$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f614de2-83e7-3369-91b1-24ce386cf8e5.roa File: 8f614de2-83e7-3369-91b1-24ce386cf8e5.roa (raw, json) Hash identifier: 7czyvRkrFYL9rznb2eLoqT1qYTpGtp1MGhIEgIcXoVE= Subject key identifier: 13:79:19:6A:CD:AB:71:0F:95:89:A0:C2:79:87:0E:23:00:95:48:E8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D014BFA1B94BD0667A0D22BC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f614de2-83e7-3369-91b1-24ce386cf8e5.roa Signing time: Fri 27 Feb 2026 19:10:28 +0000 ROA not before: Fri 27 Feb 2026 19:10:28 +0000 ROA not after: Thu 28 May 2026 18:10:28 +0000 asID: 54253 IP address blocks: 168.107.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:01:4b:fa:1b:94:bd:06:67:a0:d2:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 27 19:10:28 2026 GMT Not After : May 28 18:10:28 2026 GMT Subject: CN=d9c8bdb6-a08a-4b8b-9652-eb71bf2679fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:01:53:8d:98:d2:4d:0e:c9:2d:1b:d1:21: 4a:a7:8c:1e:2a:0e:76:96:9f:2f:a3:2e:db:12:b5: 53:f4:fe:d6:f8:ad:37:da:cb:55:c3:d4:53:74:94: 70:14:aa:50:cc:77:35:9b:af:17:62:5d:ca:ba:ae: 5a:4a:83:63:29:ac:63:ee:18:a8:ea:6d:e6:eb:3f: 0f:de:9e:3b:5a:b9:3f:d5:fa:68:c6:12:a5:41:d6: 8b:9b:0d:95:bd:86:65:9c:92:ed:4a:82:51:d4:1a: 3e:db:15:12:a0:fd:7f:ed:0e:ca:5f:8d:57:7c:92: 51:26:70:9b:34:a1:44:37:4c:86:9f:eb:71:9c:6c: 6f:92:d2:47:52:ce:ef:07:6e:5c:73:b2:36:b0:2b: ec:01:2b:66:a5:11:c9:66:39:24:72:ff:6d:ef:9b: 69:3a:8e:9e:1f:67:f9:36:d7:c5:83:ad:f8:9d:8f: 7f:aa:8a:2f:16:77:78:ac:82:56:fd:3a:e6:0c:9a: 62:d1:02:10:eb:0e:4c:30:d2:64:f6:6d:ca:14:c7: 3c:18:47:46:5a:9f:e8:87:a9:ac:ca:d7:bd:3b:62: 3c:91:b4:63:71:1a:ad:01:e6:0e:38:07:32:3d:5c: 82:ce:66:d0:db:99:d7:90:9e:5e:d7:88:3a:6d:7c: d5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:79:19:6A:CD:AB:71:0F:95:89:A0:C2:79:87:0E:23:00:95:48:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f614de2-83e7-3369-91b1-24ce386cf8e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f6:e7:8c:56:89:88:08:9b:b9:b3:e7:f0:01:9a:f0:50:1f: 66:1b:66:bc:ac:e0:63:4f:1c:12:2c:ac:f9:b1:c4:28:59:68: d1:f9:58:ad:d5:d1:93:fa:7f:19:3c:e5:74:d9:49:b7:9b:a1: 47:58:37:83:ba:44:d8:9d:77:e1:26:fb:ea:44:91:7b:61:8d: aa:11:6d:b2:2e:3e:be:81:60:f8:8e:6c:fe:ce:09:78:ed:20: f2:f1:4b:9e:56:2d:72:3f:29:57:da:1b:28:89:79:bb:8c:77: 46:fd:cd:de:3e:75:93:da:22:4a:70:dd:15:f5:f6:d9:30:9b: 5e:7f:ae:96:58:38:66:17:4e:00:6c:5d:94:ce:2d:d9:10:12: c3:77:93:dd:41:68:8d:19:f2:b9:6d:d7:07:9c:69:a8:52:2d: 09:74:6b:62:81:12:ac:28:0e:6d:cf:c3:83:e6:b9:5e:50:72: 8a:19:c2:94:9e:80:69:fa:af:cc:c1:cf:f7:63:84:1f:7d:dd: 32:c4:ff:e9:d2:7b:f4:05:3f:7e:cb:1f:d2:c5:ab:4f:77:47: cc:ba:b4:ba:9d:bd:fc:80:fe:69:62:7a:01:ca:91:46:3d:cf: f0:13:1f:9c:1e:78:88:98:b9:bb:ff:69:f1:0a:84:0c:40:fe: 51:98:7b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0BS/oblL0GZ6DSK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyNzE5MTAyOFoXDTI2MDUyODE4MTAyOFowLzEtMCsGA1UEAxMk ZDljOGJkYjYtYTA4YS00YjhiLTk2NTItZWI3MWJmMjY3OWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pkBU42Y0k0OyS0b0SFKp4weKg52lp8voy7b ErVT9P7W+K032stVw9RTdJRwFKpQzHc1m68XYl3Kuq5aSoNjKaxj7hio6m3m6z8P 3p47Wrk/1fpoxhKlQdaLmw2VvYZlnJLtSoJR1Bo+2xUSoP1/7Q7KX41XfJJRJnCb NKFEN0yGn+txnGxvktJHUs7vB25cc7I2sCvsAStmpRHJZjkkcv9t75tpOo6eH2f5 NtfFg634nY9/qoovFnd4rIJW/TrmDJpi0QIQ6w5MMNJk9m3KFMc8GEdGWp/oh6ms yte9O2I8kbRjcRqtAeYOOAcyPVyCzmbQ25nXkJ5e14g6bXzVvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN5GWrNq3EPlYmgwnmHDiMAlUjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGY2MTRkZTItODNlNy0z MzY5LTkxYjEtMjRjZTM4NmNmOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqGuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz254xWiYgIm7mz5/ABmvBQH2YbZrys4GNPHBIsrPmxxChZaNH5WK3V 0ZP6fxk85XTZSbeboUdYN4O6RNidd+Em++pEkXthjaoRbbIuPr6BYPiObP7OCXjt IPLxS55WLXI/KVfaGyiJebuMd0b9zd4+dZPaIkpw3RX19tkwm15/rpZYOGYXTgBs XZTOLdkQEsN3k91BaI0Z8rlt1wecaahSLQl0a2KBEqwoDm3Pw4PmuV5QcooZwpSe gGn6r8zBz/djhB993TLE/+nSe/QFP37LH9LFq093R8y6tLqdvfyA/mliegHKkUY9 z/ATH5weeIiYubv/afEKhAxA/lGYe5o= -----END CERTIFICATE-----Generated at Mon Mar 2 00:41:22 2026 by rpki-client