$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d96495ac-2785-3fee-9975-0548fe67f85a.roa File: d96495ac-2785-3fee-9975-0548fe67f85a.roa (raw, json) Hash identifier: 7XpiS3o51C051xMLyjqw1AF9IjtzkF78D0D5ZMBSCrw= Subject key identifier: 63:D1:AC:29:BA:61:12:04:12:39:2C:CB:E3:B6:17:90:E7:58:D1:22 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA2702F83D338D2EC41B3982 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d96495ac-2785-3fee-9975-0548fe67f85a.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 204.216.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:02:f8:3d:33:8d:2e:c4:1b:39:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=a5fd965b-81a6-400e-8dc8-639c9a5b852a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7c:51:a8:a7:f4:24:5b:02:5d:85:ce:2f:2b: c6:88:bd:bf:ed:e4:32:1c:ee:08:54:75:f7:fb:e0: 0f:71:22:46:31:c3:97:de:cd:66:bb:d8:0b:33:00: 61:b8:b5:4c:5f:55:26:98:4b:58:86:0c:6e:89:c5: 11:e3:cc:6d:5c:b5:a3:34:22:50:fe:f4:91:5b:30: c8:f9:be:46:28:cb:a2:96:7c:68:1e:9c:b5:4b:98: f1:93:f4:cd:ff:1c:0c:a1:29:40:62:22:11:21:b3: a3:c6:2c:27:a4:87:1c:1d:c3:c3:c5:35:f5:04:2c: cd:18:7e:0a:a8:7d:84:68:8f:f0:bd:b8:47:c4:49: 3d:22:bf:ae:b6:82:2e:ad:10:93:14:00:29:01:39: 69:9a:d0:cd:94:db:98:6a:80:ef:fb:26:2c:82:04: 03:17:28:e1:fe:a3:38:2d:4d:c1:bc:fc:17:d8:b6: ff:fa:46:a8:fd:f3:a9:f3:df:a9:93:05:54:31:6d: f6:70:dd:04:be:3f:59:0f:bc:12:fa:7d:27:42:54: 5a:d2:b0:70:f6:67:e4:d4:12:57:c6:c3:0e:2c:42: 52:9f:74:0f:30:c5:4b:a6:00:4f:8b:c9:aa:ae:23: ad:4a:5c:1d:7d:38:24:f1:bc:3c:b2:07:ee:51:56: 50:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D1:AC:29:BA:61:12:04:12:39:2C:CB:E3:B6:17:90:E7:58:D1:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d96495ac-2785-3fee-9975-0548fe67f85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:61:dc:c0:5f:b5:81:67:9f:e0:06:86:89:da:a7:4a:47:de: bb:32:e4:8f:7b:a8:4e:3a:e9:ab:bc:45:80:b1:ae:b9:f6:c3: 24:bb:ed:3d:1c:4b:80:77:14:13:9b:30:ff:cb:5b:40:84:9a: d2:2b:21:2d:79:ca:aa:2e:08:64:4f:be:0e:3f:04:03:93:12: 3c:07:6a:01:87:e2:d8:12:05:5c:85:cd:fe:ce:00:7e:36:d8: ad:2c:c5:4a:75:80:4d:b3:06:0f:ee:5a:76:00:8b:58:63:d1: 84:22:e7:52:6d:f5:30:ff:c5:54:fd:71:af:39:66:df:71:30: cc:98:bb:94:e2:dd:0e:50:aa:98:13:88:65:5f:59:8c:ee:31: 04:45:3d:1d:8f:e2:08:4e:c0:17:de:7f:60:54:bd:e7:8e:55: a7:88:a6:31:ae:0d:20:91:af:d7:eb:a4:b2:f7:9d:43:c6:f5: b8:f7:94:8b:94:6c:7d:3b:4a:84:78:c3:6d:07:a7:8b:06:d7: 54:45:c6:09:4c:30:eb:55:1b:dd:61:ec:75:8c:70:16:e8:4f: 46:7f:29:c9:ea:3f:49:5a:c9:ca:01:95:13:80:4e:17:c7:da: ac:ed:9c:53:f3:4b:a1:f0:b9:92:bc:50:22:5e:33:97:0c:d7: 33:c2:3a:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwL4PTONLsQbOYIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk YTVmZDk2NWItODFhNi00MDBlLThkYzgtNjM5YzlhNWI4NTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HxRqKf0JFsCXYXOLyvGiL2/7eQyHO4IVHX3 ++APcSJGMcOX3s1mu9gLMwBhuLVMX1UmmEtYhgxuicUR48xtXLWjNCJQ/vSRWzDI +b5GKMuilnxoHpy1S5jxk/TN/xwMoSlAYiIRIbOjxiwnpIccHcPDxTX1BCzNGH4K qH2EaI/wvbhHxEk9Ir+utoIurRCTFAApATlpmtDNlNuYaoDv+yYsggQDFyjh/qM4 LU3BvPwX2Lb/+kao/fOp89+pkwVUMW32cN0Evj9ZD7wS+n0nQlRa0rBw9mfk1BJX xsMOLEJSn3QPMMVLpgBPi8mqriOtSlwdfTgk8bw8sgfuUVZQXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPRrCm6YRIEEjksy+O2F5DnWNEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDk2NDk1YWMtMjc4NS0z ZmVlLTk5NzUtMDU0OGZlNjdmODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzNhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIth3MBftYFnn+AGhonap0pH3rsy5I97qE466au8RYCxrrn2wyS77T0c S4B3FBObMP/LW0CEmtIrIS15yqouCGRPvg4/BAOTEjwHagGH4tgSBVyFzf7OAH42 2K0sxUp1gE2zBg/uWnYAi1hj0YQi51Jt9TD/xVT9ca85Zt9xMMyYu5Ti3Q5QqpgT iGVfWYzuMQRFPR2P4ghOwBfef2BUveeOVaeIpjGuDSCRr9frpLL3nUPG9bj3lIuU bH07SoR4w20Hp4sG11RFxglMMOtVG91h7HWMcBboT0Z/KcnqP0laycoBlROAThfH 2qztnFPzS6HwuZK8UCJeM5cM1zPCOto= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:03 2026 by rpki-client