$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ecd2aa38-ced5-33f7-912c-b1717d9e913e.roa File: ecd2aa38-ced5-33f7-912c-b1717d9e913e.roa (raw, json) Hash identifier: 5vk8/KYbUr0QM6/iTQYLmPv/LsnO5l9mXmwuxZInC0k= Subject key identifier: 4C:7E:B6:4B:EB:34:CC:AA:38:2C:EC:41:20:16:62:1B:92:A4:8D:09 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC69E5DA10CF20ABB88D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ecd2aa38-ced5-33f7-912c-b1717d9e913e.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 207.127.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:69:e5:da:10:cf:20:ab:b8:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=6f72c7e6-f662-422f-b158-1c74987a1e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:a3:27:2c:ef:61:bd:b7:88:51:85:61:69: c1:68:0c:42:a5:dd:cf:7c:b7:ac:c8:72:a3:78:93: 24:f1:9b:28:1c:4f:a0:cb:50:57:a6:2e:68:28:13: af:65:2e:62:6b:00:21:f0:b7:4d:5a:38:03:99:6f: 16:cb:7c:ab:8d:ca:d3:6b:98:e8:bb:85:e3:35:4c: 6d:db:43:e1:a0:03:0a:43:dd:a9:01:db:1b:dd:27: 82:eb:bd:56:1c:34:82:0a:57:89:b9:43:52:f8:9a: 5a:7c:eb:05:19:cd:fe:eb:9e:72:d4:42:6f:e6:d9: 2b:79:87:b1:df:40:1f:52:81:7e:30:e3:5d:33:25: 5b:6f:6f:0b:17:c8:e5:da:eb:3a:b0:30:b2:e8:e2: d4:8e:6e:97:82:a1:71:41:4c:c7:2c:ea:54:c9:78: be:36:62:28:92:c1:cf:8e:b2:6b:3c:00:2b:9e:3e: 42:cf:8c:6e:60:47:80:62:15:c2:e6:a6:b9:b6:d8: 2c:3a:40:d4:bd:35:be:42:b5:28:2a:9e:9d:60:83: b6:06:93:33:ea:e6:39:3c:2d:b3:34:20:d1:bb:0a: 36:26:62:a3:74:86:b4:88:3d:72:55:f5:11:a2:c5: 2e:17:d9:0d:86:cb:64:2e:da:6b:56:86:90:92:f3: d8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7E:B6:4B:EB:34:CC:AA:38:2C:EC:41:20:16:62:1B:92:A4:8D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ecd2aa38-ced5-33f7-912c-b1717d9e913e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.127.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:47:22:ee:89:9e:b1:0b:12:8f:4a:02:20:65:43:63:c3:69: 80:09:eb:52:7b:da:48:dc:6e:19:a7:ce:82:3c:52:96:43:26: 96:a4:61:a6:bf:2e:f0:89:07:22:e3:fe:32:f5:1c:6c:78:18: 1e:59:77:3c:8e:2f:c6:c5:49:72:a0:12:07:fb:83:02:a2:48: 1f:de:6a:62:84:e5:fa:46:a7:56:42:73:f6:1f:97:74:50:b2: 43:44:bf:0b:16:7c:5b:dc:c8:87:dd:56:e2:16:cb:5b:75:6a: 3a:31:67:5d:85:f9:2b:d2:be:55:e4:a2:fb:ec:ee:8b:09:64: 6e:6e:70:65:e6:78:29:ff:45:2a:6c:4e:77:ae:2f:92:eb:ed: 0e:71:6e:75:04:12:fc:05:4b:e1:14:9f:96:23:e2:2f:6c:17: 7a:e7:4b:3b:32:43:d2:f4:b8:f8:40:0f:f9:7d:2d:d3:02:38: 3b:fb:eb:9f:6d:1d:a1:d5:ad:42:ef:c3:2a:3c:6f:c3:fb:69: d9:cd:e2:ac:13:c3:72:24:aa:17:a9:46:ee:37:99:54:4f:85: e5:db:45:d2:18:14:39:8c:ef:eb:38:1c:bb:e6:e0:43:21:6a: f9:8c:c3:30:04:79:90:d6:f7:e2:f9:ed:d2:bd:a7:49:4d:c5: 19:d4:7a:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvGnl2hDPIKu4jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NmY3MmM3ZTYtZjY2Mi00MjJmLWIxNTgtMWM3NDk4N2ExZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngqjJyzvYb23iFGFYWnBaAxCpd3PfLesyHKj eJMk8ZsoHE+gy1BXpi5oKBOvZS5iawAh8LdNWjgDmW8Wy3yrjcrTa5jou4XjNUxt 20PhoAMKQ92pAdsb3SeC671WHDSCCleJuUNS+JpafOsFGc3+655y1EJv5tkreYex 30AfUoF+MONdMyVbb28LF8jl2us6sDCy6OLUjm6XgqFxQUzHLOpUyXi+NmIoksHP jrJrPAArnj5Cz4xuYEeAYhXC5qa5ttgsOkDUvTW+QrUoKp6dYIO2BpMz6uY5PC2z NCDRuwo2JmKjdIa0iD1yVfURosUuF9kNhstkLtprVoaQkvPY5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx+tkvrNMyqOCzsQSAWYhuSpI0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWNkMmFhMzgtY2VkNS0z M2Y3LTkxMmMtYjE3MTdkOWU5MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz398MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFHIu6JnrELEo9KAiBlQ2PDaYAJ61J72kjcbhmnzoI8UpZDJpakYaa/ LvCJByLj/jL1HGx4GB5ZdzyOL8bFSXKgEgf7gwKiSB/eamKE5fpGp1ZCc/Yfl3RQ skNEvwsWfFvcyIfdVuIWy1t1ajoxZ12F+SvSvlXkovvs7osJZG5ucGXmeCn/RSps TneuL5Lr7Q5xbnUEEvwFS+EUn5Yj4i9sF3rnSzsyQ9L0uPhAD/l9LdMCODv7659t HaHVrULvwyo8b8P7adnN4qwTw3IkqhepRu43mVRPheXbRdIYFDmM7+s4HLvm4EMh avmMwzAEeZDW9+L57dK9p0lNxRnUemM= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:18 2026 by rpki-client