$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa4ead1d-eade-394d-aa3a-6009b005e52d.roa File: fa4ead1d-eade-394d-aa3a-6009b005e52d.roa (raw, json) Hash identifier: kbLx7BMyy9Ijn+71cV55GxatZxU0eEPGOfmPBkLHosk= Subject key identifier: 2A:6B:67:2D:1E:43:B9:07:6E:B3:D4:99:D6:7A:3C:15:E5:C5:2E:06 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA272D1DB068B95DCB5D49E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa4ead1d-eade-394d-aa3a-6009b005e52d.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 140.238.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:2d:1d:b0:68:b9:5d:cb:5d:49:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=8ce96cd0-90fa-4354-b1a3-800c7611a88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ab:a3:bd:b1:05:64:d3:75:24:4c:c9:26:39: 75:11:33:65:cc:1f:54:7e:d1:14:b7:8d:89:92:7d: ee:48:84:f5:0b:cc:43:b4:01:eb:43:0f:4c:95:21: a5:fe:e0:50:a6:7b:f6:02:52:c0:66:d8:8d:94:43: d1:74:f0:f6:91:f2:ff:b8:79:a0:4c:86:4e:86:07: e3:8c:96:58:81:a8:93:2d:64:4c:38:35:41:06:60: 17:7b:54:9a:62:5e:c4:f6:98:b6:bb:69:80:81:9d: a2:fa:6a:67:0f:7c:c4:da:c3:10:5c:7e:20:71:e8: 0d:f5:aa:f6:09:05:e2:3e:ed:08:35:7d:09:e2:bf: 6a:2f:a6:99:d0:ca:64:a9:58:12:91:69:9b:4f:34: fe:67:44:69:4a:4d:c8:ee:11:ae:f7:e7:67:d2:2d: 86:50:1f:de:f7:1e:fd:47:b7:13:b7:42:ca:13:7a: 2a:fc:94:5b:0b:3b:57:9d:2a:cb:d0:6e:68:7e:a7: e3:6b:16:2e:ac:f3:64:84:e5:1c:b7:28:a7:1a:cc: 33:dd:91:ae:14:af:3c:a3:ad:64:65:72:75:eb:71: df:cf:08:19:f4:10:90:93:48:0b:f4:1d:ad:05:94: db:d6:d2:95:d9:a4:84:d6:89:f8:64:09:5e:99:e9: 6f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6B:67:2D:1E:43:B9:07:6E:B3:D4:99:D6:7A:3C:15:E5:C5:2E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa4ead1d-eade-394d-aa3a-6009b005e52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:11:3a:e5:62:11:c3:71:d2:9f:06:9a:b5:7d:29:ca:ba:b9: 56:53:bf:dc:82:36:dd:37:e4:8b:bb:8a:49:79:db:9c:ef:3b: f7:43:0c:cf:11:c1:d0:bb:5c:be:ce:f4:86:dd:39:b9:ed:96: 75:e9:e1:8b:eb:aa:54:ce:1b:7d:10:08:fc:1b:2d:27:17:97: ed:01:64:3f:b6:45:72:f0:fb:8e:d1:fb:86:d8:57:4a:f4:2f: de:bd:2f:34:0f:6c:9c:10:ee:26:db:a4:5c:48:df:74:ef:2b: 39:cb:39:fa:c8:eb:0e:15:a8:1d:91:6d:80:38:81:8f:c3:f3: 14:1f:2c:29:83:05:d5:d2:70:1b:97:e1:fa:8d:63:c6:3f:01: ce:71:b1:a2:01:1c:34:55:b2:ea:a1:59:55:f5:fe:94:cf:70: e8:26:dd:e9:ae:82:07:b2:18:80:d8:a1:78:bd:1c:ba:5f:00: 42:77:44:2d:a2:ca:35:23:58:5d:33:e3:e2:79:c6:5e:8b:e1: fe:6e:95:e3:1a:77:63:aa:77:3e:f2:94:4e:c3:ba:71:23:90: 48:95:85:ba:62:8f:25:ec:4f:bd:d4:73:a9:c0:7b:08:4b:cd: be:d0:fa:f1:da:cb:64:9a:bf:2e:1d:08:c0:25:d4:9c:18:c4: e8:8d:6c:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJy0dsGi5XctdSeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk OGNlOTZjZDAtOTBmYS00MzU0LWIxYTMtODAwYzc2MTFhODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KujvbEFZNN1JEzJJjl1ETNlzB9UftEUt42J kn3uSIT1C8xDtAHrQw9MlSGl/uBQpnv2AlLAZtiNlEPRdPD2kfL/uHmgTIZOhgfj jJZYgaiTLWRMODVBBmAXe1SaYl7E9pi2u2mAgZ2i+mpnD3zE2sMQXH4gcegN9ar2 CQXiPu0INX0J4r9qL6aZ0MpkqVgSkWmbTzT+Z0RpSk3I7hGu9+dn0i2GUB/e9x79 R7cTt0LKE3oq/JRbCztXnSrL0G5ofqfjaxYurPNkhOUctyinGswz3ZGuFK88o61k ZXJ163HfzwgZ9BCQk0gL9B2tBZTb1tKV2aSE1on4ZAlemelv3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCprZy0eQ7kHbrPUmdZ6PBXlxS4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmE0ZWFkMWQtZWFkZS0z OTRkLWFhM2EtNjAwOWIwMDVlNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjO7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoROuViEcNx0p8GmrV9Kcq6uVZTv9yCNt035Iu7ikl525zvO/dDDM8R wdC7XL7O9IbdObntlnXp4YvrqlTOG30QCPwbLScXl+0BZD+2RXLw+47R+4bYV0r0 L969LzQPbJwQ7ibbpFxI33TvKznLOfrI6w4VqB2RbYA4gY/D8xQfLCmDBdXScBuX 4fqNY8Y/Ac5xsaIBHDRVsuqhWVX1/pTPcOgm3emuggeyGIDYoXi9HLpfAEJ3RC2i yjUjWF0z4+J5xl6L4f5uleMad2Oqdz7ylE7DunEjkEiVhbpijyXsT73Uc6nAewhL zb7Q+vHay2Savy4dCMAl1JwYxOiNbI4= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:10 2026 by rpki-client