$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae2feee7-88e2-3ab5-ab59-1f7a72c69ac0.roa File: ae2feee7-88e2-3ab5-ab59-1f7a72c69ac0.roa (raw, json) Hash identifier: zV7QSsdleDEWGEjLds/hKxnK+Et+rCTlTkaAKCRPs2g= Subject key identifier: C8:E7:6A:43:2C:57:72:51:21:59:5A:5C:84:69:68:66:78:B7:8A:88 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E8A2A3941DE250DA07E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae2feee7-88e2-3ab5-ab59-1f7a72c69ac0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 161.153.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:8a:2a:39:41:de:25:0d:a0:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=20c71bad-eddf-402c-a65e-e478c8175bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:25:aa:85:6e:2a:2e:8e:ed:d1:42:ad:61: b7:85:55:f2:e8:d7:d9:6a:d5:73:9b:8b:00:45:39: 9e:3d:e6:fa:a8:2d:57:f8:c4:9e:c2:ec:b8:53:7c: c6:a7:84:4c:00:ed:b0:ff:6d:60:9f:28:43:6e:d5: d4:a7:56:95:9e:83:3d:84:fd:12:5c:96:5a:d1:68: 04:9b:08:f2:58:1d:5a:61:4d:90:83:eb:a3:3e:34: e5:d8:11:81:17:f3:26:ff:34:4c:7b:29:60:db:ea: cc:3b:ee:81:d2:3f:5b:59:06:c8:31:42:9b:69:f0: 79:22:cb:c4:be:39:52:a8:11:23:0e:d3:34:ef:ab: 88:71:1d:93:0b:d4:e7:de:1b:58:f9:8e:f7:ba:86: a0:b0:79:fc:50:9d:16:7d:21:a3:84:8f:27:76:cc: 7b:72:4c:65:aa:08:24:50:25:9a:1a:29:52:75:68: 8e:76:2e:32:9d:2a:a2:37:dc:5f:e9:03:f9:f7:31: 85:fe:06:46:73:cc:55:46:b6:d5:40:39:72:39:16: 98:83:68:9f:08:73:d0:85:51:30:45:f8:cd:44:56: f7:e8:61:9c:28:a5:86:56:cf:62:58:76:f2:2a:96: f7:60:9c:89:8c:7e:95:35:30:4a:ee:4c:74:4f:54: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E7:6A:43:2C:57:72:51:21:59:5A:5C:84:69:68:66:78:B7:8A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae2feee7-88e2-3ab5-ab59-1f7a72c69ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5e:45:36:4c:18:92:b2:4d:45:3a:c6:a7:77:56:7d:b9:2b: d0:61:6e:c8:c8:f5:d9:d9:4e:fd:63:9a:e1:4d:96:3f:24:e1: ce:40:53:a4:3c:8b:24:02:b7:ce:51:5a:55:5e:1c:4e:ac:56: 19:a3:37:39:80:51:d1:b3:6a:f0:98:c3:8e:8a:77:31:65:a1: 2e:27:2a:8f:ce:0d:a9:61:20:3d:15:10:87:82:9e:11:68:7f: fe:74:72:0f:2b:16:76:1e:4a:a7:77:98:7f:cc:f0:32:6c:99: cd:05:90:90:42:d6:2c:1a:dc:ae:ad:39:cb:95:d4:cd:76:a7: 03:b6:35:bb:28:f2:c7:4b:cc:1d:8e:99:66:71:9b:cd:14:0d: 11:dd:87:a0:6c:d4:23:14:3f:08:ee:9d:cb:2f:43:8e:ec:69: c1:37:93:45:49:e8:7e:51:69:91:86:4b:e5:ba:05:0a:9a:40: 54:6a:c5:5b:f6:00:51:e4:fe:03:e8:40:22:9b:4b:c8:60:0b: b4:d7:78:8f:9d:6c:27:9e:99:93:cd:5d:40:1b:34:9d:36:7c: c1:bc:85:50:4c:b5:e2:39:76:49:d9:98:d4:de:f0:89:8b:37: 56:68:bd:28:49:ef:8e:fa:0b:31:d8:c0:de:82:29:8f:ef:93: d7:93:27:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXooqOUHeJQ2gfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjBjNzFiYWQtZWRkZi00MDJjLWE2NWUtZTQ3OGM4MTc1YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJUlqoVuKi6O7dFCrWG3hVXy6NfZatVzm4sA RTmePeb6qC1X+MSewuy4U3zGp4RMAO2w/21gnyhDbtXUp1aVnoM9hP0SXJZa0WgE mwjyWB1aYU2Qg+ujPjTl2BGBF/Mm/zRMeylg2+rMO+6B0j9bWQbIMUKbafB5IsvE vjlSqBEjDtM076uIcR2TC9Tn3htY+Y73uoagsHn8UJ0WfSGjhI8ndsx7ckxlqggk UCWaGilSdWiOdi4ynSqiN9xf6QP59zGF/gZGc8xVRrbVQDlyORaYg2ifCHPQhVEw RfjNRFb36GGcKKWGVs9iWHbyKpb3YJyJjH6VNTBK7kx0T1RqQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjnakMsV3JRIVlaXIRpaGZ4t4qIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWUyZmVlZTctODhlMi0z YWI1LWFiNTktMWY3YTcyYzY5YWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoZngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVeRTZMGJKyTUU6xqd3Vn25K9BhbsjI9dnZTv1jmuFNlj8k4c5AU6Q8 iyQCt85RWlVeHE6sVhmjNzmAUdGzavCYw46KdzFloS4nKo/ODalhID0VEIeCnhFo f/50cg8rFnYeSqd3mH/M8DJsmc0FkJBC1iwa3K6tOcuV1M12pwO2Nbso8sdLzB2O mWZxm80UDRHdh6Bs1CMUPwjuncsvQ47sacE3k0VJ6H5RaZGGS+W6BQqaQFRqxVv2 AFHk/gPoQCKbS8hgC7TXeI+dbCeemZPNXUAbNJ02fMG8hVBMteI5dknZmNTe8ImL N1ZovShJ7476CzHYwN6CKY/vk9eTJ9U= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:27 2026 by rpki-client