$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19b2af79-511d-336b-80a4-ee7b2bcced13.roa File: 19b2af79-511d-336b-80a4-ee7b2bcced13.roa (raw, json) Hash identifier: lMbo2FbuCIZ/o/53RqAoqxstYfFrLqDh+V+v35oJPPw= Subject key identifier: 30:85:37:69:8B:90:59:DF:E4:E2:18:44:46:AA:62:6D:03:F0:7A:A5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D014627AD4ECBA64AF7450440 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19b2af79-511d-336b-80a4-ee7b2bcced13.roa Signing time: Fri 27 Feb 2026 18:58:44 +0000 ROA not before: Fri 27 Feb 2026 18:58:44 +0000 ROA not after: Thu 28 May 2026 17:58:44 +0000 asID: 54253 IP address blocks: 168.107.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:01:46:27:ad:4e:cb:a6:4a:f7:45:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 27 18:58:44 2026 GMT Not After : May 28 17:58:44 2026 GMT Subject: CN=48990bac-99ae-4577-a449-d9469cb3cee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:48:5e:4b:d1:4a:23:73:ae:15:02:0c:b3: 8b:00:08:6e:64:20:c7:94:b1:a6:6a:28:17:b6:1c: 1b:2d:af:62:01:52:f6:dd:95:5f:e8:52:ea:8c:ac: 43:da:c0:3b:91:54:c7:6b:f5:e8:71:c8:a0:36:b1: 42:f9:dd:ea:77:fb:ed:31:2a:d6:ff:a7:a6:08:50: 35:7f:05:e1:7a:10:4a:b4:0f:72:db:11:b2:b2:d9: 96:f2:12:f6:41:e7:ab:ca:53:40:45:97:78:b4:d1: 08:66:63:d0:a5:99:8d:0f:01:c8:83:31:6a:ed:d3: e0:6a:72:0f:00:93:58:7c:5c:e4:2c:1c:8c:57:fe: 51:07:09:c2:4e:d2:c3:81:d9:32:74:d3:6b:a3:82: 4b:00:d1:65:cb:e5:cf:ae:25:b7:91:24:b0:e7:80: 5f:45:72:9f:f7:49:5a:9f:f5:b3:43:8b:a3:b2:b3: ef:6a:b0:17:58:6a:60:4d:5e:fb:ff:35:60:82:5b: 42:51:a7:71:88:b2:78:f2:d3:43:71:7a:6d:17:8d: ab:7d:ea:af:fd:1c:b2:71:5f:50:92:8c:ed:06:be: 5b:c3:78:f5:8d:57:e6:f6:e4:e7:ec:d5:d0:7d:3c: d0:16:7a:1a:15:9f:45:53:52:57:9c:ff:af:9a:fe: 4a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:85:37:69:8B:90:59:DF:E4:E2:18:44:46:AA:62:6D:03:F0:7A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19b2af79-511d-336b-80a4-ee7b2bcced13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ba:6b:aa:3a:f8:00:67:6c:4c:97:c7:11:c1:13:61:b0:5b: 8a:60:50:7d:97:5f:86:78:68:c6:81:66:46:6b:77:8d:e9:f4: 3c:b4:5d:f3:a2:7a:6a:49:b6:a3:42:76:2f:1a:51:21:cc:ad: 97:e5:e6:c0:87:12:66:6c:b5:50:b7:b6:a5:20:a0:32:04:c6: b8:86:29:6c:9c:40:93:07:5b:b5:ad:b8:0d:bd:88:af:a0:c7: eb:9b:d3:93:df:17:e1:b5:03:ac:4c:7f:e6:ce:79:75:45:56: 9e:e0:22:1b:c4:0f:b1:71:f9:c1:fa:d6:9b:21:4e:2c:9c:ae: d7:69:a1:df:7f:84:f0:77:f1:3a:a2:0e:ac:10:c5:8f:14:3c: 15:58:ed:cd:90:40:1a:37:04:59:ce:93:9f:f0:a3:c7:41:20: 93:6a:6d:3c:56:fe:22:dd:c2:44:c5:bf:37:5b:7c:3a:94:e8: 76:55:67:68:e8:f6:d0:18:62:c3:4c:d4:90:2e:2f:b8:a6:a9: 94:81:1f:26:46:84:3a:71:47:d0:5d:aa:2d:df:66:f9:25:c5: 3e:a6:05:bc:c6:4a:e4:bc:ad:3c:9b:1d:98:d1:23:4e:b7:19: ba:7c:c2:79:2d:4d:85:a0:aa:4a:e3:6e:9e:79:05:1b:02:9f: 2e:d0:10:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0BRietTsumSvdFBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyNzE4NTg0NFoXDTI2MDUyODE3NTg0NFowLzEtMCsGA1UEAxMk NDg5OTBiYWMtOTlhZS00NTc3LWE0NDktZDk0NjljYjNjZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt1IXkvRSiNzrhUCDLOLAAhuZCDHlLGmaigX thwbLa9iAVL23ZVf6FLqjKxD2sA7kVTHa/XoccigNrFC+d3qd/vtMSrW/6emCFA1 fwXhehBKtA9y2xGystmW8hL2QeerylNARZd4tNEIZmPQpZmNDwHIgzFq7dPganIP AJNYfFzkLByMV/5RBwnCTtLDgdkydNNro4JLANFly+XPriW3kSSw54BfRXKf90la n/WzQ4ujsrPvarAXWGpgTV77/zVggltCUadxiLJ48tNDcXptF42rfeqv/RyycV9Q koztBr5bw3j1jVfm9uTn7NXQfTzQFnoaFZ9FU1JXnP+vmv5KIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCFN2mLkFnf5OIYREaqYm0D8HqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTliMmFmNzktNTExZC0z MzZiLTgwYTQtZWU3YjJiY2NlZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqGtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi6a6o6+ABnbEyXxxHBE2GwW4pgUH2XX4Z4aMaBZkZrd43p9Dy0XfOi empJtqNCdi8aUSHMrZfl5sCHEmZstVC3tqUgoDIExriGKWycQJMHW7WtuA29iK+g x+ub05PfF+G1A6xMf+bOeXVFVp7gIhvED7Fx+cH61pshTiycrtdpod9/hPB38Tqi DqwQxY8UPBVY7c2QQBo3BFnOk5/wo8dBIJNqbTxW/iLdwkTFvzdbfDqU6HZVZ2jo 9tAYYsNM1JAuL7imqZSBHyZGhDpxR9Bdqi3fZvklxT6mBbzGSuS8rTybHZjRI063 Gbp8wnktTYWgqkrjbp55BRsCny7QEEE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:04:16 2026 by rpki-client