$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eb28e405-1d03-3705-8b7c-db9aa75025c1.roa File: eb28e405-1d03-3705-8b7c-db9aa75025c1.roa (raw, json) Hash identifier: HK1ljbPpc6O5uA3jMJFp2qAnnkC9AqkxUqwc8CooGK4= Subject key identifier: 8F:D3:7F:5A:42:F5:6C:2C:2D:8F:FB:7E:E0:D7:3E:B0:CE:0C:AD:4E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D02178726AB77A9A7365358C8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eb28e405-1d03-3705-8b7c-db9aa75025c1.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 31898 IP address blocks: 157.137.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:87:26:ab:77:a9:a7:36:53:58:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=1445875c-ba6e-42e8-9d37-c9dc7fd4403d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:6f:9e:6c:ef:36:42:8b:cd:ce:a2:a9:14: 11:d5:d1:83:bb:72:80:f5:3e:af:d9:29:31:68:4a: 94:74:af:b2:9a:78:dc:ae:22:d3:98:b5:d2:d1:68: 89:14:ef:92:82:b0:2a:fc:e7:80:69:6a:5b:cb:93: aa:e7:75:91:37:23:a2:58:75:29:03:a3:da:09:f1: b7:9e:dd:1b:d8:a9:73:8e:c6:12:7c:21:0d:ad:0a: 79:0a:25:f0:9a:38:23:59:20:23:3b:60:58:0d:d1: e2:38:ea:21:55:2f:69:5e:6d:a8:cb:50:e4:d7:b7: 7b:d7:51:dd:f3:c0:6b:29:ff:17:70:5a:fb:d1:f4: d9:ef:cf:18:f4:f5:4c:67:b9:de:b5:c9:51:e6:33: 75:90:ff:6f:fc:87:8e:06:23:e1:ad:a8:96:c1:96: ed:57:96:c2:47:8b:41:e1:48:66:c0:1d:4e:b7:83: 24:0e:68:03:88:0b:16:e8:ad:8b:ed:c3:0f:25:09: 25:be:0c:53:0d:04:3d:31:5e:a5:22:74:25:cb:ba: d7:a6:86:9c:00:a6:d9:d0:3f:98:f0:d9:ba:8c:51: 03:50:10:c4:53:be:12:5f:fe:64:d1:38:9f:df:dc: 4e:52:a3:db:88:ad:0a:c0:e2:dc:8c:d3:09:e7:3a: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D3:7F:5A:42:F5:6C:2C:2D:8F:FB:7E:E0:D7:3E:B0:CE:0C:AD:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eb28e405-1d03-3705-8b7c-db9aa75025c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:8e:21:45:3a:f9:ee:1c:17:22:8e:3f:3c:57:d6:40:bc:1a: e1:b6:4d:72:eb:36:62:82:c9:4f:55:36:a7:c8:ac:f1:8b:be: a9:a2:07:64:83:6f:b4:35:42:ef:f0:04:84:e8:97:f8:82:db: 9b:c2:51:ba:ae:5a:da:f4:37:ad:60:fe:66:07:16:d4:87:de: 42:ca:9c:9b:21:95:93:70:a4:eb:50:79:52:1f:ab:d9:af:55: 99:bb:1f:9d:51:b2:6a:fc:b4:20:36:01:4b:e1:50:70:56:62: a2:f1:5a:10:3d:34:2c:d2:7f:08:e5:23:d3:48:27:c6:8e:0d: 61:c9:c0:7f:d6:9f:33:57:78:d6:f3:03:58:77:7b:2d:c8:49: 0f:37:eb:c6:15:10:6c:7b:55:d8:d8:17:43:8a:6f:84:09:4e: 68:eb:31:ca:9d:c5:1a:20:a1:fc:d4:ad:fe:3d:e2:73:66:c4: 22:84:94:8e:50:98:6b:4c:78:28:b1:e9:0e:bb:29:d1:ac:3c: d0:4e:01:66:f2:86:0a:8f:a5:87:0c:cb:9f:97:15:65:77:a8: d1:44:44:61:db:e2:f9:8f:13:28:7d:cb:72:b7:0c:d2:b1:44: d4:9c:cc:66:e0:91:df:9c:64:64:f2:aa:06:9e:85:ee:cf:c8: c7:f6:5c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF4cmq3eppzZTWMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTQ0NTg3NWMtYmE2ZS00MmU4LTlkMzctYzlkYzdmZDQ0MDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+1vnmzvNkKLzc6iqRQR1dGDu3KA9T6v2Skx aEqUdK+ymnjcriLTmLXS0WiJFO+SgrAq/OeAaWpby5Oq53WRNyOiWHUpA6PaCfG3 nt0b2KlzjsYSfCENrQp5CiXwmjgjWSAjO2BYDdHiOOohVS9pXm2oy1Dk17d711Hd 88BrKf8XcFr70fTZ788Y9PVMZ7netclR5jN1kP9v/IeOBiPhraiWwZbtV5bCR4tB 4UhmwB1Ot4MkDmgDiAsW6K2L7cMPJQklvgxTDQQ9MV6lInQly7rXpoacAKbZ0D+Y 8Nm6jFEDUBDEU74SX/5k0Tif39xOUqPbiK0KwOLcjNMJ5zoEdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/Tf1pC9WwsLY/7fuDXPrDODK1OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWIyOGU0MDUtMWQwMy0z NzA1LThiN2MtZGI5YWE3NTAyNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYlqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqOIUU6+e4cFyKOPzxX1kC8GuG2TXLrNmKCyU9VNqfIrPGLvqmiB2SD b7Q1Qu/wBITol/iC25vCUbquWtr0N61g/mYHFtSH3kLKnJshlZNwpOtQeVIfq9mv VZm7H51Rsmr8tCA2AUvhUHBWYqLxWhA9NCzSfwjlI9NIJ8aODWHJwH/WnzNXeNbz A1h3ey3ISQ8368YVEGx7VdjYF0OKb4QJTmjrMcqdxRogofzUrf494nNmxCKElI5Q mGtMeCix6Q67KdGsPNBOAWbyhgqPpYcMy5+XFWV3qNFERGHb4vmPEyh9y3K3DNKx RNSczGbgkd+cZGTyqgaehe7PyMf2XFQ= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:27 2026 by rpki-client