$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25f9e359-02de-3bee-bd4c-f87044783a5e.roa File: 25f9e359-02de-3bee-bd4c-f87044783a5e.roa (raw, json) Hash identifier: 7nkSkv/lMwqUmVIickhhQgBexEn6/P8OjT7fVhFIjiQ= Subject key identifier: 05:63:A0:81:AD:6A:08:EB:FB:E4:F6:32:09:C8:5E:30:32:76:C9:0A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CE62CD0E83D02917C38440980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25f9e359-02de-3bee-bd4c-f87044783a5e.roa Signing time: Wed 18 Feb 2026 02:00:31 +0000 ROA not before: Wed 18 Feb 2026 02:00:31 +0000 ROA not after: Tue 19 May 2026 01:00:31 +0000 asID: 54253 IP address blocks: 151.145.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e6:2c:d0:e8:3d:02:91:7c:38:44:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 18 02:00:31 2026 GMT Not After : May 19 01:00:31 2026 GMT Subject: CN=fb3d8254-2350-4248-9630-a368919f376f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e8:81:a5:d4:d7:78:d1:4d:00:a0:b1:58:54: 75:fe:bd:42:3d:0c:d5:a4:46:cf:5e:ea:86:9f:2e: ef:ae:a1:cc:d2:2f:ce:75:e6:c8:0a:d5:5a:39:c2: 7c:aa:bc:aa:0f:aa:59:d3:2f:bc:fc:1f:32:94:07: b0:bf:da:d0:be:4f:ec:da:ce:1e:17:ef:03:2d:c6: 6d:2a:cc:8e:c7:e7:89:6e:e8:f8:03:c3:34:f8:ac: e9:c6:4e:c2:b4:95:6f:ef:51:d7:60:13:64:76:46: ae:a7:dd:54:50:72:30:f6:b7:eb:77:33:22:86:55: 39:9c:e1:d1:24:70:8d:7e:67:fe:c4:80:b2:9d:41: ed:f1:5b:af:9b:6e:57:1d:63:c3:7b:02:60:f5:33: 9c:5f:ae:c5:54:65:c1:95:85:f4:58:68:e4:e8:6c: 7f:e9:8d:39:c6:fd:75:91:f4:b0:e1:70:82:9a:c2: 6c:1c:02:45:a4:86:8d:33:5c:0f:68:f1:02:6d:91: 3a:34:18:49:81:45:4e:1d:7d:cf:43:53:c0:04:c9: c4:2d:20:14:a5:37:c1:da:e9:d0:5b:c4:45:94:5b: 13:51:71:a9:e4:88:d8:53:eb:49:16:4a:ee:1f:5b: 7a:a9:78:29:6d:e2:bb:1b:40:2a:87:ac:81:49:af: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:A0:81:AD:6A:08:EB:FB:E4:F6:32:09:C8:5E:30:32:76:C9:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25f9e359-02de-3bee-bd4c-f87044783a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.145.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d6:a1:8f:89:71:ef:75:0a:68:e4:be:69:f8:d7:d4:4b:f7: 95:2f:6b:ba:cc:db:d1:71:16:d0:6c:b8:45:56:9e:07:8d:17: fa:3e:d5:89:d5:71:9d:18:33:58:7d:0c:0c:c1:df:df:5b:b7: b8:ba:69:cf:ec:17:ce:a3:da:e9:dc:1e:94:9c:e8:59:b9:33: ea:96:e6:a2:cb:c6:3d:40:e1:d1:31:62:84:58:c2:f9:b8:bf: 53:cb:3f:75:32:b0:6f:45:ed:74:19:67:4d:d4:d7:e1:c9:62: 35:50:f0:3f:d6:21:fc:b8:72:9f:0a:03:7f:10:9c:e1:ab:15: 58:b8:89:5f:6a:62:4d:64:71:0f:97:4e:e5:69:ed:ac:99:0b: aa:a9:16:f6:08:4d:e7:4c:84:04:68:3c:dc:ea:b6:37:44:f3: d0:0f:2a:cb:29:1b:06:7d:cb:d6:86:64:df:55:58:d1:49:d5: 49:41:9a:97:17:58:c0:4d:03:66:03:07:04:b4:15:de:60:dd: 07:57:5a:a4:ba:09:19:7e:c7:21:27:05:f0:75:76:35:e5:8e: 3b:97:fb:3e:c5:70:25:5b:c0:cf:f2:cf:82:50:8e:82:d7:51: f3:82:24:aa:74:7e:0c:93:a6:0c:62:7c:82:1f:86:e5:d0:f4: c8:d9:51:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLNDoPQKRfDhECYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZmIzZDgyNTQtMjM1MC00MjQ4LTk2MzAtYTM2ODkxOWYzNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+iBpdTXeNFNAKCxWFR1/r1CPQzVpEbPXuqG ny7vrqHM0i/OdebICtVaOcJ8qryqD6pZ0y+8/B8ylAewv9rQvk/s2s4eF+8DLcZt KsyOx+eJbuj4A8M0+Kzpxk7CtJVv71HXYBNkdkaup91UUHIw9rfrdzMihlU5nOHR JHCNfmf+xICynUHt8Vuvm25XHWPDewJg9TOcX67FVGXBlYX0WGjk6Gx/6Y05xv11 kfSw4XCCmsJsHAJFpIaNM1wPaPECbZE6NBhJgUVOHX3PQ1PABMnELSAUpTfB2unQ W8RFlFsTUXGp5IjYU+tJFkruH1t6qXgpbeK7G0Aqh6yBSa/JuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVjoIGtagjr++T2MgnIXjAydskKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjVmOWUzNTktMDJkZS0z YmVlLWJkNGMtZjg3MDQ0NzgzYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl5EEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILWoY+Jce91Cmjkvmn419RL95Uva7rM29FxFtBsuEVWngeNF/o+1YnV cZ0YM1h9DAzB399bt7i6ac/sF86j2uncHpSc6Fm5M+qW5qLLxj1A4dExYoRYwvm4 v1PLP3UysG9F7XQZZ03U1+HJYjVQ8D/WIfy4cp8KA38QnOGrFVi4iV9qYk1kcQ+X TuVp7ayZC6qpFvYITedMhARoPNzqtjdE89APKsspGwZ9y9aGZN9VWNFJ1UlBmpcX WMBNA2YDBwS0Fd5g3QdXWqS6CRl+xyEnBfB1djXljjuX+z7FcCVbwM/yz4JQjoLX UfOCJKp0fgyTpgxifIIfhuXQ9MjZUZs= -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:18 2026 by rpki-client