$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa File: a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa (raw, json) Hash identifier: Nfk4DrBt0jNo1RVvlcgMZTl/UN1mDZvwn1LZtuIfoWM= Subject key identifier: ED:E0:6A:2D:73:E4:3A:CA:F7:55:40:64:8D:BF:73:51:98:09:2B:0D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5EBF57FE183A7E84C52A00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 147.154.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:bf:57:fe:18:3a:7e:84:c5:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=0cbec438-7d16-4d70-bf5a-dce4881b19bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:85:84:c0:40:d9:20:a7:ca:05:45:cb:3e: d1:84:59:c3:09:f4:11:1a:c5:57:da:9d:b1:14:cf: 40:ab:d7:e8:c8:3a:98:a9:27:22:05:b0:d9:5d:d1: e5:06:0d:e4:9c:c2:22:95:e4:5e:17:f5:f2:ec:73: c6:c5:01:ac:e0:d6:ef:73:95:e1:46:25:c2:33:d9: 43:f9:7c:20:bf:54:3e:9d:c7:03:d2:ca:ba:f5:5d: 35:a0:17:c3:53:87:ae:1d:09:a9:96:67:eb:1a:16: dd:c1:91:a6:fe:c4:22:a6:aa:c5:60:5c:c1:f4:33: 9e:37:04:cb:c5:a1:27:46:bf:1b:d6:98:46:48:7f: 0c:7e:7a:f6:e1:4e:7f:17:23:8c:1c:8f:7b:3f:fb: 89:14:f0:39:2c:48:36:25:08:04:6a:b1:4a:31:fa: b3:67:75:1a:03:3e:5c:40:d3:77:ec:f3:03:17:59: 3b:3e:3e:5f:54:12:8b:cb:6f:c2:f7:52:16:6a:68: c0:82:91:41:4e:98:3f:56:dd:ce:af:1d:3e:45:c9: c7:da:6d:df:89:25:73:3c:51:2a:75:9c:3e:69:6d: ca:1f:3f:cf:56:23:fd:86:d9:1a:5b:07:a5:0c:59: 74:fd:3f:36:c7:1f:1a:bd:61:76:7d:75:f4:91:bd: dd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E0:6A:2D:73:E4:3A:CA:F7:55:40:64:8D:BF:73:51:98:09:2B:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:19:f1:3a:41:df:42:b4:47:0d:99:71:6e:f1:2e:4d:10:0a: 88:88:7d:38:a8:32:00:84:6c:14:42:c7:74:00:a9:00:cd:03: 05:ec:ed:fb:b5:f8:e6:2a:04:ac:b2:51:7b:f0:9c:96:1f:d1: a3:ee:fb:70:48:ab:08:c6:fd:20:4b:a6:c6:00:88:89:ba:bd: 6c:25:a1:4b:d9:f7:2a:12:54:4c:a6:04:bd:81:78:72:77:27: d2:0a:f9:aa:14:70:99:4c:92:b0:6b:a7:fc:03:62:bf:ad:c4: b2:a2:b4:b8:a8:3b:fb:ef:c1:4e:db:f7:47:9c:62:e6:97:03: d8:76:bc:20:7c:7d:a4:87:4b:d8:a8:09:8e:37:5c:51:17:ca: ec:02:1e:9c:db:18:7b:9b:47:5e:42:18:e0:3e:c4:08:73:61: ad:e3:62:5d:85:18:c2:44:c1:a7:54:21:41:00:43:db:c4:f0: 2e:95:b3:36:e5:fb:8c:03:e4:ef:0b:8d:79:4b:df:e8:af:e4: 26:ed:17:7a:80:97:74:48:3f:67:a1:82:3f:34:1b:91:48:22: 36:78:b7:bc:77:ed:40:25:5d:b5:25:9b:aa:e3:08:b5:0b:2c: f4:88:6d:0d:51:f0:0f:46:18:97:11:69:b6:df:5c:26:70:fa: 3b:43:18:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXr9X/hg6foTFKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MGNiZWM0MzgtN2QxNi00ZDcwLWJmNWEtZGNlNDg4MWIxOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvqFhMBA2SCnygVFyz7RhFnDCfQRGsVX2p2x FM9Aq9foyDqYqSciBbDZXdHlBg3knMIileReF/Xy7HPGxQGs4Nbvc5XhRiXCM9lD +Xwgv1Q+nccD0sq69V01oBfDU4euHQmplmfrGhbdwZGm/sQipqrFYFzB9DOeNwTL xaEnRr8b1phGSH8Mfnr24U5/FyOMHI97P/uJFPA5LEg2JQgEarFKMfqzZ3UaAz5c QNN37PMDF1k7Pj5fVBKLy2/C91IWamjAgpFBTpg/Vt3Orx0+RcnH2m3fiSVzPFEq dZw+aW3KHz/PViP9htkaWwelDFl0/T82xx8avWF2fXX0kb3dyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3gai1z5DrK91VAZI2/c1GYCSsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTQ4MTdmZDAtMGY3OC0z NmU0LWJiYjctYjhmYWZjN2E0ODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEZ8TpB30K0Rw2ZcW7xLk0QCoiIfTioMgCEbBRCx3QAqQDNAwXs7fu1 +OYqBKyyUXvwnJYf0aPu+3BIqwjG/SBLpsYAiIm6vWwloUvZ9yoSVEymBL2BeHJ3 J9IK+aoUcJlMkrBrp/wDYr+txLKitLioO/vvwU7b90ecYuaXA9h2vCB8faSHS9io CY43XFEXyuwCHpzbGHubR15CGOA+xAhzYa3jYl2FGMJEwadUIUEAQ9vE8C6Vszbl +4wD5O8LjXlL3+iv5CbtF3qAl3RIP2ehgj80G5FIIjZ4t7x37UAlXbUlm6rjCLUL LPSIbQ1R8A9GGJcRabbfXCZw+jtDGCs= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:50 2026 by rpki-client