$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa File: 3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa (raw, json) Hash identifier: Xk3c0WoP5UotX5tKlxTt80mARtshtgyNUblScOjGhOw= Subject key identifier: DA:7B:BA:B7:AF:AF:1F:E6:26:A3:90:E5:5A:81:78:0A:CB:D0:5C:21 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D021787AA6822BFD26E6423C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 31898 IP address blocks: 157.137.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:87:aa:68:22:bf:d2:6e:64:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=e25b95d8-e735-427f-ad54-98925a3d628d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:25:ed:39:ae:73:79:66:19:8e:2d:5f:ec:78: 85:39:b8:10:b8:bf:d5:e0:ef:42:15:04:8e:fb:60: 66:b4:b6:19:b8:a8:a3:1d:d5:71:cc:31:ad:23:e8: 16:b9:5b:c6:bf:3d:18:77:f8:eb:d0:d9:23:a1:57: ff:9e:ff:76:3d:7f:47:bb:57:5b:cd:3e:e6:d4:fe: 8a:8b:36:4b:55:b5:0a:43:e8:df:3c:89:54:fb:9a: af:27:f1:ad:aa:d1:d7:1b:68:ec:c9:cd:9c:97:6e: 1e:25:36:b0:ed:ea:ff:51:73:e3:07:75:64:7a:cb: c5:80:63:17:ca:6a:6c:fc:6b:33:d7:c8:df:8f:2e: 5a:13:42:8a:a6:78:5b:39:86:a3:4f:58:3f:5c:19: 41:2f:89:1b:4e:b1:62:fa:f9:8f:61:93:f8:dc:b2: 0f:0b:46:98:65:d2:64:36:ad:3b:63:a7:0c:1a:d8: 59:02:91:5b:c2:b7:5a:f9:fc:25:e1:94:36:87:a6: 4d:de:6f:05:a4:e4:65:8a:62:4d:2e:ed:4e:2c:c0: d4:6e:8b:d5:cd:d4:ce:5d:7f:25:25:02:75:9c:1c: 1c:64:d8:12:7a:d8:4e:09:11:59:68:8c:42:87:76: 90:f4:cc:e3:10:9b:30:fa:c1:c4:6e:13:15:6c:21: 73:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7B:BA:B7:AF:AF:1F:E6:26:A3:90:E5:5A:81:78:0A:CB:D0:5C:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3488ee3a-3f49-3965-a9e0-f9ed63dd1086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e0:71:32:56:c7:95:82:41:b1:2f:0c:16:5e:bf:3a:96:63: e5:fc:21:5a:fb:3c:71:ad:78:88:27:ee:d9:47:4d:a4:21:ef: f6:72:43:ce:3e:93:67:f8:d7:29:3b:20:93:b1:d8:1d:c8:71: 1d:4d:cf:56:3a:63:e5:2f:48:ec:67:04:fc:d4:c7:a7:48:80: 6a:dc:04:46:26:ed:d9:a0:06:04:a2:d6:c9:fa:4c:be:98:35: 15:06:fa:bd:7d:d6:2f:bd:54:15:2e:ec:68:6e:49:20:a5:f3: 10:3e:18:dc:94:d7:aa:7b:c5:9f:a3:36:61:3b:93:74:09:e0: da:b0:0f:73:97:63:0b:52:3e:9f:b4:94:68:a0:e6:d5:03:52: a8:7b:6b:36:04:d3:9f:b3:49:27:7d:d6:21:c6:c1:8a:99:07: cc:82:6c:16:44:a8:94:b8:16:55:1f:5a:b6:b7:3a:ec:10:76: 35:08:cb:5a:4e:ef:7e:70:df:7a:4d:9f:98:08:f0:b5:41:e2: ae:da:02:a6:02:17:6a:75:46:18:f3:15:c7:5b:45:9d:12:a0: 87:1c:09:f3:25:ed:e7:b5:ab:d7:3c:ea:cb:86:af:32:00:cb: fb:64:6e:3d:f7:e2:82:09:ad:ac:b7:6d:15:44:3c:d1:18:c0: 8b:5c:48:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF4eqaCK/0m5kI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTI1Yjk1ZDgtZTczNS00MjdmLWFkNTQtOTg5MjVhM2Q2MjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyXtOa5zeWYZji1f7HiFObgQuL/V4O9CFQSO +2BmtLYZuKijHdVxzDGtI+gWuVvGvz0Yd/jr0NkjoVf/nv92PX9Hu1dbzT7m1P6K izZLVbUKQ+jfPIlU+5qvJ/GtqtHXG2jsyc2cl24eJTaw7er/UXPjB3VkesvFgGMX ymps/Gsz18jfjy5aE0KKpnhbOYajT1g/XBlBL4kbTrFi+vmPYZP43LIPC0aYZdJk Nq07Y6cMGthZApFbwrda+fwl4ZQ2h6ZN3m8FpORlimJNLu1OLMDUbovVzdTOXX8l JQJ1nBwcZNgSethOCRFZaIxCh3aQ9MzjEJsw+sHEbhMVbCFzMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp7urevrx/mJqOQ5VqBeArL0FwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzQ4OGVlM2EtM2Y0OS0z OTY1LWE5ZTAtZjllZDYzZGQxMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnYmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7gcTJWx5WCQbEvDBZevzqWY+X8IVr7PHGteIgn7tlHTaQh7/ZyQ84+ k2f41yk7IJOx2B3IcR1Nz1Y6Y+UvSOxnBPzUx6dIgGrcBEYm7dmgBgSi1sn6TL6Y NRUG+r191i+9VBUu7GhuSSCl8xA+GNyU16p7xZ+jNmE7k3QJ4NqwD3OXYwtSPp+0 lGig5tUDUqh7azYE05+zSSd91iHGwYqZB8yCbBZEqJS4FlUfWra3OuwQdjUIy1pO 735w33pNn5gI8LVB4q7aAqYCF2p1RhjzFcdbRZ0SoIccCfMl7ee1q9c86suGrzIA y/tkbj334oIJray3bRVEPNEYwItcSII= -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:48 2026 by rpki-client