$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa File: cdaf3e33-82e0-3076-92c2-d497982c93fc.roa (raw, json) Hash identifier: cKIV9aGPcE5sWnb8BZpBy6UELh3xXs6Qt/u+OhJwLZI= Subject key identifier: 2C:9D:61:1D:3B:B2:11:11:3D:56:1D:FF:FA:21:B9:22:47:9B:26:3F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CF6ECCD560644A9AAEAEE3180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 54253 IP address blocks: 149.118.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:cd:56:06:44:a9:aa:ea:ee:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=8fd0480a-0848-4c41-b564-24f1f11dcdca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:43:a8:44:59:b6:9e:37:bc:c3:f1:6f:03: 69:f0:8e:db:c4:0e:b1:f0:7f:51:32:54:04:ba:b1: 8b:b6:19:00:72:8d:db:38:97:d4:80:28:a5:c5:55: 5c:42:60:34:23:94:4b:1a:79:23:f5:e7:ea:4d:8a: b4:d7:d6:d9:e5:06:f6:72:5e:ad:32:b8:59:b1:62: ad:e1:4b:ef:25:24:56:77:8c:23:9c:96:57:7b:ff: 79:bc:2f:0b:f8:0f:7b:79:41:7b:3f:32:5e:c0:60: c4:9a:35:77:eb:7c:05:e9:c3:0b:df:44:35:24:40: 1f:f0:31:a5:b4:62:da:15:59:55:50:6b:8f:77:6f: 0c:50:20:b0:bd:61:f9:18:ea:80:96:71:86:53:e4: d7:c7:c7:5a:03:d3:cc:34:a2:89:2d:a1:2f:4e:ad: 97:43:69:0b:da:5c:b1:1b:cf:f6:ed:19:0f:62:74: b7:b7:4b:ac:f6:8a:0e:43:06:dc:ea:0d:5b:f2:b3: fb:d1:c2:ac:f7:57:3b:4e:5d:4f:93:b3:1e:10:89: ff:df:9f:69:48:48:9e:3c:ef:2a:62:be:ea:ff:db: fb:cb:be:74:8b:0d:0c:2f:c4:99:d7:80:81:78:8b: 80:11:64:f2:df:17:dd:a3:ac:1b:97:b5:cd:d7:95: 97:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9D:61:1D:3B:B2:11:11:3D:56:1D:FF:FA:21:B9:22:47:9B:26:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:58:70:00:c7:15:11:68:58:0b:2a:ac:74:82:71:2f:10:34: 30:2d:54:f1:dd:a4:32:b8:8d:f2:1c:da:c7:98:ae:58:dc:34: 17:00:fc:9e:fc:be:81:4f:fe:bb:68:fe:77:2b:1a:e2:34:0f: e2:ab:ac:cc:b2:f1:c7:fb:c6:a2:45:b2:47:53:fd:2a:35:26: 0f:9a:2f:29:7a:ae:20:b7:a1:54:d8:43:51:81:e1:3a:98:61: 22:2e:65:fd:27:e9:7c:75:0d:22:4b:11:7a:ec:25:ad:3a:be: fb:77:ab:d8:40:1c:a0:7f:46:53:d2:97:a0:2a:fd:b5:c9:66: ce:ea:84:72:e3:e1:02:60:82:6c:61:93:34:ce:e0:ff:ea:0f: 2c:46:eb:b3:4c:a1:e5:68:a4:d9:4f:5b:ae:c7:5b:f5:c6:5f: d7:34:b0:90:77:c4:f8:ab:f9:59:9b:0b:b5:7d:c0:db:59:23: 5d:fd:6a:a2:ff:87:fa:84:0e:dc:40:35:e1:a0:2f:49:7c:6f: ae:f2:fe:ca:97:ee:fe:74:2a:1b:43:3f:19:8f:56:37:69:d1: 8d:76:31:99:18:92:5b:59:64:71:1b:1b:7b:47:24:e4:90:6f: 9a:78:a6:fd:39:4c:7f:2c:8b:64:85:2c:78:43:32:57:c4:5c: 95:f6:20:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27M1WBkSpquruMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk OGZkMDQ4MGEtMDg0OC00YzQxLWI1NjQtMjRmMWYxMWRjZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+BDqERZtp43vMPxbwNp8I7bxA6x8H9RMlQE urGLthkAco3bOJfUgCilxVVcQmA0I5RLGnkj9efqTYq019bZ5Qb2cl6tMrhZsWKt 4UvvJSRWd4wjnJZXe/95vC8L+A97eUF7PzJewGDEmjV363wF6cML30Q1JEAf8DGl tGLaFVlVUGuPd28MUCCwvWH5GOqAlnGGU+TXx8daA9PMNKKJLaEvTq2XQ2kL2lyx G8/27RkPYnS3t0us9ooOQwbc6g1b8rP70cKs91c7Tl1Pk7MeEIn/359pSEiePO8q Yr7q/9v7y750iw0ML8SZ14CBeIuAEWTy3xfdo6wbl7XN15WXrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCydYR07shERPVYd//ohuSJHmyY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2RhZjNlMzMtODJlMC0z MDc2LTkyYzItZDQ5Nzk4MmM5M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlXb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJYcADHFRFoWAsqrHSCcS8QNDAtVPHdpDK4jfIc2seYrljcNBcA/J78 voFP/rto/ncrGuI0D+KrrMyy8cf7xqJFskdT/So1Jg+aLyl6riC3oVTYQ1GB4TqY YSIuZf0n6Xx1DSJLEXrsJa06vvt3q9hAHKB/RlPSl6Aq/bXJZs7qhHLj4QJggmxh kzTO4P/qDyxG67NMoeVopNlPW67HW/XGX9c0sJB3xPir+VmbC7V9wNtZI139aqL/ h/qEDtxANeGgL0l8b67y/sqX7v50KhtDPxmPVjdp0Y12MZkYkltZZHEbG3tHJOSQ b5p4pv05TH8si2SFLHhDMlfEXJX2IPk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:55:07 2026 by rpki-client