$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0dc5d65-c8a1-3cd3-b93f-e3f4e14586bc.roa File: d0dc5d65-c8a1-3cd3-b93f-e3f4e14586bc.roa (raw, json) Hash identifier: uB3ynaRuoKJ1ASWrgKXvoc/HPKqVOyq3wcM/h9im/QY= Subject key identifier: F2:E2:D0:FA:78:1C:E3:5B:48:85:23:65:4E:08:97:6C:70:6B:9C:E4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA2705E8B515B51E040E3080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0dc5d65-c8a1-3cd3-b93f-e3f4e14586bc.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 152.70.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:05:e8:b5:15:b5:1e:04:0e:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=29738507-c811-44af-ac9c-bffcf05b5bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:e0:1c:77:00:34:a5:97:0d:24:dc:f0:da: ae:35:0b:e3:4f:bb:8b:85:f0:13:bb:9e:61:04:af: 0d:29:1b:f6:fa:9a:33:a3:98:51:a9:f8:98:90:bb: 78:92:c0:43:2a:b5:02:d8:13:10:89:44:50:6f:e2: ee:50:6d:0b:29:76:e6:1d:d5:53:2b:4f:46:ae:b9: 29:ba:2f:3f:06:11:18:ac:66:61:59:df:f2:77:81: d2:77:20:b7:ad:d8:5f:f6:6e:05:88:79:c5:ac:3e: 50:7e:1a:31:9b:22:ab:4c:d1:88:a0:69:bd:c3:23: 83:51:3c:dc:01:58:65:23:f6:12:56:a3:c3:35:4d: 68:b8:e2:65:e4:11:e1:5f:14:11:81:d4:1b:b1:c1: a2:a0:e7:b3:69:25:ef:10:3e:e6:d1:e3:e0:f8:37: ce:f9:6e:c8:9d:c9:60:b0:fe:d3:a6:55:1f:75:9d: 88:f6:50:72:59:b1:3a:47:15:e7:dd:bf:88:b3:3f: 7c:d8:c9:7e:4e:31:2b:f1:e6:e7:83:75:ed:8d:bc: fa:a1:69:03:b3:76:f9:29:ec:a8:49:79:b7:ea:f8: 57:87:45:9b:62:55:41:68:f5:f7:e3:f6:f6:b9:01: f8:5a:31:6a:02:d5:84:59:5a:a0:2e:2b:d3:5b:fc: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E2:D0:FA:78:1C:E3:5B:48:85:23:65:4E:08:97:6C:70:6B:9C:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0dc5d65-c8a1-3cd3-b93f-e3f4e14586bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f0:2b:d5:41:3a:48:8d:ed:15:6e:bb:14:2f:86:d6:21:26: 69:1f:91:65:b2:40:19:10:b0:4c:d7:40:56:25:d0:bf:74:d3: 6d:02:ab:de:5b:ea:93:61:4a:b3:2a:94:ed:ee:53:ed:bb:a4: 36:3c:bb:dc:fa:25:a5:22:2d:cb:70:af:b9:86:89:e3:51:7f: 23:61:37:39:49:54:58:41:99:6c:b0:d8:d8:f9:7b:ef:e8:b3: bc:d4:c6:9f:87:25:7f:2f:01:e0:5b:71:f1:df:43:03:ec:1d: 07:06:7d:26:af:2f:5c:63:3c:62:b0:03:c9:03:c0:41:cb:b4: f1:21:74:58:14:84:75:8b:17:c5:88:b9:75:a0:37:b6:6f:0e: 1a:b6:86:70:79:91:b0:10:77:2c:cf:52:2e:20:9b:83:1e:64: 40:28:0a:3f:03:44:9f:ba:99:13:71:2f:c6:42:04:f6:37:e5: b4:1a:4a:ad:5a:e7:dc:da:3f:53:40:69:90:81:4f:be:fc:6b: 3f:88:6e:a2:34:4f:f0:27:82:63:bb:d9:55:27:ae:1b:d4:a9: 6d:22:95:53:ce:b0:3e:a1:eb:72:5a:39:fc:f1:29:ac:4e:e4: e3:e9:33:20:4a:43:8d:a6:50:9d:f3:b8:59:c1:b4:5e:53:53: b1:db:14:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwXotRW1HgQOMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk Mjk3Mzg1MDctYzgxMS00NGFmLWFjOWMtYmZmY2YwNWI1YmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9PgHHcANKWXDSTc8NquNQvjT7uLhfATu55h BK8NKRv2+pozo5hRqfiYkLt4ksBDKrUC2BMQiURQb+LuUG0LKXbmHdVTK09Grrkp ui8/BhEYrGZhWd/yd4HSdyC3rdhf9m4FiHnFrD5QfhoxmyKrTNGIoGm9wyODUTzc AVhlI/YSVqPDNU1ouOJl5BHhXxQRgdQbscGioOezaSXvED7m0ePg+DfO+W7Inclg sP7TplUfdZ2I9lByWbE6RxXn3b+Isz982Ml+TjEr8ebng3Xtjbz6oWkDs3b5Keyo SXm36vhXh0WbYlVBaPX34/b2uQH4WjFqAtWEWVqgLivTW/x5pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLi0Pp4HONbSIUjZU4Il2xwa5zkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDBkYzVkNjUtYzhhMS0z Y2QzLWI5M2YtZTNmNGUxNDU4NmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmEbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3wK9VBOkiN7RVuuxQvhtYhJmkfkWWyQBkQsEzXQFYl0L90020Cq95b 6pNhSrMqlO3uU+27pDY8u9z6JaUiLctwr7mGieNRfyNhNzlJVFhBmWyw2Nj5e+/o s7zUxp+HJX8vAeBbcfHfQwPsHQcGfSavL1xjPGKwA8kDwEHLtPEhdFgUhHWLF8WI uXWgN7ZvDhq2hnB5kbAQdyzPUi4gm4MeZEAoCj8DRJ+6mRNxL8ZCBPY35bQaSq1a 59zaP1NAaZCBT778az+IbqI0T/AngmO72VUnrhvUqW0ilVPOsD6h63JaOfzxKaxO 5OPpMyBKQ42mUJ3zuFnBtF5TU7HbFO4= -----END CERTIFICATE-----Generated at Thu Feb 26 03:25:58 2026 by rpki-client