$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c986d83-ade9-3587-9687-21a23f416fd2.roa File: 2c986d83-ade9-3587-9687-21a23f416fd2.roa (raw, json) Hash identifier: yTe7fiHCN/deNC8ZLxSyxAsPbMEflTuh2SjAYTu32AA= Subject key identifier: 02:F2:78:9F:B1:33:1A:DB:4D:8F:3E:03:80:1E:F2:8D:65:66:43:6D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D02178A44B1A3951345305300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c986d83-ade9-3587-9687-21a23f416fd2.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 31898 IP address blocks: 168.110.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:8a:44:b1:a3:95:13:45:30:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=2e8f8f56-8519-49cd-a8eb-5d1306ed27e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:4a:c7:dc:67:bc:06:9d:bf:f4:19:2f:b3: e2:9e:25:cf:11:31:d2:75:47:01:43:fd:dd:9a:6c: 09:1c:52:00:7c:39:02:69:01:04:64:83:0e:e3:5c: 1a:82:c5:97:5e:01:27:22:71:3a:71:2b:7e:a9:37: 9f:d6:0b:43:11:fa:4b:7b:d8:78:5d:d0:ce:f9:af: fe:ac:83:20:fe:78:fd:1e:c7:57:82:6d:b5:59:3a: 7f:85:c8:bb:4a:97:1d:13:45:0b:af:2e:31:7e:47: ad:72:68:ee:5e:45:b0:4b:fc:c4:a4:bc:7b:c6:3f: b2:ec:03:6e:90:d4:4c:dd:87:9d:1b:51:8f:10:c2: 11:c3:66:ac:52:7a:b6:a6:c7:6c:78:13:d9:7b:30: 4c:f7:6c:fa:bd:64:6c:1b:d4:b2:17:03:73:0c:ae: 6d:78:c5:4c:f7:93:f6:a8:79:22:52:21:dd:49:05: bd:aa:90:73:0a:06:87:34:f9:08:9b:65:f9:2b:ce: a6:81:02:e3:dd:25:23:8b:1f:71:62:e6:04:3f:37: 8f:31:b4:85:f3:64:a0:5a:55:1b:fc:ed:d6:a4:6a: ad:bb:93:95:61:ce:d6:36:2b:1d:f4:fb:ae:62:8f: 49:9e:b3:29:55:71:f0:57:a0:c7:75:85:5a:56:3f: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F2:78:9F:B1:33:1A:DB:4D:8F:3E:03:80:1E:F2:8D:65:66:43:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c986d83-ade9-3587-9687-21a23f416fd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.110.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:36:59:c8:35:fa:db:8a:08:d5:f0:9a:a6:14:7c:68:26:8f: 4e:0a:22:d9:ed:7a:e8:ac:b5:9e:d9:3c:9e:03:28:a7:39:97: 1d:c6:ae:3f:c3:d7:67:c4:a0:23:f8:20:6a:21:2e:26:fc:79: e5:2d:42:e6:2a:05:c9:b8:ea:4a:70:5a:64:1d:56:4c:b7:3d: 3f:1d:1d:14:f9:e7:d0:e4:9a:cf:47:3a:a3:1d:df:f6:75:6a: 33:24:12:df:ba:1d:aa:44:b4:96:76:b1:f7:04:c4:08:80:33: 45:2c:c2:f1:8a:fa:67:c3:54:6f:ca:9e:ee:64:1b:60:00:4e: a2:b7:1a:3d:c6:cd:e1:0e:a5:a9:4f:2c:54:c8:41:08:f1:d4: 1a:f1:39:39:39:ae:4c:d1:28:b6:a4:7a:e4:7e:b9:95:f1:54: 76:c8:ca:9f:3a:59:ce:2a:83:b9:02:11:73:8e:0e:4d:1a:bb: 99:67:2f:8a:5f:c0:24:34:8f:7f:2d:c0:b7:b0:6c:72:cc:e3: 91:de:a0:e5:3a:8b:4d:4e:19:84:67:8a:a1:9f:86:ea:44:24: 06:51:e9:9e:8a:ed:73:44:dd:32:1d:af:29:18:6b:91:db:df: 56:1f:1a:82:25:74:13:f8:e9:dc:81:73:33:68:f2:f5:fe:4e: ec:ff:d3:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF4pEsaOVE0UwUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmU4ZjhmNTYtODUxOS00OWNkLWE4ZWItNWQxMzA2ZWQyN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzONKx9xnvAadv/QZL7PiniXPETHSdUcBQ/3d mmwJHFIAfDkCaQEEZIMO41wagsWXXgEnInE6cSt+qTef1gtDEfpLe9h4XdDO+a/+ rIMg/nj9HsdXgm21WTp/hci7SpcdE0ULry4xfketcmjuXkWwS/zEpLx7xj+y7ANu kNRM3YedG1GPEMIRw2asUnq2psdseBPZezBM92z6vWRsG9SyFwNzDK5teMVM95P2 qHkiUiHdSQW9qpBzCgaHNPkIm2X5K86mgQLj3SUjix9xYuYEPzePMbSF82SgWlUb /O3WpGqtu5OVYc7WNisd9PuuYo9JnrMpVXHwV6DHdYVaVj/OFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALyeJ+xMxrbTY8+A4Ae8o1lZkNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmM5ODZkODMtYWRlOS0z NTg3LTk2ODctMjFhMjNmNDE2ZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqG6sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB82Wcg1+tuKCNXwmqYUfGgmj04KItnteuistZ7ZPJ4DKKc5lx3Grj/D 12fEoCP4IGohLib8eeUtQuYqBcm46kpwWmQdVky3PT8dHRT559Dkms9HOqMd3/Z1 ajMkEt+6HapEtJZ2sfcExAiAM0UswvGK+mfDVG/Knu5kG2AATqK3Gj3GzeEOpalP LFTIQQjx1BrxOTk5rkzRKLakeuR+uZXxVHbIyp86Wc4qg7kCEXOODk0au5lnL4pf wCQ0j38twLewbHLM45HeoOU6i01OGYRniqGfhupEJAZR6Z6K7XNE3TIdrykYa5Hb 31YfGoIldBP46dyBczNo8vX+Tuz/0/c= -----END CERTIFICATE-----Generated at Mon Mar 2 03:14:55 2026 by rpki-client