$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa File: e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa (raw, json) Hash identifier: cPxlu/2XtGOCCkRRSC69srLe03KxZ5UIKE1dlZMctN4= Subject key identifier: E2:CA:CB:E2:7B:53:EE:B2:48:CD:96:42:9D:A0:E8:B0:DF:20:67:F2 Certificate issuer: /CN=4298b6ff-8a6d-4135-b127-80a55c0919df Certificate serial: 010D0C9F4328584CAE5E69D2237B303EA1AA9D80 Authority key identifier: 4A:FC:61:2F:3B:D7:32:8B:65:D2:0A:6E:34:9B:3F:09:6B:84:6F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 30241 IP address blocks: 69.194.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:69:d2:23:7b:30:3e:a1:aa:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4298b6ff-8a6d-4135-b127-80a55c0919df Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ac8e6ded-5470-415e-8783-cd804d248052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:5b:d9:34:e2:bc:34:93:df:e9:f8:12:33: fe:24:7a:14:ce:96:53:ce:45:af:0d:27:f7:74:42: 5c:ea:51:41:e0:08:a0:2f:80:9d:59:ff:55:3f:f2: bb:9e:45:ee:ef:1e:5d:b5:c1:95:c8:d5:07:5b:af: 35:4e:fc:8c:eb:90:67:28:dc:be:5a:cb:37:f3:c8: 9d:c7:9c:9e:9c:19:db:d1:6e:ac:c1:a1:ad:14:98: 82:4e:fe:98:7e:46:93:13:11:49:8a:f6:6b:01:f3: 87:02:2b:b9:d3:59:48:91:38:99:36:c0:9b:c1:bd: 8c:3d:f6:aa:eb:ae:4b:ee:d9:c2:f0:98:c0:2b:c3: 00:fe:56:b4:53:33:af:e6:48:db:e2:ce:81:3b:32: a7:e7:23:1c:e7:cd:80:cf:bd:df:23:10:e3:2c:2d: 6d:02:fe:a3:22:68:96:bb:7e:ce:ec:9e:14:c1:4c: 18:c6:92:3f:9a:63:b6:dc:d9:32:34:38:c2:0a:bd: aa:4a:56:ad:14:7b:30:ce:81:a8:12:98:95:42:4d: 42:f4:68:21:45:a9:c3:15:74:b3:d9:79:da:60:62: 6a:5d:55:02:b6:96:a8:5a:9b:82:ed:69:16:bb:5a: c3:1d:03:dd:38:9c:7e:9d:7f:ad:49:ff:51:c3:7b: 2e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CA:CB:E2:7B:53:EE:B2:48:CD:96:42:9D:A0:E8:B0:DF:20:67:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.crl X509v3 Authority Key Identifier: keyid:4A:FC:61:2F:3B:D7:32:8B:65:D2:0A:6E:34:9B:3F:09:6B:84:6F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer sbgp-ipAddrBlock: critical IPv4: 69.194.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e2:f1:29:34:cf:d2:2a:3d:b6:3f:94:12:14:71:c3:f7:2b: a0:1d:5d:ef:6b:ec:9a:2d:74:ac:c6:66:c6:d4:9e:8e:0f:31: 2d:7e:e5:48:c7:da:31:21:09:cf:cb:05:2e:36:be:a7:2b:cb: 84:3d:cf:e7:95:b4:80:08:ad:4f:83:65:cf:27:98:26:ce:ae: c7:7e:6e:aa:b6:a6:2f:5b:11:3b:bb:94:ba:48:91:a1:f8:ee: 73:08:52:3c:74:80:d3:40:d4:b9:2a:4c:bd:93:e6:f0:04:00: 6c:d1:82:7a:cb:c0:f8:31:d6:1c:79:01:39:f2:3c:28:b9:68: 2f:8d:69:eb:65:f2:fd:74:b3:4f:10:6a:39:a1:32:68:76:00: 2b:c7:12:33:bc:6b:80:58:c6:36:97:5f:41:fd:1f:54:0a:7c: db:3c:83:24:68:f7:88:5e:d2:8c:cb:a8:f5:9a:12:55:dc:05: 02:ca:7f:db:02:cd:3e:88:5a:99:65:8e:0d:9b:67:9c:6f:1f: 1b:81:1c:38:0b:a4:63:6e:8c:23:51:32:3e:4f:81:7f:e1:94: 43:6f:d5:2d:fd:5e:f1:dc:ca:8e:93:9a:0f:84:87:29:87:99: f0:d7:01:de:cd:96:fa:30:03:7c:16:27:49:be:24:1d:07:66: 0d:59:56:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXmnSI3swPqGqnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI5OGI2ZmYtOGE2ZC00MTM1LWIxMjctODBhNTVjMDkx OWRmMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWM4ZTZkZWQtNTQ3MC00MTVlLTg3ODMtY2Q4MDRkMjQ4MDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP9b2TTivDST3+n4EjP+JHoUzpZTzkWvDSf3 dEJc6lFB4AigL4CdWf9VP/K7nkXu7x5dtcGVyNUHW681TvyM65BnKNy+Wss388id x5yenBnb0W6swaGtFJiCTv6YfkaTExFJivZrAfOHAiu501lIkTiZNsCbwb2MPfaq 665L7tnC8JjAK8MA/la0UzOv5kjb4s6BOzKn5yMc582Az73fIxDjLC1tAv6jImiW u37O7J4UwUwYxpI/mmO23NkyNDjCCr2qSlatFHswzoGoEpiVQk1C9GghRanDFXSz 2XnaYGJqXVUCtpaoWpuC7WkWu1rDHQPdOJx+nX+tSf9Rw3su1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLKy+J7U+6ySM2WQp2g6LDfIGfyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80Mjk4 YjZmZi04YTZkLTQxMzUtYjEyNy04MGE1NWMwOTE5ZGYvZTFjOTUxNjYtZTNmZS0z ZmFjLTkxMDktNTZhOGU0YjlmNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDI5OGI2ZmYtOGE2ZC00MTM1LWIx MjctODBhNTVjMDkxOWRmLzQyOThiNmZmLThhNmQtNDEzNS1iMTI3LTgwYTU1YzA5 MTlkZi5jcmwwHwYDVR0jBBgwFoAUSvxhLzvXMotl0gpuNJs/CWuEbzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80Mjk4YjZmZi04YTZkLTQxMzUtYjEyNy04MGE1 NWMwOTE5ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARcKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfi8Sk0z9IqPbY/lBIUccP3K6AdXe9r7JotdKzGZsbUno4PMS1+5UjH 2jEhCc/LBS42vqcry4Q9z+eVtIAIrU+DZc8nmCbOrsd+bqq2pi9bETu7lLpIkaH4 7nMIUjx0gNNA1LkqTL2T5vAEAGzRgnrLwPgx1hx5ATnyPCi5aC+Naetl8v10s08Q ajmhMmh2ACvHEjO8a4BYxjaXX0H9H1QKfNs8gyRo94he0ozLqPWaElXcBQLKf9sC zT6IWplljg2bZ5xvHxuBHDgLpGNujCNRMj5PgX/hlENv1S39XvHcyo6Tmg+EhymH mfDXAd7NlvowA3wWJ0m+JB0HZg1ZVr0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:16 2026 by rpki-client