$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/b295a349-2235-38dd-8685-35ebc511f0f7.roa File: b295a349-2235-38dd-8685-35ebc511f0f7.roa (raw, json) Hash identifier: iyeRwvJ0fdrR7Fq5yGucAwsnBY1V4rNhDh8pesfxh78= Subject key identifier: 21:4A:BB:2A:8E:B6:75:11:06:78:70:28:41:F9:48:27:22:2C:3F:A8 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584CCA41E5D19DFFFBC407B25D80 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/b295a349-2235-38dd-8685-35ebc511f0f7.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 23528 IP address blocks: 156.70.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:41:e5:d1:9d:ff:fb:c4:07:b2:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=f4fb54e4-d16f-46d2-9e60-e2a6bfd209e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:03:62:fe:19:99:1a:be:fb:ea:1e:b6:78:e5: 49:86:7d:c6:ca:13:91:74:3f:da:4f:ea:a2:e8:67: 8b:27:39:77:83:e6:d6:74:d2:e4:0d:0d:46:c4:2b: af:a0:2a:20:58:45:38:f9:1e:97:97:0a:aa:6e:f2: 6a:9b:f1:2f:dc:b3:10:af:eb:73:b7:db:c8:5c:7f: 4f:6b:99:7f:2b:b1:cd:3e:cc:56:5e:15:b3:5f:f6: 4b:cd:a6:77:d9:40:19:2a:88:e4:4c:5d:4f:26:52: 05:a9:5d:11:3b:fe:45:6e:eb:38:0f:0d:88:15:a6: 1b:85:ec:2a:3f:ce:e3:e2:19:bd:11:0b:50:05:ed: f7:17:f2:38:2e:f6:d7:bc:b1:6a:39:25:f8:34:f6: 52:d5:a8:a1:b0:76:df:3e:01:13:bb:9f:f1:b1:e9: cc:97:71:91:12:75:67:02:18:40:3b:59:41:59:3f: 94:29:ef:b9:83:a4:e2:94:f2:c4:cc:65:47:c5:36: 74:c2:f9:a5:d6:21:86:3a:0b:1e:70:d9:f4:7f:e5: a0:2f:de:cc:e8:f7:20:e7:ef:bb:5d:a1:82:a6:c0: 19:a6:be:b3:8b:c5:b2:55:99:7c:0b:15:77:a5:68: 93:4f:f1:85:11:16:30:b2:89:cb:49:87:a3:c1:1b: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4A:BB:2A:8E:B6:75:11:06:78:70:28:41:F9:48:27:22:2C:3F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/b295a349-2235-38dd-8685-35ebc511f0f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 156.70.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:d6:ae:1b:d5:bf:e3:2e:8b:d2:19:a3:72:5f:eb:48:4d:90: be:07:69:b7:84:0d:de:05:12:8b:c4:57:70:bb:2c:37:a3:5d: 2c:e6:f5:41:4a:f2:00:cb:77:aa:0a:f1:2f:a4:7b:36:86:d6: 92:26:36:27:c8:5c:bf:65:50:49:29:1a:f3:48:1e:b4:b4:92: ce:45:e7:f5:de:8c:a1:8a:24:e7:78:44:c1:7b:23:15:05:3b: 6f:0c:ff:24:88:a9:11:ab:a6:c6:27:c9:7d:3d:33:e5:f6:3e: c5:43:15:19:93:b1:a8:f9:a6:23:26:e1:e9:96:5d:d1:75:11: 5c:30:6d:e0:c1:1c:df:49:73:85:0d:5d:f8:11:6b:38:e5:fd: ab:c8:ee:a6:0a:1d:e9:37:da:a3:e3:f2:1f:dd:35:99:47:69: f8:f3:c5:92:b7:b6:4f:92:31:bd:a1:a8:ad:de:87:ca:98:00: d1:d7:6d:9a:f1:38:5c:7f:d4:2b:73:ad:42:08:35:5b:f9:51: ed:e9:d2:84:b5:56:6a:20:82:06:7e:77:ee:d9:98:0b:c5:c7: 32:01:17:50:25:d6:ef:7c:3b:14:ce:b0:44:e0:12:b1:7f:3c: d7:bc:86:d8:6b:85:24:dc:74:91:09:fe:5d:9a:a0:ab:6c:a6: 99:88:69:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQeXRnf/7xAeyXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjRmYjU0ZTQtZDE2Zi00NmQyLTllNjAtZTJhNmJmZDIwOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjANi/hmZGr776h62eOVJhn3GyhORdD/aT+qi 6GeLJzl3g+bWdNLkDQ1GxCuvoCogWEU4+R6XlwqqbvJqm/Ev3LMQr+tzt9vIXH9P a5l/K7HNPsxWXhWzX/ZLzaZ32UAZKojkTF1PJlIFqV0RO/5Fbus4Dw2IFaYbhewq P87j4hm9EQtQBe33F/I4LvbXvLFqOSX4NPZS1aihsHbfPgETu5/xsenMl3GREnVn AhhAO1lBWT+UKe+5g6TilPLEzGVHxTZ0wvml1iGGOgsecNn0f+WgL97M6Pcg5++7 XaGCpsAZpr6zi8WyVZl8CxV3pWiTT/GFERYwsonLSYejwRt51QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFKuyqOtnURBnhwKEH5SCciLD+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvYjI5NWEzNDktMjIzNS0z OGRkLTg2ODUtMzVlYmM1MTFmMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnEZ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrWrhvVv+Mui9IZo3Jf60hNkL4HabeEDd4FEovEV3C7LDejXSzm9UFK 8gDLd6oK8S+kezaG1pImNifIXL9lUEkpGvNIHrS0ks5F5/XejKGKJOd4RMF7IxUF O28M/ySIqRGrpsYnyX09M+X2PsVDFRmTsaj5piMm4emWXdF1EVwwbeDBHN9Jc4UN XfgRazjl/avI7qYKHek32qPj8h/dNZlHafjzxZK3tk+SMb2hqK3eh8qYANHXbZrx OFx/1CtzrUIINVv5Ue3p0oS1VmogggZ+d+7ZmAvFxzIBF1Al1u98OxTOsETgErF/ PNe8hthrhSTcdJEJ/l2aoKtsppmIaZM= -----END CERTIFICATE-----Generated at Mon Mar 2 17:09:58 2026 by rpki-client