnzVuzNDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLQgm29B6Y1++2nAaklVKnTR/2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWY0MDJhYzItODA1Yi0z M2Y5LTg5NzMtZTI0MDI3Yjk3MjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe8j87Q+ijAQvA5VaIVsVqU6D0BnRBelIDalyydBYJDtkJHQ8RgqP7F rRbps4vbLfMXQv4Str0tyy7RKt4PI4Al5ZyXBWn8grONmMxKgcHz8zqGBovisW/t zRQR+3DP4S+f37r2zbY+8rBftoJcNfymG23TJXLypXGyCfhLLvNHqH6w8NuuLlvy IrGFoO9VTNcaI6VtIsS6zntfZTqPPNdwNHWFV7NsFciWjsLaxUMtbDK5r5fO8tpf 4FR6/5/Wkh3WFRQcEqWRUgIYTB5drKV8h60GfjnmlF9+6Ot/ENCgPDrEkQIWTh7v VWFJi32YWXJat1S6KV0PRp3oagmLXPM= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:18 2026 by rpki-client