$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24d9ffe5-0777-317f-bc34-e3b75372997d.roa File: 24d9ffe5-0777-317f-bc34-e3b75372997d.roa (raw, json) Hash identifier: cpuNfFFJ/cdObNU+6bPRUV8IPSQ/vuhHPEgw150LqII= Subject key identifier: 9E:40:60:0A:4F:3F:F3:4C:B4:C9:BE:F8:59:A4:E9:2C:4A:DE:74:D9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D01434F78E2F33F76B953CF00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24d9ffe5-0777-317f-bc34-e3b75372997d.roa Signing time: Fri 27 Feb 2026 18:53:00 +0000 ROA not before: Fri 27 Feb 2026 18:53:00 +0000 ROA not after: Thu 28 May 2026 17:53:00 +0000 asID: 54253 IP address blocks: 168.107.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:01:43:4f:78:e2:f3:3f:76:b9:53:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 27 18:53:00 2026 GMT Not After : May 28 17:53:00 2026 GMT Subject: CN=3b2ff836-7697-447e-8153-3d270b44eeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:80:56:aa:b4:ef:67:9f:2f:05:02:4a:7e: 83:70:a1:fa:73:df:9a:95:bb:84:34:94:ce:f5:e1: 70:22:cb:51:79:6b:be:b7:8b:b3:40:78:46:be:54: 34:0b:f8:83:5f:2a:e2:5a:49:89:6e:45:b3:96:82: ef:32:09:96:98:92:d0:c8:b0:68:dd:a7:d9:95:c9: 6e:96:94:ea:1e:80:0a:d0:6f:da:d9:34:52:b2:b7: b1:3f:a2:41:f1:f2:1f:e4:55:e0:ee:3b:9d:2f:af: eb:41:78:23:55:17:83:2e:e8:5c:df:f6:4b:96:da: 8a:fc:bb:5c:70:41:42:5f:32:1a:67:73:44:05:11: 4e:4a:cd:0c:b4:cf:8c:af:17:b9:36:59:c1:e5:6f: 79:d8:75:ed:85:3a:18:f8:7d:67:18:ce:05:6a:2a: b7:df:03:1f:0c:10:45:4a:b8:1c:eb:09:8f:68:1d: e7:be:a1:08:fb:1a:8d:ff:24:53:86:78:ad:49:e6: d1:77:4c:0e:b0:90:f2:a9:c5:4b:bd:d4:e0:d4:7d: ae:52:a9:4f:69:2e:51:17:08:d2:cf:0e:9f:f0:f6: 2d:96:eb:bf:4c:fa:b8:10:47:e9:ce:7a:67:e8:7d: 42:8f:5d:79:4d:17:0d:63:53:d9:bf:21:d4:e6:d5: 2c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:60:0A:4F:3F:F3:4C:B4:C9:BE:F8:59:A4:E9:2C:4A:DE:74:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24d9ffe5-0777-317f-bc34-e3b75372997d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c7:42:70:0d:3b:1d:94:2e:64:11:7b:5b:39:8d:66:f7:68: 22:78:eb:b6:37:83:1c:5b:c1:f5:83:c0:76:8a:ae:df:8e:07: 17:5d:99:f5:04:16:1c:63:63:c4:4a:35:e0:8b:78:34:99:75: 10:47:59:84:94:b9:4f:6c:af:32:63:56:b4:f9:1e:77:a9:0c: 48:a5:99:fe:8c:db:b3:c5:5c:32:dd:11:99:33:18:21:db:f3: b2:c3:ed:94:aa:af:a9:4d:ce:7a:97:3b:2b:b4:7c:b3:dd:d5: f5:2d:c9:8d:b3:a2:25:79:08:c7:f2:31:de:a6:e0:0b:be:be: c3:02:80:bb:78:36:95:f8:73:6e:06:f4:d7:33:00:a1:33:a9: 1e:a9:0b:9f:a6:54:70:2b:d7:1e:59:e3:5f:ba:c0:e5:5a:f5: 80:7a:0d:e4:c9:0d:84:58:27:f1:69:8e:9f:0b:e5:d9:e0:f7: 0d:02:0c:c5:55:98:cd:b7:fe:36:32:11:a4:6e:c8:af:5d:28: e3:ba:8b:7c:99:ff:e6:75:f7:42:c8:8a:05:ae:a2:39:39:51: 12:5c:e3:1b:c1:85:5e:69:cc:23:42:80:ea:d6:31:0e:ba:13: ba:bb:7f:8d:0c:81:fe:9c:bc:cc:25:62:68:98:75:1b:b0:ac: 46:8c:a5:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0BQ0944vM/drlTzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyNzE4NTMwMFoXDTI2MDUyODE3NTMwMFowLzEtMCsGA1UEAxMk M2IyZmY4MzYtNzY5Ny00NDdlLTgxNTMtM2QyNzBiNDRlZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0eAVqq072efLwUCSn6DcKH6c9+albuENJTO 9eFwIstReWu+t4uzQHhGvlQ0C/iDXyriWkmJbkWzloLvMgmWmJLQyLBo3afZlclu lpTqHoAK0G/a2TRSsrexP6JB8fIf5FXg7judL6/rQXgjVReDLuhc3/ZLltqK/Ltc cEFCXzIaZ3NEBRFOSs0MtM+Mrxe5NlnB5W952HXthToY+H1nGM4Faiq33wMfDBBF Srgc6wmPaB3nvqEI+xqN/yRThnitSebRd0wOsJDyqcVLvdTg1H2uUqlPaS5RFwjS zw6f8PYtluu/TPq4EEfpznpn6H1Cj115TRcNY1PZvyHU5tUs1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5AYApPP/NMtMm++Fmk6SxK3nTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjRkOWZmZTUtMDc3Ny0z MTdmLWJjMzQtZTNiNzUzNzI5OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/HQnANOx2ULmQRe1s5jWb3aCJ467Y3gxxbwfWDwHaKrt+OBxddmfUE FhxjY8RKNeCLeDSZdRBHWYSUuU9srzJjVrT5HnepDEilmf6M27PFXDLdEZkzGCHb 87LD7ZSqr6lNznqXOyu0fLPd1fUtyY2zoiV5CMfyMd6m4Au+vsMCgLt4NpX4c24G 9NczAKEzqR6pC5+mVHAr1x5Z41+6wOVa9YB6DeTJDYRYJ/Fpjp8L5dng9w0CDMVV mM23/jYyEaRuyK9dKOO6i3yZ/+Z190LIigWuojk5URJc4xvBhV5pzCNCgOrWMQ66 E7q7f40Mgf6cvMwlYmiYdRuwrEaMpcc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:04:56 2026 by rpki-client