$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ec53ce1-b7bf-3304-90b1-7d4378255d4f.roa File: 2ec53ce1-b7bf-3304-90b1-7d4378255d4f.roa (raw, json) Hash identifier: E33bM4CmWBEW/c215aEDGrqe0lpt3DmmIyatkbTE6WM= Subject key identifier: B0:97:1C:4B:1E:2C:E4:B0:56:EE:98:16:CD:A1:21:FA:96:19:3B:A6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA5F74AC0E5258CB6AFEFFB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ec53ce1-b7bf-3304-90b1-7d4378255d4f.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 129.149.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:4a:c0:e5:25:8c:b6:af:ef:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=a00835e7-a704-4b61-8228-99c8b8459630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:d4:dc:b4:34:fe:0f:6f:f1:5a:03:3c:b7: 01:f2:ea:b4:68:3e:b1:72:db:d0:a5:58:7e:f6:ce: a8:18:6e:9c:a8:41:7e:dc:70:75:dd:68:8b:e2:e7: 40:39:ca:a9:47:13:05:54:ab:ec:2c:df:e2:63:73: c3:46:9f:58:fa:9f:b7:10:8a:90:b8:a2:36:fe:e1: c9:b8:b7:c7:a8:9b:c6:72:8d:28:97:0e:ae:6c:e1: 28:8c:aa:cb:da:ed:68:99:5d:01:de:03:29:d4:06: e8:54:38:57:9e:fc:94:51:62:52:42:4f:3b:f1:33: 0a:e4:d1:45:2d:ed:55:ff:28:27:ee:bd:c6:64:4d: 54:41:c6:8d:a2:9b:2f:1c:2d:a3:52:31:c0:2c:c0: 61:76:bf:07:34:2d:73:5f:48:50:47:ac:23:c8:2c: 20:9d:4a:c2:3d:e4:ec:1f:49:05:ad:ad:0a:21:3d: 44:00:e5:23:33:19:97:3d:e0:87:7e:00:e6:f0:61: 5c:fe:1e:ee:fe:a4:21:b3:fe:52:ca:4f:25:73:18: fe:d5:37:2b:b9:58:05:f3:c8:4f:8b:69:0b:71:4a: 50:37:b5:c5:de:ab:21:c0:25:aa:44:3a:3e:b1:d5: 94:65:4f:d6:45:27:d3:9a:8b:83:6c:bd:52:d8:25: db:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:97:1C:4B:1E:2C:E4:B0:56:EE:98:16:CD:A1:21:FA:96:19:3B:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ec53ce1-b7bf-3304-90b1-7d4378255d4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8c:bf:4a:55:6a:2d:46:17:0e:91:8f:10:e8:8b:e3:6c:b9: 2d:75:86:4d:93:50:dc:a2:7f:1d:f9:10:c2:42:df:75:af:53: 58:24:34:0b:9a:ef:ac:32:e1:ad:4e:80:29:f9:47:53:70:82: 56:8d:d9:3d:b1:be:d6:a8:f1:f6:1b:cc:2c:a8:f8:8e:bf:83: ae:d0:82:0a:7b:b4:fe:1f:a6:ef:5e:70:d2:dc:18:e4:58:75: 5c:7b:43:07:3a:70:75:94:99:b0:2a:15:e5:44:74:99:76:ae: da:b7:6f:8b:88:fa:1e:fc:2b:98:b1:c1:52:e7:68:aa:fe:af: 7a:41:ba:86:28:b3:f8:1c:e5:f2:6e:6a:12:27:49:4f:08:34: 92:7e:b3:02:57:c5:69:53:5c:f5:b6:d0:78:e1:17:4c:6c:39: 12:6a:6b:bf:b8:4f:f6:d8:62:cd:0f:90:8b:a3:fb:f0:8b:68: 8a:d2:de:16:37:a2:db:2a:8a:ed:e6:89:0c:d8:d0:d6:87:d2: 11:6d:f5:ed:82:46:07:13:5e:4f:99:7f:03:6c:18:44:eb:df: b7:04:b1:2d:30:53:02:54:ca:40:c9:ee:f9:61:66:e6:8e:92: 6b:24:5c:e4:2d:4a:fc:15:31:eb:bb:1c:1b:e8:4e:02:d9:2e: 72:d5:2b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90rA5SWMtq/v+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk YTAwODM1ZTctYTcwNC00YjYxLTgyMjgtOTljOGI4NDU5NjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxPU3LQ0/g9v8VoDPLcB8uq0aD6xctvQpVh+ 9s6oGG6cqEF+3HB13WiL4udAOcqpRxMFVKvsLN/iY3PDRp9Y+p+3EIqQuKI2/uHJ uLfHqJvGco0olw6ubOEojKrL2u1omV0B3gMp1AboVDhXnvyUUWJSQk878TMK5NFF Le1V/ygn7r3GZE1UQcaNopsvHC2jUjHALMBhdr8HNC1zX0hQR6wjyCwgnUrCPeTs H0kFra0KIT1EAOUjMxmXPeCHfgDm8GFc/h7u/qQhs/5Syk8lcxj+1TcruVgF88hP i2kLcUpQN7XF3qshwCWqRDo+sdWUZU/WRSfTmouDbL1S2CXbKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCXHEseLOSwVu6YFs2hIfqWGTumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmVjNTNjZTEtYjdiZi0z MzA0LTkwYjEtN2Q0Mzc4MjU1ZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyMv0pVai1GFw6RjxDoi+NsuS11hk2TUNyifx35EMJC33WvU1gkNAua 76wy4a1OgCn5R1NwglaN2T2xvtao8fYbzCyo+I6/g67Qggp7tP4fpu9ecNLcGORY dVx7Qwc6cHWUmbAqFeVEdJl2rtq3b4uI+h78K5ixwVLnaKr+r3pBuoYos/gc5fJu ahInSU8INJJ+swJXxWlTXPW20HjhF0xsORJqa7+4T/bYYs0PkIuj+/CLaIrS3hY3 otsqiu3miQzY0NaH0hFt9e2CRgcTXk+ZfwNsGETr37cEsS0wUwJUykDJ7vlhZuaO kmskXOQtSvwVMeu7HBvoTgLZLnLVK2Y= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:12 2026 by rpki-client