$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/26529eb0-1c72-36cb-bb4a-3d8d168b37b4.roa File: 26529eb0-1c72-36cb-bb4a-3d8d168b37b4.roa (raw, json) Hash identifier: bRvO8NLhwbB+zGF5l3WZwah85zwxNP4aQ5Ddc9k9jTs= Subject key identifier: 4E:E5:C8:AD:88:4E:79:E2:29:17:DE:A9:97:2B:E9:2A:BA:64:85:F4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1D858CA99E2324DDB8C40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/26529eb0-1c72-36cb-bb4a-3d8d168b37b4.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 129.149.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:d8:58:ca:99:e2:32:4d:db:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=a2540088-c084-4105-8a61-daea97fc468e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4a:f4:11:c3:67:9a:83:df:0e:2e:0c:87:30: 46:88:58:ac:ee:c5:08:a8:81:3b:7c:28:92:f8:5a: 31:70:0a:d5:93:8d:31:69:4a:b7:26:cc:a2:16:e5: cf:2d:88:1f:d8:3d:76:6b:ac:78:fb:a9:a3:a6:7b: f8:79:6b:0d:45:24:7a:73:f4:69:d9:0b:18:4e:2d: 1b:67:07:28:b3:5c:c2:fa:7f:8e:8c:87:71:30:9b: 51:bf:92:49:2f:b5:13:1a:36:11:6b:90:68:8d:94: 61:be:44:e1:22:a1:85:79:de:72:bb:52:95:35:bc: 6d:87:34:af:e4:46:b5:92:63:8c:08:3e:b3:f0:d9: 6c:dd:63:d5:7e:30:d3:0c:35:50:ad:b7:33:c3:67: 09:2b:99:9e:8e:6e:c7:3f:46:ad:4b:05:5c:ad:cc: f0:93:1e:7e:22:2d:a0:67:b7:62:d6:92:50:26:29: 59:ac:be:5d:64:38:1e:40:dd:95:32:82:17:ab:5c: e6:1a:dd:af:66:ba:4d:c0:79:84:b3:17:28:31:e2: 24:f5:86:4a:be:bf:98:51:ac:7a:ad:6f:d2:0e:3d: a9:34:a8:8d:14:bb:8a:4c:c5:d6:c0:e6:e8:52:c1: f4:93:f9:ab:8d:36:35:f5:db:87:d3:b8:4c:1e:90: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E5:C8:AD:88:4E:79:E2:29:17:DE:A9:97:2B:E9:2A:BA:64:85:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/26529eb0-1c72-36cb-bb4a-3d8d168b37b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:20:6a:7b:db:01:dd:6c:af:73:d0:0a:c8:32:34:32:4e:2c: 93:1d:61:29:42:12:9c:15:07:94:b4:73:3e:4f:70:47:60:c8: e4:11:94:ae:f7:34:4d:d8:37:7a:c4:d1:db:b7:fc:0e:24:7c: 96:88:0d:1a:f5:66:bc:b9:bc:99:d6:53:c0:9f:8b:a8:28:26: 42:76:1c:55:15:8b:b9:57:ed:18:12:26:82:22:da:17:49:38: c0:70:22:2a:a8:57:0c:49:3d:5b:56:7f:c2:5e:a5:0a:f0:1e: 8a:18:f6:76:50:f0:fb:d2:ba:61:54:06:80:4b:f7:06:77:dc: 1f:05:a9:74:55:e8:db:ea:0c:74:f2:66:64:2d:b7:b8:71:7e: 7b:f7:9b:84:2e:03:5d:f8:d1:32:5d:e1:4f:fe:fb:0e:1a:f9: 21:24:b2:fa:53:62:85:cf:61:6b:82:e0:23:7b:65:d5:12:a2: 9c:58:47:2c:95:bd:8a:1e:bc:8f:be:95:a0:72:8f:78:f4:3e: 08:56:d1:88:80:e1:b2:54:e3:0e:a6:9b:a6:3d:9f:a4:d7:e3: 0d:96:24:74:88:f6:a2:61:f4:6e:16:4f:3c:f6:17:81:8b:b9: 3c:ca:ba:bb:52:7d:eb:10:ea:55:0d:c8:37:8a:99:7a:6c:3d: 55:69:f7:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8dhYypniMk3bjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk YTI1NDAwODgtYzA4NC00MTA1LThhNjEtZGFlYTk3ZmM0NjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUr0EcNnmoPfDi4MhzBGiFis7sUIqIE7fCiS +FoxcArVk40xaUq3JsyiFuXPLYgf2D12a6x4+6mjpnv4eWsNRSR6c/Rp2QsYTi0b Zwcos1zC+n+OjIdxMJtRv5JJL7UTGjYRa5BojZRhvkThIqGFed5yu1KVNbxthzSv 5Ea1kmOMCD6z8Nls3WPVfjDTDDVQrbczw2cJK5mejm7HP0atSwVcrczwkx5+Ii2g Z7di1pJQJilZrL5dZDgeQN2VMoIXq1zmGt2vZrpNwHmEsxcoMeIk9YZKvr+YUax6 rW/SDj2pNKiNFLuKTMXWwOboUsH0k/mrjTY19duH07hMHpD1twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7lyK2ITnniKRfeqZcr6Sq6ZIX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjY1MjllYjAtMWM3Mi0z NmNiLWJiNGEtM2Q4ZDE2OGIzN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8ganvbAd1sr3PQCsgyNDJOLJMdYSlCEpwVB5S0cz5PcEdgyOQRlK73 NE3YN3rE0du3/A4kfJaIDRr1Zry5vJnWU8Cfi6goJkJ2HFUVi7lX7RgSJoIi2hdJ OMBwIiqoVwxJPVtWf8JepQrwHooY9nZQ8PvSumFUBoBL9wZ33B8FqXRV6NvqDHTy ZmQtt7hxfnv3m4QuA1340TJd4U/++w4a+SEksvpTYoXPYWuC4CN7ZdUSopxYRyyV vYoevI++laByj3j0PghW0YiA4bJU4w6mm6Y9n6TX4w2WJHSI9qJh9G4WTzz2F4GL uTzKurtSfesQ6lUNyDeKmXpsPVVp9wc= -----END CERTIFICATE-----Generated at Thu Feb 26 03:28:00 2026 by rpki-client