$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35e0af60-c44d-3961-ac1e-da349bcbedf1.roa File: 35e0af60-c44d-3961-ac1e-da349bcbedf1.roa (raw, json) Hash identifier: X9n9WeCDNtEZ+t1TZe8PDOjUU5UZWOaRP+nx0phr7oQ= Subject key identifier: 9A:2C:36:11:BB:5F:39:F7:61:CF:8E:A3:D6:E9:5E:E9:62:C8:CA:14 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC75DC2DE0924775018F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35e0af60-c44d-3961-ac1e-da349bcbedf1.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.146.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:75:dc:2d:e0:92:47:75:01:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=5dacf369-40fd-43d3-a163-419d1a3da250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:08:fc:c2:9a:02:12:bd:f6:8e:61:40:eb: a2:df:fa:a1:43:d8:f0:f7:3e:63:33:8c:06:67:52: 44:46:e8:8f:e5:65:0e:04:c6:b7:ee:1d:6a:19:db: 48:a9:b6:95:26:00:f4:b0:26:bb:0c:a5:b2:82:1e: e9:64:03:e7:67:15:3c:56:4d:cd:57:1d:17:53:d7: d2:50:bf:54:f8:0a:8b:18:a7:78:43:0e:98:6d:63: d5:6e:9c:7d:27:c6:9e:4a:ec:4a:70:64:b5:58:b8: 00:e0:81:9b:9f:86:b3:e2:6b:f6:0b:6c:e0:3e:64: 31:9a:fd:37:38:1a:da:79:ba:a5:13:df:9b:9a:1d: a9:f9:89:58:e6:71:e9:91:cd:d4:66:d9:5f:1e:80: 16:30:e4:73:c0:20:57:6d:18:65:ed:e5:28:7a:0c: 2d:f3:e7:55:ad:7f:54:0f:cb:fb:36:a3:f1:01:ad: 86:af:d8:25:88:fe:29:58:ee:79:da:f7:c5:d8:77: 03:a7:62:cd:c0:70:78:f1:78:39:e4:fc:84:bd:cc: 3d:f3:d5:c5:34:cf:29:37:a9:10:c9:76:79:89:de: 93:34:a9:f0:aa:a4:56:55:b0:99:79:36:a4:e7:df: 32:e7:07:c3:5d:79:3e:26:1b:49:89:60:aa:cd:f7: 82:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2C:36:11:BB:5F:39:F7:61:CF:8E:A3:D6:E9:5E:E9:62:C8:CA:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35e0af60-c44d-3961-ac1e-da349bcbedf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:15:56:3e:ca:c9:3c:79:31:8b:0e:07:06:e0:3d:94:28:37: 3a:d3:cd:cf:7e:ec:3f:d3:66:13:10:c6:93:6d:48:f9:3f:33: 76:68:09:b0:c4:e4:d9:5f:54:df:3f:b5:22:fd:e6:5b:23:16: 2b:6f:2f:f0:20:df:d0:2f:6c:f0:66:62:3d:51:32:08:1e:b1: b2:66:06:57:88:7d:94:9a:b7:2e:1a:d8:de:f2:19:c5:87:f4: a4:fb:93:85:03:8b:02:98:2d:6c:f7:47:41:72:3c:c3:e9:50: 46:f7:a6:6b:78:b9:cf:32:cd:72:9b:a6:db:f5:dd:75:ae:d4: c1:2e:81:8e:26:e4:72:e7:e3:e8:01:55:04:fb:24:72:c9:70: e3:60:1b:73:c3:51:d8:d8:06:f0:7c:9b:1a:42:47:be:78:ac: f6:2f:a2:a4:9b:25:5f:14:51:5f:ce:ec:c1:c3:63:69:37:6a: 50:10:a7:63:bd:17:4a:44:ce:a8:78:32:c8:ba:04:1b:b4:0d: 72:07:a3:22:7c:d5:33:8a:08:15:45:35:87:44:69:ab:8b:77: c6:81:80:6c:79:7b:a7:be:c2:5d:28:4a:7b:e5:c7:68:36:e8: 2a:f9:df:07:95:ae:3f:97:fb:4b:44:27:91:47:0a:2e:4d:ed: c6:96:32:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHXcLeCSR3UBjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NWRhY2YzNjktNDBmZC00M2QzLWExNjMtNDE5ZDFhM2RhMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKgI/MKaAhK99o5hQOui3/qhQ9jw9z5jM4wG Z1JERuiP5WUOBMa37h1qGdtIqbaVJgD0sCa7DKWygh7pZAPnZxU8Vk3NVx0XU9fS UL9U+AqLGKd4Qw6YbWPVbpx9J8aeSuxKcGS1WLgA4IGbn4az4mv2C2zgPmQxmv03 OBraebqlE9+bmh2p+YlY5nHpkc3UZtlfHoAWMORzwCBXbRhl7eUoegwt8+dVrX9U D8v7NqPxAa2Gr9gliP4pWO552vfF2HcDp2LNwHB48Xg55PyEvcw989XFNM8pN6kQ yXZ5id6TNKnwqqRWVbCZeTak598y5wfDXXk+JhtJiWCqzfeCXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJosNhG7Xzn3Yc+Oo9bpXuliyMoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzVlMGFmNjAtYzQ0ZC0z OTYxLWFjMWUtZGEzNDliY2JlZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgZIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIVVj7KyTx5MYsOBwbgPZQoNzrTzc9+7D/TZhMQxpNtSPk/M3ZoCbDE 5NlfVN8/tSL95lsjFitvL/Ag39AvbPBmYj1RMggesbJmBleIfZSaty4a2N7yGcWH 9KT7k4UDiwKYLWz3R0FyPMPpUEb3pmt4uc8yzXKbptv13XWu1MEugY4m5HLn4+gB VQT7JHLJcONgG3PDUdjYBvB8mxpCR754rPYvoqSbJV8UUV/O7MHDY2k3alAQp2O9 F0pEzqh4Msi6BBu0DXIHoyJ81TOKCBVFNYdEaauLd8aBgGx5e6e+wl0oSnvlx2g2 6Cr53weVrj+X+0tEJ5FHCi5N7caWMp0= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:06 2026 by rpki-client