$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f973e164-e8a8-3581-9d41-4b28c46c0cd2.roa File: f973e164-e8a8-3581-9d41-4b28c46c0cd2.roa (raw, json) Hash identifier: Q8tZX13ySR+pqYCwlNyf8l2Pz/K3DNXL4frfZmxsE38= Subject key identifier: D6:DD:1E:BC:E6:CE:9D:FF:B3:7C:16:96:E9:D0:FA:F3:12:F7:1B:C1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CB81C7D1086EFBAD9258FD680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f973e164-e8a8-3581-9d41-4b28c46c0cd2.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 140.204.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:7d:10:86:ef:ba:d9:25:8f:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=2cb91ae4-e257-47a3-ad4a-4769f76f5344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8c:36:00:ca:39:c8:af:67:6c:3e:f3:52:a0: 8b:a4:6e:27:36:a1:a1:0a:73:3a:b5:4f:81:a4:4a: f6:a7:a2:0c:29:47:46:b8:9c:32:66:33:9e:cb:a2: 8d:b5:4f:17:3b:91:b9:bd:71:0d:b2:26:1f:52:cd: f9:a2:7f:42:53:fc:65:22:7e:75:fd:3d:54:73:8a: 93:42:1e:2a:68:d6:eb:5c:43:d6:2d:c5:03:1f:68: 81:54:f4:da:cc:d4:20:24:a9:93:1f:eb:fd:62:90: 73:64:94:89:64:f6:dc:20:c2:3e:a1:2f:66:3e:93: e3:4b:d5:b2:c9:4c:6a:85:0a:70:e2:a8:90:a4:5c: 85:35:fc:e4:5c:d3:8f:a2:e4:72:15:77:e8:e9:4a: a9:19:f1:4d:9e:e9:4a:2d:7f:ea:36:2e:f5:0d:d0: 99:4e:cf:8c:a2:f6:5a:db:b8:c3:92:14:2a:50:30: 7c:22:3b:c5:ba:c3:6c:57:cb:c5:e2:1f:2f:cd:a3: 99:d5:d7:9c:1c:52:63:26:26:0d:b8:c8:fe:90:6f: 92:d7:2c:78:2b:85:38:ea:56:8a:48:d9:62:4f:e6: f3:65:04:e1:e6:14:95:9d:b9:98:a7:68:24:6e:68: 1b:24:62:b1:0f:c7:6b:9e:76:d2:11:dc:82:cb:12: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DD:1E:BC:E6:CE:9D:FF:B3:7C:16:96:E9:D0:FA:F3:12:F7:1B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f973e164-e8a8-3581-9d41-4b28c46c0cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e2:2c:c3:5b:5a:4e:05:44:32:33:ba:de:46:41:de:b1:6d: b6:5e:5e:b4:da:c3:41:3d:61:3f:60:f1:7c:01:9a:27:70:a9: 8f:4f:86:02:89:54:e6:72:0b:32:ce:3d:44:fc:a5:d0:90:01: 60:09:a1:b7:1c:35:db:ed:44:1f:2d:d2:90:fe:2f:ae:18:f4: 6b:28:6e:0a:5b:10:36:50:44:b5:9f:ae:08:fc:55:fe:fd:c0: 41:28:64:3c:4b:de:dd:ef:8b:6e:72:0f:9a:59:a9:56:92:7c: 6d:e5:97:eb:28:10:99:15:56:7e:aa:12:4e:59:f9:79:56:09: cc:41:3a:04:f4:08:b1:80:8a:32:61:72:0c:f7:2d:46:53:98: 08:a7:7b:2c:d9:85:c4:fc:e5:18:c6:af:b1:f7:27:83:da:44: 08:c4:08:bc:1e:57:5c:e3:bb:25:11:88:bc:c5:74:96:c8:92: d1:98:16:53:66:c4:f3:df:ba:8b:5e:bd:fa:ec:96:bb:0e:77: 5b:38:90:66:1b:e1:6c:32:4c:2a:0a:1d:b6:6f:43:53:90:d6: d9:4a:31:f2:d6:2b:76:e5:68:0f:4a:0a:db:b3:3b:c2:6a:08: ac:d0:c2:19:7c:07:55:04:52:5b:4d:d3:95:1e:f1:95:dc:03: 0d:7b:22:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HH0Qhu+62SWP1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk MmNiOTFhZTQtZTI1Ny00N2EzLWFkNGEtNDc2OWY3NmY1MzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Iw2AMo5yK9nbD7zUqCLpG4nNqGhCnM6tU+B pEr2p6IMKUdGuJwyZjOey6KNtU8XO5G5vXENsiYfUs35on9CU/xlIn51/T1Uc4qT Qh4qaNbrXEPWLcUDH2iBVPTazNQgJKmTH+v9YpBzZJSJZPbcIMI+oS9mPpPjS9Wy yUxqhQpw4qiQpFyFNfzkXNOPouRyFXfo6UqpGfFNnulKLX/qNi71DdCZTs+MovZa 27jDkhQqUDB8IjvFusNsV8vF4h8vzaOZ1decHFJjJiYNuMj+kG+S1yx4K4U46laK SNliT+bzZQTh5hSVnbmYp2gkbmgbJGKxD8drnnbSEdyCyxIi6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbdHrzmzp3/s3wWlunQ+vMS9xvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjk3M2UxNjQtZThhOC0z NTgxLTlkNDEtNGIyOGM0NmMwY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjMzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIviLMNbWk4FRDIzut5GQd6xbbZeXrTaw0E9YT9g8XwBmidwqY9PhgKJ VOZyCzLOPUT8pdCQAWAJobccNdvtRB8t0pD+L64Y9GsobgpbEDZQRLWfrgj8Vf79 wEEoZDxL3t3vi25yD5pZqVaSfG3ll+soEJkVVn6qEk5Z+XlWCcxBOgT0CLGAijJh cgz3LUZTmAineyzZhcT85RjGr7H3J4PaRAjECLweV1zjuyURiLzFdJbIktGYFlNm xPPfuotevfrslrsOd1s4kGYb4WwyTCoKHbZvQ1OQ1tlKMfLWK3blaA9KCtuzO8Jq CKzQwhl8B1UEUltN05Ue8ZXcAw17Inw= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:06 2026 by rpki-client