$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa File: de52b118-f70d-34c0-8d87-b4abb72880d9.roa (raw, json) Hash identifier: ATWknZvGbrN5DLn8t7KmB1kltflYRQUrL+gdXL1NJSo= Subject key identifier: D9:6E:9E:8F:71:4C:80:DD:E6:FA:30:54:74:46:E5:71:8E:4C:D5:2F Certificate issuer: /CN=b2db0e90-cb59-4049-beac-d39b54244d28 Certificate serial: 010D0C9F4328584CA8C19958236F1D10FF607C00 Authority key identifier: 1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa Signing time: Tue 27 Jan 2026 02:00:29 +0000 ROA not before: Tue 27 Jan 2026 02:00:29 +0000 ROA not after: Mon 27 Apr 2026 01:00:29 +0000 asID: 11155 IP address blocks: 147.124.16.0/20 maxlen: 24 162.118.64.0/19 maxlen: 24 2605:f9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a8:c1:99:58:23:6f:1d:10:ff:60:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2db0e90-cb59-4049-beac-d39b54244d28 Validity Not Before: Jan 27 02:00:29 2026 GMT Not After : Apr 27 01:00:29 2026 GMT Subject: CN=2a514697-386f-4be6-8797-ba5aa581dec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:24:d1:de:83:69:b1:86:01:de:45:c6:af: d3:d2:77:2b:ba:7d:02:69:c0:e2:ba:24:a3:f9:54: 02:70:1c:c1:26:18:2f:1d:cc:c8:b6:17:80:b7:49: c3:7c:fd:df:c6:6a:74:f3:7f:ef:f6:28:10:a4:4d: be:54:91:d3:65:ef:84:cd:cf:bc:e4:f0:b3:fa:95: 06:06:a2:af:39:01:68:e9:78:69:24:71:03:fe:2d: 76:56:fe:f1:2a:0c:80:f3:51:4a:11:41:b5:cc:25: ad:ca:1b:9f:b2:f4:f6:7d:b9:17:03:5d:50:b6:7c: 75:98:c4:3d:0a:0c:05:88:1f:85:d8:bc:eb:46:17: e3:2b:75:ef:64:cf:e8:57:84:23:b4:00:f4:15:b3: bb:db:94:08:94:5c:d0:d9:11:16:7a:7c:64:8b:0e: 76:73:d2:28:54:16:7d:bc:a5:ca:8c:23:a1:31:d1: a8:31:cc:40:2d:6d:cd:da:1c:29:a5:c0:b2:f1:9e: 60:47:2b:c3:b5:06:ed:f9:5f:b4:05:5c:0b:a0:95: a3:1b:a0:eb:79:3d:9b:7a:7b:c2:0b:dd:0e:32:17: 66:c0:59:ac:db:7d:fb:c6:33:9c:a0:fc:f4:19:9a: 50:f0:60:c3:38:a6:56:5a:ad:8a:e5:37:03:f5:b8: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6E:9E:8F:71:4C:80:DD:E6:FA:30:54:74:46:E5:71:8E:4C:D5:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.crl X509v3 Authority Key Identifier: keyid:1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer sbgp-ipAddrBlock: critical IPv4: 147.124.16.0/20 162.118.64.0/19 IPv6: 2605:f9c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d3:03:b4:d1:91:0c:ee:72:ef:06:1d:f2:20:fa:fd:f8:43: 13:48:0d:ec:0e:50:a0:e5:ff:7f:e0:84:d6:ad:4a:b6:a8:4f: 57:24:89:ac:c1:87:1a:c4:d0:ed:60:47:f2:28:85:09:69:29: