$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7ba299b-2f9d-3b01-9f14-af5fa10190a1.roa File: e7ba299b-2f9d-3b01-9f14-af5fa10190a1.roa (raw, json) Hash identifier: I2bnaAZtLsSmJl5FR2bvtV10YnPSYnakqXewArZSnG8= Subject key identifier: 3E:EB:F1:BC:AC:80:88:D2:3B:CF:D1:47:3C:15:32:13:36:2A:AF:28 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1D52A090C3345394D1500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7ba299b-2f9d-3b01-9f14-af5fa10190a1.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 144.33.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:d5:2a:09:0c:33:45:39:4d:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=c879e6f1-bb00-4aee-bb29-4064c555a196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:8b:14:23:ca:77:69:a9:0f:a8:80:59:6f: cc:b5:1d:00:a5:e3:ab:43:e6:f9:b6:29:ee:fe:03: 61:ab:c3:74:4b:99:ae:88:f7:b6:68:ea:2b:ec:71: 9c:bf:23:47:d3:5b:28:28:57:68:20:a9:8b:ae:b0: 3b:ab:18:d6:8d:cf:e2:fb:ae:da:53:2c:b5:84:0c: 6c:01:a4:00:58:41:0d:d4:13:6d:13:73:69:85:db: 4a:f2:5d:52:3e:df:db:8f:af:bb:be:c5:ac:d8:8f: 31:73:f4:b7:c1:17:de:70:7f:4f:e6:ed:24:7f:00: 11:60:88:1c:fa:5e:e8:7c:54:08:8a:3e:dd:1e:ff: fb:ad:37:02:02:79:50:d7:2e:91:07:4d:3b:57:2c: bc:5a:28:70:70:92:d9:3b:b0:46:84:c9:e9:93:bb: 4a:11:c3:e8:0a:b5:59:98:2f:9c:11:ce:0a:be:86: 82:78:90:80:1d:b7:a3:a0:20:74:f6:a1:b8:e0:8d: 4a:62:9f:2a:db:31:ca:6f:aa:bd:82:8f:e4:fa:11: ae:8d:2f:b1:67:b6:c1:41:6f:fd:9d:97:27:59:e8: 26:65:c4:eb:b8:95:a9:1b:2a:6d:b5:4c:5a:16:70: e7:f8:8a:4b:d9:98:c9:ce:5f:c0:48:66:25:e0:b4: b3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EB:F1:BC:AC:80:88:D2:3B:CF:D1:47:3C:15:32:13:36:2A:AF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7ba299b-2f9d-3b01-9f14-af5fa10190a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 144.33.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:8f:2d:66:1b:e3:c0:c5:24:d9:34:23:8b:0b:d3:92:82:da: 47:7d:c2:b6:a6:eb:0d:e0:80:54:a9:f2:57:88:5c:32:71:77: 97:10:03:70:ea:dc:31:f2:1f:53:4c:4d:33:9d:c2:93:3e:d1: 63:6f:6e:14:2f:1e:58:f5:cd:62:75:ae:0b:45:99:35:a4:e6: 88:b9:df:1d:31:90:3b:a8:f0:27:a3:19:45:e8:54:51:00:0f: f5:4d:ef:06:15:e1:c9:59:e1:1a:e7:e7:b4:22:bb:2b:83:79: 5b:82:0f:91:7d:b1:d2:70:e2:95:38:6f:43:2d:d9:33:08:74: 40:5b:d0:95:04:06:bb:35:a6:9b:34:8b:62:fd:06:58:ac:eb: 77:7d:25:19:71:b8:d8:f3:0a:47:ca:8b:13:63:a4:99:34:02: d8:f1:cd:3c:e0:bf:9f:fa:fc:92:69:63:fe:06:2f:76:44:03: 1a:19:77:23:69:ac:80:2b:d9:9f:88:f6:76:6b:45:f1:f5:f9: 8b:a4:89:0a:8b:f5:ec:fe:98:b1:3e:43:74:5e:de:c7:5f:d4: 22:06:3e:4f:0f:06:b5:e7:68:30:8c:ec:d8:e8:4d:5a:65:26: dd:6f:0c:7d:e2:38:80:51:0b:f0:75:41:74:3d:40:93:e5:b9: 9e:2e:ea:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8dUqCQwzRTlNFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk Yzg3OWU2ZjEtYmIwMC00YWVlLWJiMjktNDA2NGM1NTVhMTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK6LFCPKd2mpD6iAWW/MtR0ApeOrQ+b5tinu /gNhq8N0S5muiPe2aOor7HGcvyNH01soKFdoIKmLrrA7qxjWjc/i+67aUyy1hAxs AaQAWEEN1BNtE3NphdtK8l1SPt/bj6+7vsWs2I8xc/S3wRfecH9P5u0kfwARYIgc +l7ofFQIij7dHv/7rTcCAnlQ1y6RB007Vyy8WihwcJLZO7BGhMnpk7tKEcPoCrVZ mC+cEc4KvoaCeJCAHbejoCB09qG44I1KYp8q2zHKb6q9go/k+hGujS+xZ7bBQW/9 nZcnWegmZcTruJWpGypttUxaFnDn+IpL2ZjJzl/ASGYl4LSzKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7r8bysgIjSO8/RRzwVMhM2Kq8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTdiYTI5OWItMmY5ZC0z YjAxLTlmMTQtYWY1ZmExMDE5MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkCEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGPLWYb48DFJNk0I4sL05KC2kd9wram6w3ggFSp8leIXDJxd5cQA3Dq 3DHyH1NMTTOdwpM+0WNvbhQvHlj1zWJ1rgtFmTWk5oi53x0xkDuo8CejGUXoVFEA D/VN7wYV4clZ4Rrn57QiuyuDeVuCD5F9sdJw4pU4b0Mt2TMIdEBb0JUEBrs1pps0 i2L9Blis63d9JRlxuNjzCkfKixNjpJk0AtjxzTzgv5/6/JJpY/4GL3ZEAxoZdyNp rIAr2Z+I9nZrRfH1+YukiQqL9ez+mLE+Q3Re3sdf1CIGPk8PBrXnaDCM7NjoTVpl Jt1vDH3iOIBRC/B1QXQ9QJPluZ4u6kI= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:47 2026 by rpki-client