$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/213fbf18-c8a4-38e3-8eb7-111973d103d6.roa File: 213fbf18-c8a4-38e3-8eb7-111973d103d6.roa (raw, json) Hash identifier: SfK5FbZg8YMv5OHUcosir0V1v064xglZLgQwoFRk5X8= Subject key identifier: 86:61:76:0D:6F:76:A5:C2:5D:6C:36:C3:B2:5F:A4:64:23:65:B3:41 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC7274782BAFECF31D2340 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/213fbf18-c8a4-38e3-8eb7-111973d103d6.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.146.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:72:74:78:2b:af:ec:f3:1d:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=828039e0-c55b-4f5d-82d0-b5e5c01eec17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:a6:49:7f:26:b1:49:66:66:9c:37:d3:6f: 91:eb:22:44:80:70:96:b7:ec:66:0c:b5:4f:5d:38: a2:e7:15:67:e8:d0:6b:28:33:19:3c:22:8f:c3:a6: cc:c1:2d:17:06:17:4a:68:1c:cc:39:a2:03:87:0b: 7e:b4:32:7c:52:f9:c5:18:10:ab:fa:4f:31:88:d1: 6b:9f:90:fe:b0:78:9b:04:7a:fb:77:10:ca:a7:0f: ee:14:93:b6:e4:98:27:68:54:87:fb:26:58:15:61: ff:ce:eb:c4:ed:9f:7f:a5:18:cd:fe:5d:0c:d4:16: 03:29:29:7d:c7:fb:1f:6b:86:a9:73:38:99:25:64: e0:5b:f4:d3:a0:73:a8:af:b3:2c:6c:f9:27:fd:a4: fe:2b:02:14:d2:ec:d9:a1:84:65:d3:91:12:e4:e5: 71:90:3d:5b:e2:84:e3:97:a3:cc:4d:51:9f:05:ff: 8f:6a:1e:5b:d1:d8:69:63:dd:c1:d4:ff:a9:ed:71: 3f:8b:f6:2e:e0:97:03:43:f3:2b:fc:1d:66:2e:74: 46:62:9a:fb:d1:4f:81:b6:dd:c8:82:b9:48:9d:25: 0d:06:3b:dd:37:c7:e7:be:59:11:5d:81:ac:78:c6: b6:c5:94:5d:da:e4:ac:0a:0d:26:ca:5a:eb:42:4f: 78:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:61:76:0D:6F:76:A5:C2:5D:6C:36:C3:B2:5F:A4:64:23:65:B3:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/213fbf18-c8a4-38e3-8eb7-111973d103d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7c:19:93:b6:31:42:3e:cf:23:43:b8:51:83:02:2c:9b:fb: 28:d2:e5:cf:3b:b8:bb:50:3c:03:ed:f1:5c:71:c2:55:f5:d3: e5:d9:fb:7e:8a:f9:0a:7c:c6:a4:2a:06:70:52:f6:03:8a:46: 0b:c5:e4:d5:9e:bc:f0:f4:56:70:4a:18:55:8c:ad:34:b7:fa: be:f5:74:3f:b7:1d:d9:14:f4:70:cb:83:6f:f0:54:2f:53:48: f6:29:27:d5:1a:7a:0e:54:8d:8c:87:e5:65:cc:4e:8f:12:bb: e1:9e:3a:45:61:01:df:56:eb:57:33:60:e5:fe:fe:00:b8:14: 44:66:cb:3d:d1:c7:b4:f9:0c:a7:47:89:be:46:11:73:42:3c: 8d:f0:14:db:21:61:3c:b4:29:f1:52:85:92:c3:d0:2f:e2:19: 01:72:ed:64:84:0e:9f:55:ed:d6:7e:40:d5:45:65:7d:ea:d8: c6:a7:0a:70:93:7b:e6:ff:6b:5e:36:c2:76:61:00:cf:c6:a5: db:35:23:4c:0d:00:b7:54:ff:42:73:4e:ff:26:e8:9c:a2:d9: fc:2c:6f:3e:90:e3:e5:47:b2:ea:2e:15:b4:e2:cb:b5:5e:c9: 30:7f:03:5f:75:ce:1c:66:8e:a9:45:c6:73:2c:52:5d:a4:33: 3f:46:d9:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHJ0eCuv7PMdI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk ODI4MDM5ZTAtYzU1Yi00ZjVkLTgyZDAtYjVlNWMwMWVlYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE2mSX8msUlmZpw302+R6yJEgHCWt+xmDLVP XTii5xVn6NBrKDMZPCKPw6bMwS0XBhdKaBzMOaIDhwt+tDJ8UvnFGBCr+k8xiNFr n5D+sHibBHr7dxDKpw/uFJO25JgnaFSH+yZYFWH/zuvE7Z9/pRjN/l0M1BYDKSl9 x/sfa4apcziZJWTgW/TToHOor7MsbPkn/aT+KwIU0uzZoYRl05ES5OVxkD1b4oTj l6PMTVGfBf+Pah5b0dhpY93B1P+p7XE/i/Yu4JcDQ/Mr/B1mLnRGYpr70U+Btt3I grlInSUNBjvdN8fnvlkRXYGseMa2xZRd2uSsCg0mylrrQk94lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZhdg1vdqXCXWw2w7JfpGQjZbNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjEzZmJmMTgtYzhhNC0z OGUzLThlYjctMTExOTczZDEwM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN8GZO2MUI+zyNDuFGDAiyb+yjS5c87uLtQPAPt8VxxwlX10+XZ+36K +Qp8xqQqBnBS9gOKRgvF5NWevPD0VnBKGFWMrTS3+r71dD+3HdkU9HDLg2/wVC9T SPYpJ9Uaeg5UjYyH5WXMTo8Su+GeOkVhAd9W61czYOX+/gC4FERmyz3Rx7T5DKdH ib5GEXNCPI3wFNshYTy0KfFShZLD0C/iGQFy7WSEDp9V7dZ+QNVFZX3q2ManCnCT e+b/a142wnZhAM/Gpds1I0wNALdU/0JzTv8m6Jyi2fwsbz6Q4+VHsuouFbTiy7Ve yTB/A191zhxmjqlFxnMsUl2kMz9G2cs= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:32 2026 by rpki-client