$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39c89063-d777-3702-8ec9-a6874e2fae1d.roa File: 39c89063-d777-3702-8ec9-a6874e2fae1d.roa (raw, json) Hash identifier: t/55DmMYLorEzWyGgaUHbwFCXtwtHMFB5W4HCADmg7Q= Subject key identifier: C2:4D:25:1D:1D:5E:C4:5C:AD:1C:01:D0:95:98:2D:6D:B4:1E:68:5F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CE36226D747B7407E69B1FEC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39c89063-d777-3702-8ec9-a6874e2fae1d.roa Signing time: Tue 17 Feb 2026 02:00:31 +0000 ROA not before: Tue 17 Feb 2026 02:00:31 +0000 ROA not after: Mon 18 May 2026 01:00:31 +0000 asID: 54253 IP address blocks: 40.233.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:62:26:d7:47:b7:40:7e:69:b1:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 17 02:00:31 2026 GMT Not After : May 18 01:00:31 2026 GMT Subject: CN=2bd347f1-0472-4b92-9c09-1b8685393f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:69:98:8f:f6:1b:86:5d:d5:1b:51:b4:b3: 4a:52:c7:21:13:6f:d7:82:e9:39:20:7c:7b:4b:1a: 53:5e:43:04:04:a8:57:8b:f2:68:64:23:f0:1c:25: e6:8e:7c:c8:23:b7:46:11:4d:d7:7d:33:51:0b:37: 62:3e:51:f7:f6:8b:8f:ad:eb:a1:f8:a4:fd:bb:07: d9:50:ef:f5:b7:b1:6a:e3:f7:60:af:1e:b3:d8:66: c5:7c:73:8a:8f:08:43:d7:70:a8:74:91:8c:2a:2e: 6c:68:96:6b:5c:e3:18:33:e3:a5:1c:a5:61:0a:5e: 90:4f:9a:26:a1:75:8c:db:9f:ba:2c:f6:69:62:27: 93:03:b7:5a:51:7c:56:0a:61:00:50:7f:09:bd:8b: d8:65:80:87:21:89:2c:35:48:e8:c0:af:3c:7a:52: 98:9a:23:e9:6b:99:92:47:34:f1:82:19:9e:b3:a7: 3a:fb:20:ce:2b:61:e6:19:73:10:91:46:43:57:78: 64:2c:b3:ad:9c:f4:1e:12:a6:d4:f1:aa:85:92:e1: 2a:1c:c5:ee:93:12:33:24:3c:4c:db:4b:2e:e8:77: 3c:e1:5c:d6:68:58:6a:e9:34:00:f1:af:00:dd:00: 55:85:23:fb:72:c0:96:09:1e:5f:85:fb:a9:25:4c: 91:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4D:25:1D:1D:5E:C4:5C:AD:1C:01:D0:95:98:2D:6D:B4:1E:68:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39c89063-d777-3702-8ec9-a6874e2fae1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 40.233.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c1:8c:6f:4e:97:8f:fd:54:8c:eb:d9:7f:de:f3:a9:33:6b: c7:01:10:0a:a7:83:02:39:d0:76:74:a0:fd:0b:a6:6b:07:3b: 2d:72:81:c2:6e:3c:d5:76:01:a5:ca:04:11:33:f9:4c:34:b9: de:b4:e2:6a:85:25:a3:61:2f:3d:86:9c:2a:82:88:ad:3b:70: 9b:88:50:c6:eb:56:ef:20:49:14:24:de:21:99:a3:5d:1b:07: 79:c7:6d:67:8a:1c:6b:a7:72:55:39:0d:78:c2:02:47:4c:a3: 2b:b7:f4:4a:eb:d4:63:b7:e8:99:b8:5b:da:95:fc:06:17:43: 96:e2:a2:da:4a:0d:5d:19:41:e6:bd:58:a7:aa:1c:b9:dd:90: 91:16:1b:06:2a:4a:55:a3:1d:f2:6a:9f:be:48:c4:21:70:12: be:9c:91:a9:1d:34:27:be:1e:d1:da:5d:44:fc:e6:03:5a:fe: d2:dd:df:c9:d7:60:c8:4c:1f:a4:de:db:c8:37:75:63:91:05: a1:70:4a:9a:db:66:2f:1d:83:6e:c0:9e:4e:5a:87:bc:ee:e5: 9c:73:fb:11:67:a2:f8:9b:96:7c:f7:57:60:d8:d6:23:96:ad: 54:79:d0:70:07:43:84:f5:9e:07:2a:62:e3:95:97:1c:85:52: 63:c8:10:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzjYibXR7dAfmmx/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk MmJkMzQ3ZjEtMDQ3Mi00YjkyLTljMDktMWI4Njg1MzkzZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DdpmI/2G4Zd1RtRtLNKUschE2/Xguk5IHx7 SxpTXkMEBKhXi/JoZCPwHCXmjnzII7dGEU3XfTNRCzdiPlH39ouPreuh+KT9uwfZ UO/1t7Fq4/dgrx6z2GbFfHOKjwhD13CodJGMKi5saJZrXOMYM+OlHKVhCl6QT5om oXWM25+6LPZpYieTA7daUXxWCmEAUH8JvYvYZYCHIYksNUjowK88elKYmiPpa5mS RzTxghmes6c6+yDOK2HmGXMQkUZDV3hkLLOtnPQeEqbU8aqFkuEqHMXukxIzJDxM 20su6Hc84VzWaFhq6TQA8a8A3QBVhSP7csCWCR5fhfupJUyRqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJNJR0dXsRcrRwB0JWYLW20HmhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzljODkwNjMtZDc3Ny0z NzAyLThlYzktYTY4NzRlMmZhZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKOkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3BjG9Ol4/9VIzr2X/e86kza8cBEAqngwI50HZ0oP0LpmsHOy1ygcJu PNV2AaXKBBEz+Uw0ud604mqFJaNhLz2GnCqCiK07cJuIUMbrVu8gSRQk3iGZo10b B3nHbWeKHGunclU5DXjCAkdMoyu39Err1GO36Jm4W9qV/AYXQ5biotpKDV0ZQea9 WKeqHLndkJEWGwYqSlWjHfJqn75IxCFwEr6ckakdNCe+HtHaXUT85gNa/tLd38nX YMhMH6Te28g3dWORBaFwSprbZi8dg27Ank5ah7zu5Zxz+xFnoviblnz3V2DY1iOW rVR50HAHQ4T1ngcqYuOVlxyFUmPIEEQ= -----END CERTIFICATE-----Generated at Mon Mar 2 03:12:29 2026 by rpki-client