$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a9deed77-c1a7-3be7-84ca-b023d79399ac.roa File: a9deed77-c1a7-3be7-84ca-b023d79399ac.roa (raw, json) Hash identifier: ORGVjDIXYLz2ouGc+tGF5RyaXr78AK9kiEgVBrcSdKU= Subject key identifier: 68:D8:A3:43:3F:D0:97:3B:2E:A8:1C:04:88:F9:92:29:66:F7:B3:13 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC7BF33C7CBD9A189445C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a9deed77-c1a7-3be7-84ca-b023d79399ac.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 204.216.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:7b:f3:3c:7c:bd:9a:18:94:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=45b0b404-5793-4b5c-a282-1f826bbb22f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4a:d3:bb:46:c2:d0:29:0c:ed:f4:9c:0c:ce: 24:c2:5c:d0:24:0c:a7:ec:84:71:79:21:3d:fa:e9: b5:fd:42:e9:91:93:ab:ef:f2:dc:f3:4b:44:ba:36: b7:c0:06:d6:81:dc:0e:42:27:8c:0e:0f:40:c7:e4: 56:f0:07:88:d1:37:bf:f8:ca:79:b7:c3:cc:30:28: 53:cb:ce:ef:20:2c:dc:7f:88:c6:4f:b1:14:85:04: 23:e8:e9:89:c4:0d:aa:49:c4:de:a5:be:df:21:3a: f8:ba:a5:bd:c5:c6:97:d0:b3:c0:7f:c2:03:88:6c: b1:87:e5:06:67:78:ea:f6:db:e3:01:fe:1b:95:28: de:a6:d7:34:bc:29:96:06:3d:fb:53:f2:b7:e8:dd: 32:0a:ff:fa:c7:be:7c:4b:23:be:d2:a9:a4:cf:79: 44:80:f1:f4:d1:be:5e:2c:d2:34:eb:84:7f:2b:36: 2b:97:16:ff:1d:da:4d:7e:a2:db:58:c2:56:9a:d7: 25:5f:c3:07:e8:e0:e9:92:30:2e:7d:b0:8f:4c:0f: de:86:88:91:47:b9:45:70:46:8e:ec:12:83:a5:52: be:00:a9:f9:02:2e:02:64:83:bc:b1:6c:67:68:eb: 9a:5a:89:3f:8a:3b:6c:68:34:7c:78:27:11:30:a3: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D8:A3:43:3F:D0:97:3B:2E:A8:1C:04:88:F9:92:29:66:F7:B3:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a9deed77-c1a7-3be7-84ca-b023d79399ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:47:c1:ea:23:50:1b:b5:64:6c:1f:9d:24:96:ea:a5:d5:d3: 8d:45:3c:29:5c:90:ad:83:59:df:43:a5:4b:84:7a:80:19:9c: 45:5b:d2:ba:75:94:8d:fc:22:30:10:64:50:57:39:ed:f6:68: 09:09:0a:5a:5f:11:4b:69:b9:fb:ab:c5:a4:c9:21:53:48:f9: 52:47:3b:d5:47:64:a0:71:7f:48:4f:03:70:f8:8f:2c:33:8c: 5e:d9:7d:e0:1b:71:f0:c6:42:5f:1e:f3:73:56:de:8b:0c:a0: 4b:4e:99:7d:e7:aa:d7:c9:e1:83:d2:40:db:db:e0:ec:6d:50: 86:65:97:e4:70:e7:9c:6d:5e:eb:25:61:93:5c:f5:8d:71:cc: 29:5a:15:88:7d:99:06:12:70:83:3f:db:80:40:a2:44:95:1f: 93:fd:81:98:1f:5a:94:e4:6e:53:f8:a1:b3:e0:d4:de:58:a1: 1e:fb:fd:f6:75:f7:55:bf:51:85:8a:44:db:0a:79:3e:89:99: b8:16:0b:8e:80:1e:92:c8:9c:c0:6d:ea:a3:6e:3c:fc:a5:94: d1:0f:e2:5d:09:73:70:30:7e:01:f0:c9:e7:85:06:6d:fc:1a: 1d:02:6c:da:16:95:35:6c:22:22:f5:63:27:f1:b9:22:96:29: 36:a5:04:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHvzPHy9mhiURcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NDViMGI0MDQtNTc5My00YjVjLWEyODItMWY4MjZiYmIyMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ErTu0bC0CkM7fScDM4kwlzQJAyn7IRxeSE9 +um1/ULpkZOr7/Lc80tEuja3wAbWgdwOQieMDg9Ax+RW8AeI0Te/+Mp5t8PMMChT y87vICzcf4jGT7EUhQQj6OmJxA2qScTepb7fITr4uqW9xcaX0LPAf8IDiGyxh+UG Z3jq9tvjAf4blSjeptc0vCmWBj37U/K36N0yCv/6x758SyO+0qmkz3lEgPH00b5e LNI064R/KzYrlxb/HdpNfqLbWMJWmtclX8MH6ODpkjAufbCPTA/ehoiRR7lFcEaO 7BKDpVK+AKn5Ai4CZIO8sWxnaOuaWok/ijtsaDR8eCcRMKMOkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjYo0M/0Jc7LqgcBIj5kilm97MTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTlkZWVkNzctYzFhNy0z YmU3LTg0Y2EtYjAyM2Q3OTM5OWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzNhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9HweojUBu1ZGwfnSSW6qXV041FPClckK2DWd9DpUuEeoAZnEVb0rp1 lI38IjAQZFBXOe32aAkJClpfEUtpufurxaTJIVNI+VJHO9VHZKBxf0hPA3D4jywz jF7ZfeAbcfDGQl8e83NW3osMoEtOmX3nqtfJ4YPSQNvb4OxtUIZll+Rw55xtXusl YZNc9Y1xzClaFYh9mQYScIM/24BAokSVH5P9gZgfWpTkblP4obPg1N5YoR77/fZ1 91W/UYWKRNsKeT6JmbgWC46AHpLInMBt6qNuPPyllNEP4l0Jc3AwfgHwyeeFBm38 Gh0CbNoWlTVsIiL1YyfxuSKWKTalBC8= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:39 2026 by rpki-client