$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa File: 4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa (raw, json) Hash identifier: a76HES7R+Bgxl08m3ueV12806ns8Kxfc9km1EwZ/LIQ= Subject key identifier: 44:22:4B:71:8F:AF:1F:28:0A:FD:77:27:6F:E4:30:74:0D:8D:BC:CC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CE62CBC34A128B37AC647CB20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa Signing time: Wed 18 Feb 2026 02:00:31 +0000 ROA not before: Wed 18 Feb 2026 02:00:31 +0000 ROA not after: Tue 19 May 2026 01:00:31 +0000 asID: 54253 IP address blocks: 170.52.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e6:2c:bc:34:a1:28:b3:7a:c6:47:cb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 18 02:00:31 2026 GMT Not After : May 19 01:00:31 2026 GMT Subject: CN=3890ad4c-b06b-4459-ac84-594962483fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:02:c5:59:42:7f:5f:45:35:60:1a:45:36:fd: 6a:d0:70:15:91:78:5b:66:70:59:fa:ed:30:9f:38: 4a:b5:43:0c:63:bf:b7:f4:ad:9a:95:da:1b:b9:77: 37:e2:26:9f:53:29:9d:0d:4b:17:0e:7e:a1:bb:5e: 43:1b:b4:9c:fd:d8:a8:23:a9:13:4d:8a:6d:de:88: 4b:f7:69:fa:05:d8:3b:8b:84:35:2c:8f:02:48:6e: b2:63:a8:34:dc:60:2e:25:51:61:b4:6b:5d:8c:2c: 06:2f:42:69:27:a3:40:da:b2:b2:e1:58:f6:73:cf: 04:e5:b6:0a:68:ba:66:3e:bf:c8:56:35:e8:59:38: d3:13:d9:42:da:c1:a8:54:14:fc:27:23:f0:11:36: ae:dd:08:dc:b0:89:72:84:7a:1e:d1:5f:8b:56:7f: e3:b7:a0:cc:dc:7b:a2:b5:66:5a:bd:f8:12:c6:72: 8f:9f:e6:33:95:6b:f9:47:21:cf:64:b3:77:4c:5f: 51:92:6a:94:7d:0a:34:fc:4a:27:00:8c:05:e7:dc: ab:2a:a3:b7:2a:08:9f:0e:fa:ec:5f:b8:c5:36:73: e7:52:10:d8:25:19:cf:bc:a0:eb:56:ce:d6:d0:45: b2:46:bc:b8:34:a2:1a:f1:26:7a:22:9b:09:32:41: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:22:4B:71:8F:AF:1F:28:0A:FD:77:27:6F:E4:30:74:0D:8D:BC:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.52.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1e:b0:43:31:aa:9f:47:5f:a4:89:76:02:b3:90:63:10:44: 63:d8:df:a7:f5:04:95:e8:39:62:92:71:4f:1a:09:99:d2:a9: de:3f:c0:3a:9a:05:24:ad:a3:b4:f3:ad:5e:55:12:91:60:50: 5d:58:72:2b:fc:60:44:08:1c:25:d8:19:31:bd:19:31:6d:c9: 2d:3c:50:67:27:2b:d7:a5:75:dc:98:8f:b4:b9:17:aa:6d:c3: 4d:ef:df:a9:4d:9e:1f:5b:47:54:60:cb:bc:bd:52:27:90:25: ba:de:69:93:40:dc:44:a3:5c:14:30:c4:cc:c0:07:ac:5b:45: b3:e0:6f:8f:9b:c6:36:33:f4:d7:7e:98:41:f9:a0:24:08:c3: d6:d3:41:6d:bf:99:47:d9:7e:7c:5e:be:02:f2:a5:da:36:0a: 1b:99:c3:be:7a:5b:a3:c9:3a:d5:5c:b4:3d:db:37:19:b3:70: 87:ad:e6:f7:60:19:ba:71:0a:c7:af:79:89:32:9b:50:ce:bc: f7:2d:2a:e1:a4:a7:2b:00:15:00:78:8b:96:c8:ed:b6:2d:77: 83:97:93:0a:b6:92:7e:31:6e:73:c6:38:2f:aa:a2:24:e8:30: e6:b7:85:72:cf:d6:3d:ec:d5:58:eb:8a:c2:36:53:7d:4d:26: d2:00:65:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLLw0oSizesZHyyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk Mzg5MGFkNGMtYjA2Yi00NDU5LWFjODQtNTk0OTYyNDgzZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwLFWUJ/X0U1YBpFNv1q0HAVkXhbZnBZ+u0w nzhKtUMMY7+39K2aldobuXc34iafUymdDUsXDn6hu15DG7Sc/dioI6kTTYpt3ohL 92n6Bdg7i4Q1LI8CSG6yY6g03GAuJVFhtGtdjCwGL0JpJ6NA2rKy4Vj2c88E5bYK aLpmPr/IVjXoWTjTE9lC2sGoVBT8JyPwETau3QjcsIlyhHoe0V+LVn/jt6DM3Hui tWZavfgSxnKPn+YzlWv5RyHPZLN3TF9RkmqUfQo0/EonAIwF59yrKqO3KgifDvrs X7jFNnPnUhDYJRnPvKDrVs7W0EWyRry4NKIa8SZ6IpsJMkEMDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQiS3GPrx8oCv13J2/kMHQNjbzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDk4OWVjYzMtN2IxYy0z YTIxLWIxZDktY2VlMTk5ZGRmOGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqjQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgesEMxqp9HX6SJdgKzkGMQRGPY36f1BJXoOWKScU8aCZnSqd4/wDqa BSSto7TzrV5VEpFgUF1Yciv8YEQIHCXYGTG9GTFtyS08UGcnK9elddyYj7S5F6pt w03v36lNnh9bR1Rgy7y9UieQJbreaZNA3ESjXBQwxMzAB6xbRbPgb4+bxjYz9Nd+ mEH5oCQIw9bTQW2/mUfZfnxevgLypdo2ChuZw756W6PJOtVctD3bNxmzcIet5vdg GbpxCseveYkym1DOvPctKuGkpysAFQB4i5bI7bYtd4OXkwq2kn4xbnPGOC+qoiTo MOa3hXLP1j3s1VjrisI2U31NJtIAZYM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:12:16 2026 by rpki-client