$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af4c638f-d29a-377f-b2b1-e4c798a13732.roa File: af4c638f-d29a-377f-b2b1-e4c798a13732.roa (raw, json) Hash identifier: +BJg3P4dLszj9Pu5fszpuXQ1U9kCD+x8jxLamQsGhxE= Subject key identifier: 41:E4:59:D9:3C:6B:99:60:C7:76:5E:7F:75:C1:C3:71:82:81:18:3E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1B03CE1A5982413A20900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af4c638f-d29a-377f-b2b1-e4c798a13732.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 158.101.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:b0:3c:e1:a5:98:24:13:a2:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=ec1bf78a-1c6d-4d6f-b0dc-1968b9bb0b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:f4:63:9c:64:ee:c9:47:40:a7:7b:54:d1: c9:74:de:3d:88:49:a3:ae:9f:8e:eb:62:4a:fa:4a: 5d:cf:7e:53:cf:a5:b7:2d:d2:0f:fb:f4:69:80:bd: 7e:2d:02:ce:b5:55:5b:ec:1a:70:3d:e2:1e:05:da: 8d:4e:58:34:46:26:fa:d0:76:ec:79:f5:4d:61:b6: 3a:58:9d:45:5a:44:04:41:1e:9e:04:54:c2:af:36: 24:46:e8:04:4d:c3:ae:f1:d3:e4:07:47:3f:71:ad: 0a:6d:8d:b7:d5:f3:1d:13:0f:b2:64:31:66:a1:b5: 66:67:0f:11:a5:e0:c4:1b:8b:9b:79:4c:56:cb:6d: ee:37:59:c2:52:fe:6e:da:ef:fd:b1:16:49:fd:eb: 60:16:a1:e2:03:86:e4:4a:9e:e2:a7:1b:03:11:79: 7a:d4:23:c0:1b:25:22:10:fd:1d:ac:0f:ca:3d:7c: b3:57:d9:6f:08:32:ec:d1:fc:f6:b0:76:f2:80:22: 54:c4:a1:6f:59:d8:46:32:0e:51:c8:3f:7f:b5:c1: 77:34:2c:a1:9b:1a:3f:b0:11:3b:4c:14:de:21:8a: eb:53:9c:f6:6f:07:5c:e6:41:eb:00:ae:84:aa:f4: 12:d8:cb:f1:84:12:1d:37:00:e0:78:9b:55:f6:e5: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E4:59:D9:3C:6B:99:60:C7:76:5E:7F:75:C1:C3:71:82:81:18:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af4c638f-d29a-377f-b2b1-e4c798a13732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.101.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:0e:d2:19:cc:8d:76:09:b5:9b:32:a7:7f:e1:6f:83:7d:7b: 22:de:43:f0:dc:db:3e:a8:6a:a3:b4:97:a8:0f:39:e3:00:80: 3c:ca:78:53:d4:02:da:f7:e8:8c:4d:14:b3:b4:47:b7:85:71: f5:ce:7b:2b:76:ef:d8:e4:9f:c9:32:65:96:da:65:f7:64:7e: a4:24:d3:09:fb:ab:d0:95:15:ed:59:e2:e6:80:42:bb:1d:01: 48:cf:2a:d4:11:d3:49:a2:ce:4a:c4:43:a0:ea:a3:69:0a:b4: be:10:af:26:a7:8e:23:39:fb:25:9e:6b:31:95:c2:db:52:39: 48:55:ee:aa:81:f5:8e:f7:ce:f4:dd:de:2c:d2:03:48:6a:53: e5:3b:2d:88:ea:d0:c2:a8:e4:31:9c:7e:31:fc:d6:fa:ee:92: 16:8c:bb:b1:b4:f8:d1:8f:a9:a3:09:aa:8e:88:51:84:9f:1a: f7:0b:10:d0:71:6f:80:a6:d9:dc:2b:1a:21:c7:e2:a6:94:ce: d5:d0:68:78:97:50:1c:a7:43:aa:65:6c:98:bf:3c:f9:b0:43: 44:b7:69:00:69:b4:61:2d:f3:89:68:71:95:d3:15:0a:53:05: ec:d4:9d:c6:23:d9:95:80:25:35:18:33:29:09:db:2d:8b:67: 74:62:c7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8bA84aWYJBOiCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk ZWMxYmY3OGEtMWM2ZC00ZDZmLWIwZGMtMTk2OGI5YmIwYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunH0Y5xk7slHQKd7VNHJdN49iEmjrp+O62JK +kpdz35Tz6W3LdIP+/RpgL1+LQLOtVVb7BpwPeIeBdqNTlg0Rib60HbsefVNYbY6 WJ1FWkQEQR6eBFTCrzYkRugETcOu8dPkB0c/ca0KbY231fMdEw+yZDFmobVmZw8R peDEG4ubeUxWy23uN1nCUv5u2u/9sRZJ/etgFqHiA4bkSp7ipxsDEXl61CPAGyUi EP0drA/KPXyzV9lvCDLs0fz2sHbygCJUxKFvWdhGMg5RyD9/tcF3NCyhmxo/sBE7 TBTeIYrrU5z2bwdc5kHrAK6EqvQS2MvxhBIdNwDgeJtV9uVL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHkWdk8a5lgx3Zef3XBw3GCgRg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWY0YzYzOGYtZDI5YS0z NzdmLWIyYjEtZTRjNzk4YTEzNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnmXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQO0hnMjXYJtZsyp3/hb4N9eyLeQ/Dc2z6oaqO0l6gPOeMAgDzKeFPU Atr36IxNFLO0R7eFcfXOeyt279jkn8kyZZbaZfdkfqQk0wn7q9CVFe1Z4uaAQrsd AUjPKtQR00mizkrEQ6Dqo2kKtL4QryanjiM5+yWeazGVwttSOUhV7qqB9Y73zvTd 3izSA0hqU+U7LYjq0MKo5DGcfjH81vrukhaMu7G0+NGPqaMJqo6IUYSfGvcLENBx b4Cm2dwrGiHH4qaUztXQaHiXUBynQ6plbJi/PPmwQ0S3aQBptGEt84locZXTFQpT BezUncYj2ZWAJTUYMykJ2y2LZ3Rixx8= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:26 2026 by rpki-client