e4:d6:f7:93:23:2c:1d:16:e3:3f:97:3d:b9:71:94:83:c9:00: 7c:1c:b7:f8:e3:80:50:fe:38:ce:b2:73:22:3c:7a:19:5a:c0: 73:d0:a0:08:19:48:c3:ea:ef:36:b2:28:f2:7d:4b:13:e9:5e: f7:2b:8e:a9:64:90:0d:46:d1:41:08:75:c8:71:c3:8e:9f:df: 69:be:ac:8c:ea:d0:14:67:dc:76:c5:76:fb:98:f5:59:53:7b: aa:03:dd:88:d7:38:33:00:95:04:c6:3b:17:75:12:c2:bb:ed: 28:e2:06:70:77:ae:fb:c9:a6:e2:ba:c8:19:c2:a4:48:d6:5c: 7c:8c:bb:70:a4:f7:32:0c:1a:bb:cc:41:68:bb:9a:0d:96:0a: 33:9e:6d:71:6e:1e:67:a7:0e:28:e4:6f:c9:43:57:ab:07:64: eb:e1:5d:a4:f2:cc:dc:c0:b2:d7:1d:3e:7f:02:56:f7:66:9c: 05:11:d2:68:00:d9:90:d2:cf:2c:84:c4:4b:a7:36:42:9a:0e: f1:0e:bb:90 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEyowZlYI28dEP9gfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJkYjBlOTAtY2I1OS00MDQ5LWJlYWMtZDM5YjU0MjQ0 ZDI4MB4XDTI2MDEyNzAyMDAyOVoXDTI2MDQyNzAxMDAyOVowLzEtMCsGA1UEAxMk MmE1MTQ2OTctMzg2Zi00YmU2LTg3OTctYmE1YWE1ODFkZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFck0d6DabGGAd5Fxq/T0ncrun0CacDiuiSj +VQCcBzBJhgvHczItheAt0nDfP3fxmp083/v9igQpE2+VJHTZe+Ezc+85PCz+pUG BqKvOQFo6XhpJHED/i12Vv7xKgyA81FKEUG1zCWtyhufsvT2fbkXA11Qtnx1mMQ9 CgwFiB+F2LzrRhfjK3XvZM/oV4QjtAD0FbO725QIlFzQ2REWenxkiw52c9IoVBZ9 vKXKjCOhMdGoMcxALW3N2hwppcCy8Z5gRyvDtQbt+V+0BVwLoJWjG6DreT2benvC C90OMhdmwFms2337xjOcoPz0GZpQ8GDDOKZWWq2K5TcD9bjpHwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFNluno9xTIDd5vowVHRG5XGOTNUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmRi MGU5MC1jYjU5LTQwNDktYmVhYy1kMzliNTQyNDRkMjgvZGU1MmIxMTgtZjcwZC0z NGMwLThkODctYjRhYmI3Mjg4MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjJkYjBlOTAtY2I1OS00MDQ5LWJl YWMtZDM5YjU0MjQ0ZDI4L2IyZGIwZTkwLWNiNTktNDA0OS1iZWFjLWQzOWI1NDI0 NGQyOC5jcmwwHwYDVR0jBBgwFoAUHcEmABbp7Bm8afUpk+kcR+cAfq4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmRiMGU5MC1jYjU5LTQwNDktYmVhYy1kMzli NTQyNDRkMjguY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEk3wQAwQF onZAMA0EAgACMAcDBQAmBfnAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAALTA7TRkQzucu8GHfIg+v34QxNI DewOUKDl/3/ghNatSraoT1ckiazBhxrE0O1gR/IohQlpKeTW95MjLB0W4z+XPblx lIPJAHwct/jjgFD+OM6ycyI8ehlawHPQoAgZSMPq7zayKPJ9SxPpXvcrjqlkkA1G 0UEIdchxw46f32m+rIzq0BRn3HbFdvuY9VlTe6oD3YjXODMAlQTGOxd1EsK77Sji BnB3rvvJpuK6yBnCpEjWXHyMu3Ck9zIMGrvMQWi7mg2WCjOebXFuHmenDijkb8lD V6sHZOvhXaTyzNzAstcdPn8CVvdmnAUR0mgA2ZDSzyyExEunNkKaDvEOu5A= -----END CERTIFICATE-----Generated at Mon Mar 2 05:55:51 2026 by rpki-client