$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b24c156-f093-3d90-8cfc-13149056c5db.roa File: 1b24c156-f093-3d90-8cfc-13149056c5db.roa (raw, json) Hash identifier: Vh6Uozq8UJ7iLY+TmHQX5K6ygz+Dt4SfZrY607a4y9I= Subject key identifier: 98:87:C0:B7:22:C5:68:22:71:42:A0:16:72:26:BA:A6:7D:5F:2B:B9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC6BCDBA9E37E1AB1D01C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b24c156-f093-3d90-8cfc-13149056c5db.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.146.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:6b:cd:ba:9e:37:e1:ab:1d:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=2b6664a7-7981-4371-99f7-5419b735831a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:38:ca:96:f0:f5:b8:1f:49:cf:58:a7:b1: 47:f0:4a:1e:ef:67:4f:5b:6a:19:48:b9:20:1f:0f: e9:87:2d:0f:dc:bf:3e:3c:43:b6:fe:e0:96:ef:2a: 72:45:8b:d2:00:16:9a:3e:45:56:c4:f5:bd:4a:e2: 39:cb:19:ec:b0:34:d6:f3:b4:dd:9f:37:c7:6d:7a: cb:c8:5d:e1:5a:a7:b0:90:81:93:f1:66:c3:d9:52: 87:d6:99:70:e2:e6:ea:10:dc:09:49:41:c9:2b:33: c1:b4:a6:8b:37:01:9a:07:44:87:1d:f5:c5:5c:fb: 65:94:dd:65:79:20:2b:4c:e1:6b:95:fc:58:b8:3e: f0:2b:f0:b5:92:dd:b7:64:a8:0d:5d:33:81:f6:b8: 1f:b8:1e:cb:14:58:42:c3:b5:28:e0:ea:56:0b:bc: bf:e2:f3:7c:55:b7:58:34:8a:d2:09:1d:89:c7:ea: 91:9d:74:00:19:37:e3:bd:37:aa:30:14:16:45:76: fe:ed:07:5c:cd:16:e6:8d:b7:7e:8e:d9:19:f3:7c: d0:ee:74:85:20:40:54:34:1d:79:c5:20:a1:a0:57: e9:31:c7:6d:ed:64:c1:3a:ab:a7:4e:ae:38:a4:d4: b9:9f:38:51:7d:52:d3:c5:19:ab:e3:e2:45:54:14: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:87:C0:B7:22:C5:68:22:71:42:A0:16:72:26:BA:A6:7D:5F:2B:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b24c156-f093-3d90-8cfc-13149056c5db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:50:f4:0c:0f:48:d4:63:44:9c:cd:b7:c2:0a:78:37:0c:da: 4f:5f:ec:b4:92:b6:be:e3:34:56:59:17:ca:ad:bf:9d:58:97: bd:2a:dc:c3:2e:59:1d:24:6b:9f:66:c6:6f:ee:e0:f3:0b:cf: a7:83:a1:fa:2e:05:a2:4b:17:48:4b:65:8f:ee:0d:c5:a6:55: 9a:60:9a:9d:ce:05:e1:6c:b1:a3:ad:90:74:f1:ca:88:de:f0: 6e:59:0f:4b:5a:88:9c:bf:22:ab:80:00:bc:d5:1e:c2:c0:5d: aa:ee:89:f7:7c:5f:13:ce:fb:cb:fd:c1:b5:df:42:57:5d:95: fb:06:01:9d:29:82:dc:a4:81:09:c0:67:9d:5e:3a:dc:1c:8f: c1:21:5e:41:99:99:56:fa:5f:03:5f:f9:4b:5f:54:aa:36:c9: 2e:43:fa:71:3e:31:b8:8b:8f:93:82:e9:92:20:fa:0c:b6:e8: 1c:fa:ef:fb:46:3f:81:a9:07:ca:3e:05:1c:d1:d6:3f:20:69: 64:27:b4:68:0d:8d:71:37:27:a3:a3:41:21:b3:ce:0d:62:7b: d1:86:ec:b2:38:62:50:3f:bc:4a:3d:bf:aa:18:23:aa:b9:c1: 03:40:72:a8:6d:09:22:26:84:43:2c:e0:75:ef:31:dd:87:0e: e9:38:af:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvGvNup434asdAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk MmI2NjY0YTctNzk4MS00MzcxLTk5ZjctNTQxOWI3MzU4MzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8A4ypbw9bgfSc9Yp7FH8Eoe72dPW2oZSLkg Hw/phy0P3L8+PEO2/uCW7ypyRYvSABaaPkVWxPW9SuI5yxnssDTW87TdnzfHbXrL yF3hWqewkIGT8WbD2VKH1plw4ubqENwJSUHJKzPBtKaLNwGaB0SHHfXFXPtllN1l eSArTOFrlfxYuD7wK/C1kt23ZKgNXTOB9rgfuB7LFFhCw7Uo4OpWC7y/4vN8VbdY NIrSCR2Jx+qRnXQAGTfjvTeqMBQWRXb+7QdczRbmjbd+jtkZ83zQ7nSFIEBUNB15 xSChoFfpMcdt7WTBOqunTq44pNS5nzhRfVLTxRmr4+JFVBSJFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiHwLcixWgicUKgFnImuqZ9Xyu5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWIyNGMxNTYtZjA5My0z ZDkwLThjZmMtMTMxNDkwNTZjNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZIOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRQ9AwPSNRjRJzNt8IKeDcM2k9f7LSStr7jNFZZF8qtv51Yl70q3MMu WR0ka59mxm/u4PMLz6eDofouBaJLF0hLZY/uDcWmVZpgmp3OBeFssaOtkHTxyoje 8G5ZD0taiJy/IquAALzVHsLAXaruifd8XxPO+8v9wbXfQlddlfsGAZ0pgtykgQnA Z51eOtwcj8EhXkGZmVb6XwNf+UtfVKo2yS5D+nE+MbiLj5OC6ZIg+gy26Bz67/tG P4GpB8o+BRzR1j8gaWQntGgNjXE3J6OjQSGzzg1ie9GG7LI4YlA/vEo9v6oYI6q5 wQNAcqhtCSImhEMs4HXvMd2HDuk4r1o= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:59 2026 by rpki-client