$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f0682be-ca5a-3c41-8a37-f1104ca18549.roa File: 1f0682be-ca5a-3c41-8a37-f1104ca18549.roa (raw, json) Hash identifier: nmYhXWbnAGn8I5M3/HGzxKcFOA5A26UkKAUCOBFs65Q= Subject key identifier: 63:97:DD:5C:76:1C:07:8B:CF:65:E9:81:5F:5E:3F:7D:44:15:DA:F5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC85413728925BA7628570 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f0682be-ca5a-3c41-8a37-f1104ca18549.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.148.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:85:41:37:28:92:5b:a7:62:85:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=ba75f6fe-4019-4338-bc27-4795c1e9c7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:84:b2:f0:99:38:23:78:c2:b5:f1:17:97: 1a:94:50:6a:ee:fd:38:87:05:32:98:8b:5a:6c:32: 39:9a:31:e5:45:01:bd:19:bb:e6:e4:03:9c:4a:20: 07:b0:07:80:10:2e:c4:bd:29:ae:49:cb:4a:aa:44: d2:2f:10:9c:51:b9:f0:ea:31:d8:56:ec:06:5f:a7: 86:57:8a:41:fd:84:30:79:ea:47:64:0e:35:10:0b: ae:e2:8b:bc:04:65:df:1c:e8:c5:2f:7e:ca:28:6e: 9c:b6:3c:f5:a8:e4:9b:ce:16:ef:1f:c4:e2:74:b9: 9a:fc:ca:d8:44:55:12:1d:c1:80:75:a1:4c:76:29: 6d:27:59:5c:be:da:da:e7:83:14:ab:08:b1:23:d5: 7e:8a:4f:8b:7b:08:97:86:98:87:01:da:1b:eb:d1: d5:2f:0b:8c:fb:b4:4c:a5:0a:0d:ce:53:39:d4:ab: b6:df:ae:af:d8:ff:86:7f:a0:37:a9:5f:29:e4:47: 11:10:f7:ce:e4:8f:a3:3f:23:a5:f8:f8:96:2d:57: 25:70:76:d9:db:67:7d:15:be:9f:80:09:d6:73:69: 28:12:c7:e5:f5:db:cc:5c:3b:b3:11:ed:8e:0b:8d: 75:bb:95:d9:12:50:67:dd:6c:a6:50:44:5f:14:a2: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:97:DD:5C:76:1C:07:8B:CF:65:E9:81:5F:5E:3F:7D:44:15:DA:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f0682be-ca5a-3c41-8a37-f1104ca18549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:fa:7c:5e:a0:30:dd:6b:12:2b:54:58:91:ab:6f:05:68:5c: 4e:94:55:a7:ea:99:24:4f:4e:68:22:52:39:5d:b0:b7:11:21: e9:84:11:bb:00:79:3a:17:39:03:a8:47:12:0e:0e:a6:1c:7d: c8:b5:16:15:a7:e3:6d:74:6c:2f:94:db:90:58:d3:1f:55:01: 2f:1c:dc:9d:c9:c7:ff:de:6f:76:78:0b:01:8f:e1:72:7f:48: 3f:03:f4:ca:03:80:6f:47:99:08:60:33:85:33:7e:ee:b3:4a: be:1a:d3:db:d8:56:94:d7:10:46:6c:e7:52:fb:b6:62:3b:83: 4c:dc:9f:97:a1:e9:6d:7a:51:4f:4d:b2:af:c6:a5:a2:5c:e4: cb:3e:91:c1:55:17:7e:e4:49:87:87:a3:73:ce:8d:4e:f2:62: d3:ed:9d:60:b7:f8:59:0a:da:8d:aa:c8:a5:92:4d:b3:25:13: 1f:2b:8a:dc:06:64:c9:dd:e1:c3:b4:8e:53:80:36:53:63:90: 10:1c:c7:f7:db:45:83:0c:a5:f8:ae:e9:48:f1:25:57:95:ad: f1:d4:98:e3:44:fc:87:60:34:26:42:13:21:e9:e5:7e:13:46: b5:a7:3a:2a:2d:86:7f:b7:fd:0c:9c:a5:21:0b:e6:2e:55:b5: 8e:30:90:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIVBNyiSW6dihXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YmE3NWY2ZmUtNDAxOS00MzM4LWJjMjctNDc5NWMxZTljN2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwGEsvCZOCN4wrXxF5calFBq7v04hwUymIta bDI5mjHlRQG9Gbvm5AOcSiAHsAeAEC7EvSmuSctKqkTSLxCcUbnw6jHYVuwGX6eG V4pB/YQweepHZA41EAuu4ou8BGXfHOjFL37KKG6ctjz1qOSbzhbvH8TidLma/MrY RFUSHcGAdaFMdiltJ1lcvtra54MUqwixI9V+ik+LewiXhpiHAdob69HVLwuM+7RM pQoNzlM51Ku2366v2P+Gf6A3qV8p5EcREPfO5I+jPyOl+PiWLVclcHbZ22d9Fb6f gAnWc2koEsfl9dvMXDuzEe2OC411u5XZElBn3WymUERfFKJAbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOX3Vx2HAeLz2XpgV9eP31EFdr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWYwNjgyYmUtY2E1YS0z YzQxLThhMzctZjExMDRjYTE4NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn6fF6gMN1rEitUWJGrbwVoXE6UVafqmSRPTmgiUjldsLcRIemEEbsA eToXOQOoRxIODqYcfci1FhWn4210bC+U25BY0x9VAS8c3J3Jx//eb3Z4CwGP4XJ/ SD8D9MoDgG9HmQhgM4Uzfu6zSr4a09vYVpTXEEZs51L7tmI7g0zcn5eh6W16UU9N sq/GpaJc5Ms+kcFVF37kSYeHo3POjU7yYtPtnWC3+FkK2o2qyKWSTbMlEx8ritwG ZMnd4cO0jlOANlNjkBAcx/fbRYMMpfiu6UjxJVeVrfHUmONE/IdgNCZCEyHp5X4T RrWnOiothn+3/QycpSEL5i5VtY4wkLA= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:00 2026 by rpki-client