$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa File: cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa (raw, json) Hash identifier: 5kO+Nc4pi3OHX2Z1cMVncqZK+D4jne/hFfqTxBOnbNQ= Subject key identifier: D7:CB:40:5D:7E:F3:C6:FA:EB:26:7A:3B:DB:32:60:92:97:23:2B:84 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA5F74AD0960A8A1F1FE52900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 192.29.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:4a:d0:96:0a:8a:1f:1f:e5:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=4b03140c-80c6-49dc-a834-f60a123d5eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d9:ec:b8:2f:c0:c8:0e:1c:e8:89:5e:47:92: 8f:fc:09:df:75:79:66:24:39:ab:08:9b:46:3a:9e: fe:5c:ed:a8:4b:62:00:2f:d2:f8:0c:4d:7e:ac:c5: 8c:d5:19:ed:81:ae:36:8d:ae:bb:16:f9:44:a5:be: c7:1b:42:e0:7f:f8:79:81:2d:2e:c8:1c:19:b3:76: 96:68:db:f3:be:08:45:e0:6a:50:f7:ad:3e:1d:df: 2a:f9:c7:3e:71:bb:6f:85:07:15:97:bb:29:9c:45: bc:ea:29:33:b0:a6:60:cc:ec:fa:18:77:8e:d5:ac: 23:c9:d1:0b:83:59:2c:88:1b:db:b7:cb:1d:95:8a: a6:d5:ea:44:6a:28:10:ca:d9:b9:00:9b:58:5e:4d: fa:a9:00:25:85:29:c5:1d:f6:3e:94:20:23:08:92: 77:7e:77:b5:f9:f3:81:0a:d8:ef:63:58:a6:bc:17: 37:4f:eb:7e:c9:3a:4b:bb:9d:bc:60:3b:62:44:f5: 58:8c:06:7c:3c:f7:8e:fa:d9:5d:6e:cc:8f:c0:a3: 29:91:98:30:10:ee:1c:2c:4b:d5:0d:fc:81:f1:30: a4:a2:f9:16:e0:ca:fe:64:7f:f2:dc:ee:6e:45:17: 63:8b:b8:75:2d:09:44:ff:2d:21:b2:ac:18:0f:b0: 6f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CB:40:5D:7E:F3:C6:FA:EB:26:7A:3B:DB:32:60:92:97:23:2B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:be:af:f8:70:41:1b:67:ea:6e:bc:03:c6:39:20:27:40:c5: f8:7a:48:e8:fe:84:16:d4:ff:0b:2c:bb:e4:6c:6f:27:14:db: 9e:d3:b9:73:9b:59:41:db:46:61:04:7e:aa:c8:61:e0:87:b4: 86:4c:93:d0:63:eb:29:be:ea:a8:72:61:79:97:fe:bd:6a:5c: c4:64:11:8e:0b:df:fa:be:f8:25:78:82:79:d8:ca:4c:48:fb: 67:a9:a4:aa:a3:b4:bc:68:49:59:63:86:c9:75:0f:d7:a6:33: 23:d4:b6:54:c2:44:c4:78:26:d4:5f:e9:fa:39:a6:c0:86:9b: d9:7b:67:b8:a6:17:15:02:46:11:76:cd:63:f9:b3:29:31:33: 5d:d3:2b:86:8c:e9:55:9b:4b:63:eb:74:cf:84:8b:02:7c:c1: a1:4b:f4:a3:7d:a6:4e:2e:2c:f9:dd:9c:09:a1:81:15:b7:2b: a3:44:fb:b9:0e:c6:aa:af:e5:d0:a6:b9:b6:b7:49:9d:13:26: c5:f8:a4:65:a3:f3:c8:bd:c9:a1:ce:40:1c:b9:9b:07:a6:05: f9:c0:f9:76:80:ff:97:0e:ca:92:1e:42:95:20:d4:d5:ae:32: de:ae:ed:c4:4d:b2:bc:45:78:2f:c1:bf:e9:d7:cd:51:38:cb: 3f:29:a8:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90rQlgqKHx/lKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NGIwMzE0MGMtODBjNi00OWRjLWE4MzQtZjYwYTEyM2Q1ZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdnsuC/AyA4c6IleR5KP/AnfdXlmJDmrCJtG Op7+XO2oS2IAL9L4DE1+rMWM1Rntga42ja67FvlEpb7HG0Lgf/h5gS0uyBwZs3aW aNvzvghF4GpQ960+Hd8q+cc+cbtvhQcVl7spnEW86ikzsKZgzOz6GHeO1awjydEL g1ksiBvbt8sdlYqm1epEaigQytm5AJtYXk36qQAlhSnFHfY+lCAjCJJ3fne1+fOB CtjvY1imvBc3T+t+yTpLu528YDtiRPVYjAZ8PPeO+tldbsyPwKMpkZgwEO4cLEvV DfyB8TCkovkW4Mr+ZH/y3O5uRRdji7h1LQlE/y0hsqwYD7Bv5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfLQF1+88b66yZ6O9syYJKXIyuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2VhNDcxZDQtMmU2Zi0z MzcxLWEwYjktNzdiMGJhMDM4NzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK+r/hwQRtn6m68A8Y5ICdAxfh6SOj+hBbU/wssu+RsbycU257TuXOb WUHbRmEEfqrIYeCHtIZMk9Bj6ym+6qhyYXmX/r1qXMRkEY4L3/q++CV4gnnYykxI +2eppKqjtLxoSVljhsl1D9emMyPUtlTCRMR4JtRf6fo5psCGm9l7Z7imFxUCRhF2 zWP5sykxM13TK4aM6VWbS2PrdM+EiwJ8waFL9KN9pk4uLPndnAmhgRW3K6NE+7kO xqqv5dCmuba3SZ0TJsX4pGWj88i9yaHOQBy5mwemBfnA+XaA/5cOypIeQpUg1NWu Mt6u7cRNsrxFeC/Bv+nXzVE4yz8pqMw= -----END CERTIFICATE-----Generated at Thu Feb 26 03:28:05 2026 by rpki-client