$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa File: 28d4aa01-578d-325a-b843-3e00f23bb714.roa (raw, json) Hash identifier: kx87JWnV92URJ0aPagXFfAokJH7qeqoii5wXGgpuS28= Subject key identifier: AE:7A:8C:73:33:94:15:03:FC:0E:32:EA:55:92:2F:0C:0B:FD:CE:AA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC816DAEB48B22B5CD7880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.146.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:81:6d:ae:b4:8b:22:b5:cd:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=a1e30f56-bcba-4687-a5c6-7052bfec6e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:3b:fe:81:7e:92:3c:79:f2:fd:eb:d4:33: 98:2a:58:db:da:7a:a5:a6:99:1d:6a:a4:6d:8b:1f: 56:ed:3a:20:09:9b:c4:6c:9f:31:23:1b:25:e4:e4: 8d:48:21:f6:a9:50:0b:2c:a9:72:f8:a9:d2:11:b8: 3d:1b:d4:db:f5:fe:a7:0c:2b:ff:94:36:9c:64:48: 23:8e:ef:ef:41:77:23:1d:db:fe:36:0f:04:2e:20: df:f1:80:a1:84:bb:74:af:65:51:75:53:e3:79:c1: 57:9f:8f:c5:22:58:fa:82:88:76:97:73:19:32:98: 4b:1e:78:2a:52:6a:1a:54:1f:4a:b3:59:3f:76:02: 49:0c:8e:d3:53:22:04:77:6b:0f:79:4d:00:5d:d1: e8:a1:d1:4d:df:c3:aa:fb:6f:17:5b:ba:5c:4b:d9: 35:87:96:d6:6f:a2:f4:b9:0e:e1:b3:11:9c:98:c9: 64:c4:b4:cd:f2:24:30:a7:cf:40:6f:d4:1f:30:30: b9:28:40:3e:e8:65:73:28:7b:68:d0:9c:8e:17:94: ce:dd:df:74:a7:85:5a:1a:cd:23:b8:ba:46:d4:3f: c1:cc:46:f6:ac:e1:c4:69:9b:d8:80:05:2f:cd:73: f6:da:46:82:ff:7c:f0:5f:37:79:4a:4c:52:93:7f: 30:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7A:8C:73:33:94:15:03:FC:0E:32:EA:55:92:2F:0C:0B:FD:CE:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e1:bc:63:ac:a1:d8:6f:a8:a8:0e:4c:62:fb:d5:fc:55:80: 6d:86:e7:5a:46:7f:23:9f:86:64:83:74:bd:6e:ad:40:c0:da: 01:78:89:31:c5:6d:37:19:5d:15:ad:08:ec:ad:80:ac:c7:be: aa:7f:2d:d8:f8:67:95:07:2a:6a:41:ea:57:4d:72:94:16:24: d4:e0:c3:cb:9a:e2:0e:5e:31:85:a1:6d:50:4b:43:d2:95:dc: b8:20:10:18:53:21:fd:f5:fa:f8:69:98:3f:88:c3:cb:c7:ae: b7:a6:ae:8b:a4:0e:29:4b:00:0c:ed:dd:3d:a2:57:0c:fe:e6: e8:c6:62:b9:0b:1e:3d:49:c5:ad:a5:ba:34:f6:84:33:28:b6: d3:5f:48:34:77:1a:4a:ec:cb:1f:98:2b:10:d0:37:82:da:13: d7:0e:44:1d:1c:e2:0e:22:c8:6b:4b:40:23:8e:d1:02:8d:ba: a3:74:7a:8a:ac:06:d4:26:fa:c5:4f:75:8d:eb:ee:75:0c:2f: 56:c6:19:ad:3f:67:8a:d2:00:92:9c:60:cf:0c:29:28:1f:c6: db:7b:1a:59:0a:cd:23:70:74:16:7a:f8:49:31:7e:87:c8:40: ca:2d:73:5c:78:4e:ca:ee:9e:ca:cd:02:1a:6b:66:14:e3:d0: bb:f2:7f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIFtrrSLIrXNeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YTFlMzBmNTYtYmNiYS00Njg3LWE1YzYtNzA1MmJmZWM2ZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw87/oF+kjx58v3r1DOYKljb2nqlppkdaqRt ix9W7TogCZvEbJ8xIxsl5OSNSCH2qVALLKly+KnSEbg9G9Tb9f6nDCv/lDacZEgj ju/vQXcjHdv+Ng8ELiDf8YChhLt0r2VRdVPjecFXn4/FIlj6goh2l3MZMphLHngq UmoaVB9Ks1k/dgJJDI7TUyIEd2sPeU0AXdHoodFN38Oq+28XW7pcS9k1h5bWb6L0 uQ7hsxGcmMlkxLTN8iQwp89Ab9QfMDC5KEA+6GVzKHto0JyOF5TO3d90p4VaGs0j uLpG1D/BzEb2rOHEaZvYgAUvzXP22kaC/3zwXzd5SkxSk38wqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK56jHMzlBUD/A4y6lWSLwwL/c6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjhkNGFhMDEtNTc4ZC0z MjVhLWI4NDMtM2UwMGYyM2JiNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXhvGOsodhvqKgOTGL71fxVgG2G51pGfyOfhmSDdL1urUDA2gF4iTHF bTcZXRWtCOytgKzHvqp/Ldj4Z5UHKmpB6ldNcpQWJNTgw8ua4g5eMYWhbVBLQ9KV 3LggEBhTIf31+vhpmD+Iw8vHrremroukDilLAAzt3T2iVwz+5ujGYrkLHj1Jxa2l ujT2hDMottNfSDR3Gkrsyx+YKxDQN4LaE9cORB0c4g4iyGtLQCOO0QKNuqN0eoqs BtQm+sVPdY3r7nUML1bGGa0/Z4rSAJKcYM8MKSgfxtt7GlkKzSNwdBZ6+EkxfofI QMotc1x4TsrunsrNAhprZhTj0Lvyfxs= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:06 2026 by rpki-client