$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aefae1bc-2857-37d5-a7c5-d632907dc905.roa File: aefae1bc-2857-37d5-a7c5-d632907dc905.roa (raw, json) Hash identifier: rjOX+v3yi/zkIr0VtPUpJoo2b5e8OAchfMFf3sEOqeI= Subject key identifier: 7A:DF:75:E5:63:90:A8:B1:E6:AF:34:2B:04:53:E3:F1:C2:F7:35:93 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC6EC535DAB364E9286900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aefae1bc-2857-37d5-a7c5-d632907dc905.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 140.91.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:6e:c5:35:da:b3:64:e9:28:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=193d1c7e-8709-4568-8a35-ba250d1c25bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:ce:86:e5:d6:ee:b2:76:7a:41:20:29:c8: 7c:3e:12:78:0c:73:41:84:46:76:9c:b1:69:55:f1: 5d:7c:da:10:b3:6a:43:47:82:15:8c:e2:34:6d:36: 02:fe:fe:c8:78:41:3a:96:0e:2e:40:29:e2:68:6d: ea:0a:b9:a2:d0:93:64:7e:c1:f7:da:15:17:25:c0: da:58:4d:9e:5a:04:92:a4:6f:20:6a:4f:89:b7:89: 62:52:d7:1e:16:b2:8f:05:03:f9:47:79:b0:c9:40: 81:01:56:b7:bc:4c:31:b5:85:e9:09:e2:f5:de:0a: a8:5e:15:c2:54:53:ac:7c:80:0e:77:1f:53:99:23: ab:2c:96:aa:16:ee:75:c7:53:ad:1e:d3:b3:ae:53: d7:eb:71:ac:1b:8f:c9:e2:8b:e3:13:c6:48:16:77: bf:a8:a8:29:92:0d:69:97:c3:44:a3:cb:03:5d:d8: 8a:00:8a:cc:f0:37:45:e8:94:71:bf:eb:d7:c3:b1: 49:17:3f:d7:83:bc:1c:6a:8b:1b:0c:1c:69:33:71: 93:1a:f0:07:f4:6d:22:a2:46:16:fa:b3:00:32:75: dc:56:b7:1c:63:e8:50:69:b6:68:0f:6c:8d:80:b4: b1:89:26:53:32:bb:15:5f:e8:5c:4f:4a:96:70:a1: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DF:75:E5:63:90:A8:B1:E6:AF:34:2B:04:53:E3:F1:C2:F7:35:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aefae1bc-2857-37d5-a7c5-d632907dc905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d4:45:c3:7f:42:77:f1:5c:61:f6:c2:b1:24:6f:16:ff:9d: d6:af:db:b5:f6:f9:e1:87:f3:9f:f5:18:8e:30:07:b3:35:34: d7:a9:4c:86:60:63:d8:1d:fd:08:da:57:70:dd:1f:e8:d5:a0: 90:ef:7c:bd:48:0b:15:32:fe:eb:d7:0b:d4:e5:76:42:64:36: f3:d9:5e:17:a2:65:58:11:3c:55:ff:e6:7e:af:fe:2a:5c:f2: 2d:69:f9:bb:f2:3a:29:c0:fe:c7:5c:f0:46:2e:91:48:9c:da: eb:70:06:ed:41:49:89:9a:41:a7:21:c0:37:8c:87:40:d4:9b: fd:c0:14:12:c7:e8:76:a1:62:d9:f2:67:f3:a3:2f:c8:1a:6e: 29:c6:73:6f:6d:ac:78:64:c5:0d:4a:48:38:6d:60:aa:a9:3e: b1:ea:a3:d0:42:c0:5c:bb:2a:f3:80:9e:46:47:15:07:99:69: 21:14:bf:78:a1:2e:c0:14:9b:98:6d:58:fc:7e:ad:93:f4:69: a5:71:78:fa:8b:60:fe:94:a0:18:fa:c7:8b:ad:4d:e9:43:40: ea:ae:c4:66:73:72:10:cf:90:ee:9a:19:2e:ee:e1:08:f0:b4: ed:e7:f1:03:27:21:8a:7b:1d:54:5d:67:69:50:10:3c:c1:0e: 0f:13:6c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvG7FNdqzZOkoaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk MTkzZDFjN2UtODcwOS00NTY4LThhMzUtYmEyNTBkMWMyNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS3OhuXW7rJ2ekEgKch8PhJ4DHNBhEZ2nLFp VfFdfNoQs2pDR4IVjOI0bTYC/v7IeEE6lg4uQCniaG3qCrmi0JNkfsH32hUXJcDa WE2eWgSSpG8gak+Jt4liUtceFrKPBQP5R3mwyUCBAVa3vEwxtYXpCeL13gqoXhXC VFOsfIAOdx9TmSOrLJaqFu51x1OtHtOzrlPX63GsG4/J4ovjE8ZIFne/qKgpkg1p l8NEo8sDXdiKAIrM8DdF6JRxv+vXw7FJFz/Xg7wcaosbDBxpM3GTGvAH9G0iokYW +rMAMnXcVrccY+hQabZoD2yNgLSxiSZTMrsVX+hcT0qWcKH9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrfdeVjkKix5q80KwRT4/HC9zWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWVmYWUxYmMtMjg1Ny0z N2Q1LWE3YzUtZDYzMjkwN2RjOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFviMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/URcN/QnfxXGH2wrEkbxb/ndav27X2+eGH85/1GI4wB7M1NNepTIZg Y9gd/QjaV3DdH+jVoJDvfL1ICxUy/uvXC9TldkJkNvPZXheiZVgRPFX/5n6v/ipc 8i1p+bvyOinA/sdc8EYukUic2utwBu1BSYmaQachwDeMh0DUm/3AFBLH6HahYtny Z/OjL8gabinGc29trHhkxQ1KSDhtYKqpPrHqo9BCwFy7KvOAnkZHFQeZaSEUv3ih LsAUm5htWPx+rZP0aaVxePqLYP6UoBj6x4utTelDQOquxGZzchDPkO6aGS7u4Qjw tO3n8QMnIYp7HVRdZ2lQEDzBDg8TbBg= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:32 2026 by rpki-client