$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07f9ee14-0c81-31ff-ba93-f64c0e559ac8.roa File: 07f9ee14-0c81-31ff-ba93-f64c0e559ac8.roa (raw, json) Hash identifier: hWBpmWFBtSPKbue78YfgEkLMEmHSape6BYhQPhw+Vgg= Subject key identifier: 4F:69:CF:98:5B:8D:22:52:2A:F1:2A:C4:78:6E:7E:55:E8:F4:F7:0F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CB81C95699A6FA138611570E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07f9ee14-0c81-31ff-ba93-f64c0e559ac8.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.213.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:95:69:9a:6f:a1:38:61:15:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=12606d02-f570-4aa5-8f79-37ea20bdd528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a4:2b:e5:59:4e:39:c7:8c:82:09:83:84:c6: a3:84:66:6a:51:66:3a:e4:98:0e:86:80:46:e6:f4: 36:55:51:f3:09:a2:90:24:b3:84:d5:60:72:ba:0f: 3a:6e:a3:a5:17:63:49:62:da:ec:fc:e5:cf:cb:2e: 65:32:d0:c8:b9:63:40:09:63:cf:6c:5d:10:08:01: 98:69:c8:ee:da:a7:4a:89:1a:4d:b2:dd:69:52:e9: 96:3c:b5:9e:51:9d:10:58:74:ba:c4:52:87:1b:ab: 51:3a:35:1a:17:5b:5d:02:7b:a0:fc:b9:99:2a:78: 13:dc:42:1f:8b:5f:b4:08:b3:58:9c:91:fd:9d:4a: 90:7c:78:d6:3a:ab:2e:38:5c:a5:7f:a6:26:5c:f8: 03:20:f3:7c:81:15:ac:77:97:43:41:cd:73:d5:14: 59:3f:3e:c7:cd:13:e7:2e:bb:bb:0a:91:96:fd:16: ea:f2:d2:95:04:a2:3b:df:50:ed:9d:d3:80:2d:69: b9:c6:c7:3f:5d:17:1d:e1:a0:82:73:ba:b9:0f:0c: 12:86:6a:ab:78:99:27:6a:e3:53:1a:1e:68:3a:8d: d1:e9:a8:3d:dc:3b:99:e3:17:82:f3:0d:5b:b8:32: 80:8b:21:e7:d1:7b:f1:38:8e:2e:47:91:da:6f:f9: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:69:CF:98:5B:8D:22:52:2A:F1:2A:C4:78:6E:7E:55:E8:F4:F7:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07f9ee14-0c81-31ff-ba93-f64c0e559ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5c:a7:0c:6d:42:26:b3:6b:b1:53:58:45:d0:37:7a:5f:74: 1e:58:2a:3a:66:ac:fa:f2:8a:78:bc:c1:43:41:2e:19:e6:87: e5:14:3a:c2:61:b3:c9:b4:a8:48:47:47:ef:92:0c:31:4c:cf: e0:d3:28:0a:42:5b:9d:87:90:00:7c:09:75:1d:2b:bf:f2:c7: 88:24:bc:5b:28:17:e2:ab:3e:61:03:9f:54:20:ba:43:da:b4: fd:3c:e0:69:8c:38:a6:b8:7c:f4:5c:18:cb:11:08:b7:54:dc: 81:78:8e:e0:09:84:92:f5:83:b1:41:71:27:08:3e:d2:0d:ac: 35:c5:4c:f3:1f:da:1f:ab:3f:40:cd:8c:e4:64:df:d3:1c:38: 5c:e8:27:0b:f1:fa:43:72:56:e6:f7:d1:bb:b4:93:7d:14:03: 46:93:e9:15:07:99:f6:e2:39:ce:24:79:c3:0b:5b:4c:90:fa: 5c:68:29:19:77:b6:6f:55:88:bc:73:55:79:fa:5e:b0:ae:ff: 0f:12:25:54:42:80:58:bc:48:fa:2f:3b:df:35:a1:cd:01:2d: 5c:09:aa:fa:83:f1:33:44:8f:4e:30:af:18:a5:2e:e2:e2:ac: df:0a:88:87:b2:60:74:2b:e9:97:6c:4e:f3:74:7d:37:77:f6: 8c:b6:8f:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HJVpmm+hOGEVcOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk MTI2MDZkMDItZjU3MC00YWE1LThmNzktMzdlYTIwYmRkNTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+KQr5VlOOceMggmDhMajhGZqUWY65JgOhoBG 5vQ2VVHzCaKQJLOE1WByug86bqOlF2NJYtrs/OXPyy5lMtDIuWNACWPPbF0QCAGY acju2qdKiRpNst1pUumWPLWeUZ0QWHS6xFKHG6tROjUaF1tdAnug/LmZKngT3EIf i1+0CLNYnJH9nUqQfHjWOqsuOFylf6YmXPgDIPN8gRWsd5dDQc1z1RRZPz7HzRPn Lru7CpGW/Rbq8tKVBKI731DtndOALWm5xsc/XRcd4aCCc7q5DwwShmqreJknauNT Gh5oOo3R6ag93DuZ4xeC8w1buDKAiyHn0XvxOI4uR5Hab/kcIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9pz5hbjSJSKvEqxHhuflXo9PcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDdmOWVlMTQtMGM4MS0z MWZmLWJhOTMtZjY0YzBlNTU5YWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgdWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxcpwxtQiaza7FTWEXQN3pfdB5YKjpmrPryini8wUNBLhnmh+UUOsJh s8m0qEhHR++SDDFMz+DTKApCW52HkAB8CXUdK7/yx4gkvFsoF+KrPmEDn1QgukPa tP084GmMOKa4fPRcGMsRCLdU3IF4juAJhJL1g7FBcScIPtINrDXFTPMf2h+rP0DN jORk39McOFzoJwvx+kNyVub30bu0k30UA0aT6RUHmfbiOc4kecMLW0yQ+lxoKRl3 tm9ViLxzVXn6XrCu/w8SJVRCgFi8SPovO981oc0BLVwJqvqD8TNEj04wrxilLuLi rN8KiIeyYHQr6ZdsTvN0fTd39oy2j8I= -----END CERTIFICATE-----Generated at Thu Feb 26 03:31:55 2026 by rpki-client