$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c907e05a-55b4-3b3b-950c-96b7b4b4a3f9.roa File: c907e05a-55b4-3b3b-950c-96b7b4b4a3f9.roa (raw, json) Hash identifier: 2oPGCW2rxiDQ7VRlKablVadYnSVGWgWTREftmz5srtw= Subject key identifier: 9D:0A:D3:61:D7:87:5A:66:76:B3:BA:22:5B:A9:4D:95:2E:93:F7:54 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5705B42E067BDECA4ABC40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c907e05a-55b4-3b3b-950c-96b7b4b4a3f9.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 159.112.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:05:b4:2e:06:7b:de:ca:4a:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=645d8fe1-ae67-4740-9839-d64e427db9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9c:0b:f3:53:3e:cd:71:d3:3c:c3:24:c9:83: 1e:d1:25:57:e1:e3:cb:0a:27:f2:27:46:02:92:a6: a8:d3:20:bb:04:1a:e4:f0:9c:2c:c1:7d:23:18:f7: 4e:ff:b1:a8:12:39:28:d7:2f:22:ca:74:e3:9d:82: 81:a5:8b:1d:e9:74:f1:c7:4b:d1:a4:80:37:e6:19: 73:74:35:a1:69:7e:c0:89:72:bf:d3:5d:6a:60:a9: 4e:7a:0d:5d:8a:57:d6:9c:14:13:d6:4d:6b:04:8f: d0:29:c8:5f:a2:97:86:0b:f3:86:30:dc:34:78:4a: a0:78:06:09:7e:70:f7:c9:f6:e2:01:77:26:65:ca: 14:3a:1e:d6:23:4a:c0:73:48:e1:cd:ac:c2:11:9d: 4c:1d:60:5f:a0:0d:90:97:81:6f:a7:93:b0:7a:84: 53:9a:05:3e:c2:85:fb:c3:19:11:2c:13:33:97:23: 9a:d9:56:1a:cf:f5:26:4c:b1:83:58:8f:2d:cf:93: 2d:a5:d7:75:a1:a6:15:d2:20:f8:c5:80:d7:61:5d: 82:17:7a:39:9d:8d:70:8b:f4:2f:82:fd:9f:4b:f5: dc:c3:78:0e:41:ef:81:7f:d3:b6:c1:75:b1:40:53: 10:a6:ab:79:1f:ec:12:57:56:89:55:1b:f9:47:f0: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0A:D3:61:D7:87:5A:66:76:B3:BA:22:5B:A9:4D:95:2E:93:F7:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c907e05a-55b4-3b3b-950c-96b7b4b4a3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.112.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:90:a9:1c:b3:4c:55:5e:27:39:b4:8b:97:56:61:f3:58:2a: 46:c6:8a:f9:b0:61:a1:d0:dc:d0:1c:e3:53:86:4b:3c:4a:58: 79:2f:aa:f0:35:e8:ab:cc:72:68:f6:7b:b0:2f:86:0c:6c:10: c2:a3:0e:f2:2a:3e:f0:66:e9:c0:bd:8e:77:b3:21:b6:93:ec: 5c:3b:cf:2f:8c:ae:3b:c2:f8:d9:75:15:57:d7:51:18:33:e5: 23:5f:c7:9f:54:3a:ad:67:0a:21:b2:ec:c6:69:a3:96:f9:d3: e6:95:18:c4:3e:36:c2:89:ca:70:24:69:e4:47:78:6c:61:df: 44:44:0e:1a:80:13:43:5c:ce:f4:15:fe:ba:b8:74:0f:05:6d: d3:a1:23:ae:f1:7d:85:a9:77:48:fe:f2:3c:2d:32:b8:d9:d5: a3:4e:36:f3:5c:3e:48:00:ef:16:08:5a:bf:5c:0a:f4:87:56: 25:74:5b:21:24:1c:ba:1e:e8:22:cb:88:07:f0:2a:f9:c0:fd: 40:19:7b:33:7a:6c:46:eb:df:00:a1:68:e7:d8:01:b4:93:0c: d1:ba:b8:a6:46:b4:0d:29:c2:f0:4c:1e:80:a8:ba:37:0f:98: 7e:29:fe:de:5a:ad:be:ec:20:2a:e1:00:22:9d:bf:87:08:3a: df:73:1d:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVwW0LgZ73spKvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NjQ1ZDhmZTEtYWU2Ny00NzQwLTk4MzktZDY0ZTQyN2RiOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpwL81M+zXHTPMMkyYMe0SVX4ePLCifyJ0YC kqao0yC7BBrk8JwswX0jGPdO/7GoEjko1y8iynTjnYKBpYsd6XTxx0vRpIA35hlz dDWhaX7AiXK/011qYKlOeg1dilfWnBQT1k1rBI/QKchfopeGC/OGMNw0eEqgeAYJ fnD3yfbiAXcmZcoUOh7WI0rAc0jhzazCEZ1MHWBfoA2Ql4Fvp5OweoRTmgU+woX7 wxkRLBMzlyOa2VYaz/UmTLGDWI8tz5Mtpdd1oaYV0iD4xYDXYV2CF3o5nY1wi/Qv gv2fS/Xcw3gOQe+Bf9O2wXWxQFMQpqt5H+wSV1aJVRv5R/AJrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0K02HXh1pmdrO6IlupTZUuk/dUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzkwN2UwNWEtNTViNC0z YjNiLTk1MGMtOTZiN2I0YjRhM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn3CwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSQqRyzTFVeJzm0i5dWYfNYKkbGivmwYaHQ3NAc41OGSzxKWHkvqvA1 6KvMcmj2e7AvhgxsEMKjDvIqPvBm6cC9jnezIbaT7Fw7zy+MrjvC+Nl1FVfXURgz 5SNfx59UOq1nCiGy7MZpo5b50+aVGMQ+NsKJynAkaeRHeGxh30REDhqAE0NczvQV /rq4dA8FbdOhI67xfYWpd0j+8jwtMrjZ1aNONvNcPkgA7xYIWr9cCvSHViV0WyEk HLoe6CLLiAfwKvnA/UAZezN6bEbr3wChaOfYAbSTDNG6uKZGtA0pwvBMHoCoujcP mH4p/t5arb7sICrhACKdv4cIOt9zHYE= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:58 2026 by rpki-client