$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ff31159-10d7-3002-bb66-88de9c0b2368.roa File: 1ff31159-10d7-3002-bb66-88de9c0b2368.roa (raw, json) Hash identifier: HqT+x+MYzzD2LVR09XPRp6ppiaxai+XOpICspAljeSQ= Subject key identifier: 54:94:54:12:29:00:4A:AA:44:01:9C:D7:33:64:C4:DE:8D:46:BF:33 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC825151F0F14D450DFF58 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ff31159-10d7-3002-bb66-88de9c0b2368.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.152.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:82:51:51:f0:f1:4d:45:0d:ff:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=c450af6e-f0a0-47de-911d-0518ab88f64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:57:02:14:67:bf:5e:4d:65:eb:eb:86:8e:b0: 0e:5e:58:f0:db:51:3e:4e:16:07:ac:f4:a2:a4:0a: 62:a0:26:d2:79:87:8d:a1:28:b6:ea:e9:c4:ef:5c: ff:5b:1d:fb:8c:04:f6:a8:3c:d1:e1:a8:4c:89:26: 83:88:32:d0:01:b6:34:26:07:10:d7:97:de:1d:47: a4:49:a6:fb:70:32:a2:68:0c:d1:7b:8a:4a:93:e8: a3:4e:c3:aa:fb:04:49:ba:9c:cd:ef:8e:c4:41:16: 07:f0:b6:ef:0e:06:2d:90:06:24:fd:7c:bf:2f:c9: 53:fb:7c:ed:5f:3f:e5:5b:91:32:77:06:5d:4a:06: 37:87:6c:9e:dd:98:c7:82:1c:82:46:8b:11:9c:02: 89:1f:f0:7d:6b:50:20:3b:d2:3c:ca:80:79:65:a7: 70:ca:ed:0e:b4:c0:c1:66:75:d2:fd:bc:ba:d4:7a: 65:d5:6d:66:09:ee:7f:09:5b:34:14:92:af:00:be: 88:e3:66:80:1e:a2:25:11:8b:18:1d:1a:6a:6e:4d: 58:8e:3c:fd:f7:7b:39:1e:2d:9f:87:1b:2f:be:8a: 0a:e5:63:2b:17:6f:d6:07:6f:1a:e3:c0:c5:69:04: 16:f2:dc:69:27:35:53:c4:35:11:98:2a:aa:7b:6c: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:94:54:12:29:00:4A:AA:44:01:9C:D7:33:64:C4:DE:8D:46:BF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ff31159-10d7-3002-bb66-88de9c0b2368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.152.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a2:87:7f:25:c4:fe:1f:6b:8e:fe:61:65:b4:05:d4:9a:24: 65:ad:b9:78:70:0d:16:72:42:ba:86:27:e1:71:9e:f4:5e:a4: 5b:f5:ed:39:6f:21:82:6c:64:5f:4f:97:86:1b:57:ab:45:32: 40:85:00:42:26:2f:5b:58:5e:c2:d8:c3:98:25:69:3c:02:c3: 1e:29:65:02:5f:3e:f2:6a:ae:c0:53:ec:7b:3f:4e:6a:89:45: b8:fe:92:8d:6d:f8:3e:ad:68:72:9b:06:6a:50:f2:98:b2:71: 65:33:28:4c:3a:c5:76:de:70:3b:1b:70:bd:c4:f6:97:cb:de: 78:4d:db:52:e1:3d:07:8f:1e:2a:4e:e0:be:0b:2e:fc:c2:91: 6c:ec:ea:90:da:9a:4f:23:9a:db:dc:92:dc:b0:d1:61:38:7b: 4e:e8:1d:33:94:40:7e:a8:83:af:93:47:a7:10:15:2e:02:50: 8a:dd:9f:ac:1a:79:89:32:c4:d9:69:45:e2:b1:27:49:fa:b1: 30:db:99:3e:f1:90:ac:53:98:12:36:a3:ff:1d:92:c4:9d:0d: 55:90:20:06:26:12:2e:4d:1f:68:1f:b2:47:6a:2f:ca:00:b6: 79:9a:59:2c:1c:94:aa:35:cd:94:86:e5:d0:2f:16:e5:72:f0: 73:86:15:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIJRUfDxTUUN/1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YzQ1MGFmNmUtZjBhMC00N2RlLTkxMWQtMDUxOGFiODhmNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1cCFGe/Xk1l6+uGjrAOXljw21E+ThYHrPSi pApioCbSeYeNoSi26unE71z/Wx37jAT2qDzR4ahMiSaDiDLQAbY0JgcQ15feHUek Sab7cDKiaAzRe4pKk+ijTsOq+wRJupzN747EQRYH8LbvDgYtkAYk/Xy/L8lT+3zt Xz/lW5EydwZdSgY3h2ye3ZjHghyCRosRnAKJH/B9a1AgO9I8yoB5Zadwyu0OtMDB ZnXS/by61Hpl1W1mCe5/CVs0FJKvAL6I42aAHqIlEYsYHRpqbk1Yjjz993s5Hi2f hxsvvooK5WMrF2/WB28a48DFaQQW8txpJzVTxDURmCqqe2xTAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSUVBIpAEqqRAGc1zNkxN6NRr8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWZmMzExNTktMTBkNy0z MDAyLWJiNjYtODhkZTljMGIyMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiih38lxP4fa47+YWW0BdSaJGWtuXhwDRZyQrqGJ+FxnvRepFv17Tlv IYJsZF9Pl4YbV6tFMkCFAEImL1tYXsLYw5glaTwCwx4pZQJfPvJqrsBT7Hs/TmqJ Rbj+ko1t+D6taHKbBmpQ8piycWUzKEw6xXbecDsbcL3E9pfL3nhN21LhPQePHipO 4L4LLvzCkWzs6pDamk8jmtvcktyw0WE4e07oHTOUQH6og6+TR6cQFS4CUIrdn6wa eYkyxNlpReKxJ0n6sTDbmT7xkKxTmBI2o/8dksSdDVWQIAYmEi5NH2gfskdqL8oA tnmaWSwclKo1zZSG5dAvFuVy8HOGFSA= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:44 2026 by rpki-client