$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa File: c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa (raw, json) Hash identifier: jc/iKLCsvQ8y6Ux9y1ia5iP96Aw+jt5QTgwc5QW3gZI= Subject key identifier: 0A:CF:16:8E:B2:B6:13:32:E6:48:D1:15:3A:87:03:C6:55:29:C7:91 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CE2EA685CE1DFCF43B62C2400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa Signing time: Mon 16 Feb 2026 21:59:38 +0000 ROA not before: Mon 16 Feb 2026 21:59:38 +0000 ROA not after: Sun 17 May 2026 20:59:38 +0000 asID: 31898 IP address blocks: 192.153.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e2:ea:68:5c:e1:df:cf:43:b6:2c:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 16 21:59:38 2026 GMT Not After : May 17 20:59:38 2026 GMT Subject: CN=884a3288-2289-431a-82af-58b866c80d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9d:24:5b:e8:84:e2:f3:db:67:73:0c:44:96: bd:37:88:01:fa:c7:51:a3:cf:f2:64:a4:cb:15:ec: 7b:4a:74:c7:7e:bd:8a:21:a2:e7:ca:3c:b1:5e:f5: f0:66:66:55:f8:7a:e9:d2:0a:e5:a7:64:8c:1c:63: 0a:e1:40:3e:f9:b4:ef:15:d1:d2:61:cc:88:9c:7b: 03:18:1c:08:ce:50:57:a8:43:2a:94:ab:ca:fe:4b: da:0c:ad:23:da:b6:1a:a4:0b:73:64:f8:cf:8b:17: 21:ca:33:4f:64:b4:3f:61:4a:03:8a:f6:e0:d7:79: 92:0c:29:91:c3:66:b9:48:8a:ce:48:6c:cd:72:dc: c8:47:b9:48:0d:7a:9e:a7:2b:71:08:89:5d:7a:bb: ba:53:ec:a8:55:8d:ff:15:0b:1a:fd:58:94:2f:56: fe:a7:ff:ff:73:22:17:0e:f5:44:3e:c5:fe:50:cb: 84:af:36:ce:0a:ee:a0:ec:c4:3a:6f:82:5c:40:18: d8:15:83:0f:e4:41:e2:a1:e4:94:25:ac:19:00:4d: 35:51:4a:2c:01:17:d0:87:77:80:ef:de:f2:43:74: 0e:61:09:02:07:2b:fc:e3:82:4e:a6:8f:64:60:0a: 4b:21:eb:90:9b:45:68:42:2f:dd:de:c5:b4:3e:a0: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CF:16:8E:B2:B6:13:32:E6:48:D1:15:3A:87:03:C6:55:29:C7:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.153.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:28:d5:35:4d:ad:34:74:74:7e:47:9a:59:90:e9:f4:8f:50: 54:15:f6:06:f4:c9:e3:35:92:b5:78:11:11:91:99:84:4d:f1: 24:73:0c:c6:5b:2f:1a:ca:2b:57:45:7e:d8:f0:8a:33:ea:01: 6a:21:13:36:fa:11:4d:9d:a2:60:81:d7:c8:fc:5b:2b:c9:bb: 1b:33:bc:9e:f0:c7:a8:ee:44:8e:80:ee:70:11:eb:2d:ff:81: 51:af:8b:a5:87:5c:1c:e7:05:bc:47:f0:32:58:ef:7a:b6:27: ee:74:3d:39:33:b7:4b:15:61:9c:fc:29:4b:e2:d1:df:da:53: 50:b1:40:4a:88:36:ec:b7:7d:6b:7f:a9:97:3a:cc:26:a1:1d: 2a:2d:fa:6c:c6:70:5f:2a:0c:35:9e:b8:7b:27:7f:b9:08:0f: 76:6f:18:b4:ab:06:71:60:6d:c9:16:9c:b8:6b:e9:9a:97:10: 9d:2d:33:5f:10:a9:48:db:bf:b5:11:31:a0:b9:5d:78:60:81: 5d:23:ca:0f:e6:97:90:bf:6b:05:1c:db:b7:28:8b:d9:ad:6d: 20:3c:fe:1d:0e:80:6d:73:e4:0b:a1:e6:50:cf:88:21:dd:a4: ef:9a:f7:01:e4:58:0f:a9:b4:ad:44:a9:70:a0:67:41:7b:50: 29:6a:99:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzi6mhc4d/PQ7YsJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIxNjIxNTkzOFoXDTI2MDUxNzIwNTkzOFowLzEtMCsGA1UEAxMk ODg0YTMyODgtMjI4OS00MzFhLTgyYWYtNThiODY2YzgwZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p0kW+iE4vPbZ3MMRJa9N4gB+sdRo8/yZKTL Fex7SnTHfr2KIaLnyjyxXvXwZmZV+Hrp0grlp2SMHGMK4UA++bTvFdHSYcyInHsD GBwIzlBXqEMqlKvK/kvaDK0j2rYapAtzZPjPixchyjNPZLQ/YUoDivbg13mSDCmR w2a5SIrOSGzNctzIR7lIDXqepytxCIlderu6U+yoVY3/FQsa/ViUL1b+p///cyIX DvVEPsX+UMuErzbOCu6g7MQ6b4JcQBjYFYMP5EHioeSUJawZAE01UUosARfQh3eA 797yQ3QOYQkCByv844JOpo9kYApLIeuQm0VoQi/d3sW0PqAIfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArPFo6ythMy5kjRFTqHA8ZVKceRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzQyODA0NWUtM2M3ZS0z MGJjLTgzZDAtNWEzNWNjYzIzNWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHso1TVNrTR0dH5HmlmQ6fSPUFQV9gb0yeM1krV4ERGRmYRN8SRzDMZb LxrKK1dFftjwijPqAWohEzb6EU2domCB18j8WyvJuxszvJ7wx6juRI6A7nAR6y3/ gVGvi6WHXBznBbxH8DJY73q2J+50PTkzt0sVYZz8KUvi0d/aU1CxQEqINuy3fWt/ qZc6zCahHSot+mzGcF8qDDWeuHsnf7kID3ZvGLSrBnFgbckWnLhr6ZqXEJ0tM18Q qUjbv7URMaC5XXhggV0jyg/ml5C/awUc27coi9mtbSA8/h0OgG1z5Auh5lDPiCHd pO+a9wHkWA+ptK1EqXCgZ0F7UClqmdo= -----END CERTIFICATE-----Generated at Thu Feb 26 03:25:54 2026 by rpki-client