$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa File: 2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa (raw, json) Hash identifier: Jj38nCprcGOGBbOzoaQvU7qp7W8Lpe9pF8wqd8q4NwE= Subject key identifier: 9C:A3:15:8E:76:35:58:5F:25:9C:00:D0:22:7D:76:6E:74:CA:7A:ED Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC754A5443C33414D4B100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.146.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:75:4a:54:43:c3:34:14:d4:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=67fbb4e7-ed1e-48a3-8736-e92a0f792ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4d:54:78:16:56:35:12:76:ae:4f:7a:75:ad: db:ae:e4:55:60:26:82:11:6d:24:7b:2b:ba:b4:93: b0:43:a7:d0:8d:d1:4c:f3:ab:8c:22:e7:d5:34:d0: 40:42:40:42:75:e9:19:78:bf:27:b9:b1:bd:13:3f: 92:74:00:ce:da:a1:f4:4b:6c:bb:0a:b0:89:73:9d: 73:6d:4c:3e:4f:42:81:5b:d7:b9:ad:9d:66:a1:67: d6:60:95:7b:2b:38:d0:c7:5b:c3:f5:b5:23:78:20: 48:e7:a6:2a:77:2b:8c:d4:82:a6:8b:5b:c0:a1:c9: 3a:f2:a8:91:77:98:68:be:21:39:8a:92:06:5f:f7: 92:ed:ef:42:39:3a:ac:b2:8c:3c:a1:f5:6e:7f:5d: e9:a6:d0:03:d5:d9:42:b5:8c:f4:aa:da:e9:6a:2f: 0a:3c:46:91:34:fa:0d:f4:1f:43:1e:fd:1d:67:a2: bd:65:02:43:94:59:aa:35:81:45:17:50:b0:1b:2d: 31:39:b2:c8:5c:f1:e2:83:a1:3a:0f:31:77:79:b2: a3:4d:9a:6e:a5:a0:1e:31:eb:09:40:65:fe:70:06: 83:17:98:85:85:f0:b0:d6:56:af:67:5d:2b:d6:fd: 33:43:1a:bf:66:03:f5:d4:42:2d:f0:1b:53:28:cb: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A3:15:8E:76:35:58:5F:25:9C:00:D0:22:7D:76:6E:74:CA:7A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:67:5b:52:cf:16:29:f8:80:91:07:a5:f2:5d:77:18:40:2c: f5:8e:40:17:fc:b6:5f:95:c1:5a:d6:ad:30:a7:4d:73:8b:2d: 58:0c:56:47:f4:62:30:42:e2:c2:dc:9d:5f:82:87:31:ba:c6: a5:b9:d4:a9:6a:a7:5e:d8:34:2d:19:1f:d4:21:9c:20:09:ea: 36:c3:98:69:00:ec:48:9e:d4:f6:9e:a1:32:29:bd:60:4b:0a: 0c:c8:7d:83:bc:4f:17:54:39:12:91:a9:bb:a6:15:10:7d:f6: ba:b4:10:c7:b2:b0:ee:03:e6:b7:84:a3:84:9c:e4:cf:82:a5: 08:f3:4a:27:42:b4:a6:ec:88:71:34:23:a2:e9:29:7d:f2:38: 26:91:50:90:9f:33:90:15:f1:5f:97:4b:a0:af:e9:68:ae:36: 2b:5c:40:86:b6:b8:66:4c:97:63:44:e4:fd:5c:68:c6:5d:fc: 33:71:a7:46:98:b9:e7:1d:6c:4e:4e:d5:93:5a:86:62:5c:4b: a2:b5:09:03:b4:7a:54:00:63:5a:54:41:ce:09:ca:0c:7e:23: 8a:fb:14:92:5a:2e:b2:01:ac:8a:c8:4b:01:bc:58:5e:00:aa: 72:60:d4:26:1b:40:d7:69:79:02:36:2a:6c:e1:d4:4c:25:64: e2:01:6d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHVKVEPDNBTUsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NjdmYmI0ZTctZWQxZS00OGEzLTg3MzYtZTkyYTBmNzkyZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi01UeBZWNRJ2rk96da3bruRVYCaCEW0keyu6 tJOwQ6fQjdFM86uMIufVNNBAQkBCdekZeL8nubG9Ez+SdADO2qH0S2y7CrCJc51z bUw+T0KBW9e5rZ1moWfWYJV7KzjQx1vD9bUjeCBI56YqdyuM1IKmi1vAock68qiR d5hoviE5ipIGX/eS7e9COTqssow8ofVuf13pptAD1dlCtYz0qtrpai8KPEaRNPoN 9B9DHv0dZ6K9ZQJDlFmqNYFFF1CwGy0xObLIXPHig6E6DzF3ebKjTZpupaAeMesJ QGX+cAaDF5iFhfCw1lavZ10r1v0zQxq/ZgP11EIt8BtTKMsDZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyjFY52NVhfJZwA0CJ9dm50ynrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmIyM2Q2ZjItZDFjMC0z NTM2LTgyYzMtZmJmYzk3N2U3MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFnW1LPFin4gJEHpfJddxhALPWOQBf8tl+VwVrWrTCnTXOLLVgMVkf0 YjBC4sLcnV+ChzG6xqW51Klqp17YNC0ZH9QhnCAJ6jbDmGkA7Eie1PaeoTIpvWBL CgzIfYO8TxdUORKRqbumFRB99rq0EMeysO4D5reEo4Sc5M+CpQjzSidCtKbsiHE0 I6LpKX3yOCaRUJCfM5AV8V+XS6Cv6WiuNitcQIa2uGZMl2NE5P1caMZd/DNxp0aY uecdbE5O1ZNahmJcS6K1CQO0elQAY1pUQc4Jygx+I4r7FJJaLrIBrIrISwG8WF4A qnJg1CYbQNdpeQI2Kmzh1EwlZOIBbU0= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:18 2026 by rpki-client