$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a4c6063-2540-3f1d-a6f8-f052c991de3c.roa File: 2a4c6063-2540-3f1d-a6f8-f052c991de3c.roa (raw, json) Hash identifier: UrNR4BzFh9sMLJb4ASviNuqcOGrjY8L5nmr3ZI4Gsa4= Subject key identifier: 07:AA:A7:5D:95:F5:C4:89:F6:4E:6B:0B:22:C4:31:7D:81:49:AF:9C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D02178B4964DE8086840AAA70 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a4c6063-2540-3f1d-a6f8-f052c991de3c.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 31898 IP address blocks: 192.22.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:8b:49:64:de:80:86:84:0a:aa:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=c4b2c448-c172-4c32-90e5-edc8ec4ca814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:2d:bd:c0:20:3f:3e:d8:e2:59:61:b1:24: 5b:cc:60:63:a7:c8:cf:90:5d:df:4e:28:14:d1:a8: db:64:f1:69:36:8d:b0:4d:9a:d4:d7:30:86:06:e2: 17:ea:f8:14:43:68:af:08:42:43:6b:13:aa:1b:89: 11:a6:3a:f1:79:05:01:2d:26:95:c9:4a:27:d0:81: 4d:f7:81:8c:a5:1e:27:c9:52:ef:0d:07:66:39:ac: 75:7e:38:51:25:f6:3b:3d:07:0b:e7:ef:92:16:4d: 35:14:93:79:0b:9e:ee:76:0a:c0:3d:6b:60:47:1a: 0a:26:e2:7d:6e:8d:03:c0:ff:28:1e:82:c7:63:95: c8:88:9d:d8:47:18:43:07:17:64:88:69:4c:b4:0d: f6:9e:a4:3d:5c:b8:e6:b3:d5:60:56:a0:d8:e7:f3: b8:cd:aa:9f:b7:e4:4f:ba:07:9a:84:83:a1:ef:af: 21:a4:6c:2c:09:5d:c0:e4:c4:6a:9b:07:1d:45:4d: 2a:57:9e:37:b5:86:ad:d7:db:ea:0b:4f:2a:a8:d6: 81:f4:5e:0f:47:3c:be:e7:e3:4d:1d:7c:a8:0f:ec: ba:b3:65:e6:a4:3f:be:7f:5e:f3:23:09:5e:3c:d0: 96:9c:9f:c2:81:cd:ce:26:e9:26:a8:e4:7d:06:52: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AA:A7:5D:95:F5:C4:89:F6:4E:6B:0B:22:C4:31:7D:81:49:AF:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2a4c6063-2540-3f1d-a6f8-f052c991de3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:71:f6:06:93:6a:e1:b6:0a:89:77:fb:7a:da:3b:f1:93:66: d5:d8:c6:f0:2d:48:0f:b1:3f:67:85:74:3e:12:a4:e7:83:bd: 1d:07:44:07:e1:23:4f:58:d1:70:33:5f:fb:0c:40:46:7a:7a: 4a:34:1b:d9:bf:3a:2d:cc:d1:0f:22:07:55:63:9e:2c:bb:c2: 1d:4a:ff:df:93:c6:8a:6f:93:7c:9c:d6:98:e1:48:16:30:ec: 77:47:e8:28:60:74:a1:bc:cc:7c:aa:c0:7a:95:29:7a:58:36: 8d:c0:c9:67:9f:97:42:86:b2:e4:e8:48:e7:4d:f1:b0:91:ff: 2d:8b:42:6a:3d:ad:ff:c7:41:e8:ba:f8:e6:70:dc:3f:5a:36: 27:9c:bb:40:b5:01:aa:fb:d2:76:27:07:2e:c7:d0:58:7b:19: d4:34:6d:e7:62:cd:45:c7:d3:95:d6:6c:59:75:8e:77:4f:56: a9:be:6e:35:b2:ed:9d:55:26:05:19:b1:af:08:80:67:a0:f7: bb:03:7b:19:fc:d6:df:e7:df:6f:bf:e5:50:67:75:64:79:bd: 24:29:80:a9:e9:d2:08:ea:6a:2a:6a:cb:6e:28:c2:0b:96:0c: 7e:a8:f5:db:d4:ff:f4:66:a5:00:d4:14:1c:45:ff:b3:43:04: 53:f8:b3:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF4tJZN6AhoQKqnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzRiMmM0NDgtYzE3Mi00YzMyLTkwZTUtZWRjOGVjNGNhODE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8ItvcAgPz7Y4llhsSRbzGBjp8jPkF3fTigU 0ajbZPFpNo2wTZrU1zCGBuIX6vgUQ2ivCEJDaxOqG4kRpjrxeQUBLSaVyUon0IFN 94GMpR4nyVLvDQdmOax1fjhRJfY7PQcL5++SFk01FJN5C57udgrAPWtgRxoKJuJ9 bo0DwP8oHoLHY5XIiJ3YRxhDBxdkiGlMtA32nqQ9XLjms9VgVqDY5/O4zaqft+RP ugeahIOh768hpGwsCV3A5MRqmwcdRU0qV543tYat19vqC08qqNaB9F4PRzy+5+NN HXyoD+y6s2XmpD++f17zIwlePNCWnJ/Cgc3OJukmqOR9BlKQvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeqp12V9cSJ9k5rCyLEMX2BSa+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmE0YzYwNjMtMjU0MC0z ZjFkLWE2ZjgtZjA1MmM5OTFkZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdx9gaTauG2Col3+3raO/GTZtXYxvAtSA+xP2eFdD4SpOeDvR0HRAfh I09Y0XAzX/sMQEZ6eko0G9m/Oi3M0Q8iB1Vjniy7wh1K/9+Txopvk3yc1pjhSBYw 7HdH6ChgdKG8zHyqwHqVKXpYNo3AyWefl0KGsuToSOdN8bCR/y2LQmo9rf/HQei6 +OZw3D9aNiecu0C1Aar70nYnBy7H0Fh7GdQ0bedizUXH05XWbFl1jndPVqm+bjWy 7Z1VJgUZsa8IgGeg97sDexn81t/n32+/5VBndWR5vSQpgKnp0gjqaipqy24owguW DH6o9dvU//RmpQDUFBxF/7NDBFP4swc= -----END CERTIFICATE-----Generated at Mon Mar 2 09:50:49 2026 by rpki-client