$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e987d8bc-f6ea-3890-995b-b491e103f7eb.roa File: e987d8bc-f6ea-3890-995b-b491e103f7eb.roa (raw, json) Hash identifier: MK44d5gNBwiDR9utKoaBsVdGHCVviUHFgJZc4AUlLWo= Subject key identifier: A0:9E:B6:6A:43:28:2B:3A:2D:EE:1F:55:5F:7F:0B:AF:51:6B:A8:25 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CB81C814EEF4B2024936A0180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e987d8bc-f6ea-3890-995b-b491e103f7eb.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 147.154.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:81:4e:ef:4b:20:24:93:6a:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=434b4b19-8e7d-416f-b7a8-c8aba923b59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:bc:5f:ba:fc:c4:3a:2a:bc:c1:99:dc:11: 01:e2:18:56:20:c3:c4:1d:bd:71:61:1f:24:ce:79: b4:11:a1:de:47:6e:7c:b0:fc:0a:98:fa:4c:fa:25: de:d4:cf:6f:61:43:c8:a7:c7:7e:88:72:67:b3:f3: 1c:b1:0d:ed:97:fa:f7:16:cf:7f:8c:9c:6e:7c:e4: 12:a4:bb:0d:e7:55:d2:97:b4:1d:16:3a:65:b7:87: 8f:75:eb:54:5e:98:b6:cd:ce:92:88:70:a6:79:e1: 6c:54:5a:ea:66:38:91:04:d9:26:07:93:3c:60:b5: 3c:8f:0e:8f:73:b9:d3:c7:6a:98:54:8f:a5:79:51: e7:c6:ea:c3:a4:ec:28:24:dd:01:9c:6b:b2:04:1d: 99:32:20:94:a6:4a:f8:54:40:18:de:c2:75:f5:d5: e1:33:83:f0:31:b0:ac:64:08:6c:14:31:90:11:52: ac:2d:f0:a6:6d:32:ea:52:81:03:5f:01:ac:c4:38: 14:d8:48:1e:98:46:68:ea:b1:9a:34:34:a7:4e:10: d2:3b:47:fa:80:46:11:4f:ad:db:ff:59:cf:d6:33: 3c:89:a8:6a:a2:d5:00:84:4c:5a:2c:6f:6d:f5:86: 75:c9:74:de:f5:ce:b9:00:21:57:86:f4:99:a4:64: b1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9E:B6:6A:43:28:2B:3A:2D:EE:1F:55:5F:7F:0B:AF:51:6B:A8:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e987d8bc-f6ea-3890-995b-b491e103f7eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:fe:6f:6a:70:dd:00:77:f2:4a:d5:a4:17:c7:07:c4:28:8a: f8:48:6e:8f:a7:dd:5d:2e:70:25:aa:73:d9:69:88:7f:fa:f7: f7:2d:8e:df:d2:1e:80:08:84:02:44:b1:b9:bd:0a:76:3b:b8: c6:4b:90:a6:20:ff:52:27:fc:dd:60:58:94:a1:05:dc:c4:5e: a6:d7:ad:bf:90:17:52:91:f8:60:43:8f:49:ff:90:45:e9:6c: 98:cd:9d:a1:ea:0b:68:ee:f6:cf:ac:d8:81:51:07:3d:19:f5: ed:7e:ac:98:b9:20:8d:3f:7a:b5:70:89:9b:32:1e:db:6a:96: 3b:fa:bb:c8:8f:78:fc:2d:71:77:30:7f:5f:71:18:35:34:83: f5:28:83:7b:98:bb:07:ce:4b:36:37:b3:22:dd:c7:06:b3:16: 6a:35:84:ce:9a:dd:5d:2b:02:71:e9:78:fe:2c:f4:30:63:e8: d8:64:69:35:76:72:aa:61:38:3e:2e:de:e5:3f:ec:24:28:b0: da:a0:06:10:09:f2:b6:f7:e7:2e:9f:2d:24:12:22:74:2a:eb: 4b:14:61:c2:00:bb:23:66:fa:24:b3:0b:c3:86:c8:0a:f9:65: de:87:6f:91:4b:ac:6e:a8:93:fe:6f:39:85:e6:4e:17:49:79: bd:76:89:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIFO70sgJJNqAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk NDM0YjRiMTktOGU3ZC00MTZmLWI3YTgtYzhhYmE5MjNiNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN28X7r8xDoqvMGZ3BEB4hhWIMPEHb1xYR8k znm0EaHeR258sPwKmPpM+iXe1M9vYUPIp8d+iHJns/McsQ3tl/r3Fs9/jJxufOQS pLsN51XSl7QdFjplt4ePdetUXpi2zc6SiHCmeeFsVFrqZjiRBNkmB5M8YLU8jw6P c7nTx2qYVI+leVHnxurDpOwoJN0BnGuyBB2ZMiCUpkr4VEAY3sJ19dXhM4PwMbCs ZAhsFDGQEVKsLfCmbTLqUoEDXwGsxDgU2EgemEZo6rGaNDSnThDSO0f6gEYRT63b /1nP1jM8iahqotUAhExaLG9t9YZ1yXTe9c65ACFXhvSZpGSxzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCetmpDKCs6Le4fVV9/C69Ra6glMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTk4N2Q4YmMtZjZlYS0z ODkwLTk5NWItYjQ5MWUxMDNmN2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk5pQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH+b2pw3QB38krVpBfHB8QoivhIbo+n3V0ucCWqc9lpiH/69/ctjt/S HoAIhAJEsbm9CnY7uMZLkKYg/1In/N1gWJShBdzEXqbXrb+QF1KR+GBDj0n/kEXp bJjNnaHqC2ju9s+s2IFRBz0Z9e1+rJi5II0/erVwiZsyHttqljv6u8iPePwtcXcw f19xGDU0g/Uog3uYuwfOSzY3syLdxwazFmo1hM6a3V0rAnHpeP4s9DBj6NhkaTV2 cqphOD4u3uU/7CQosNqgBhAJ8rb35y6fLSQSInQq60sUYcIAuyNm+iSzC8OGyAr5 Zd6Hb5FLrG6ok/5vOYXmThdJeb12id0= -----END CERTIFICATE-----Generated at Thu Feb 26 05:06:59 2026 by rpki-client