$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37eb1be9-577e-3e55-b6e1-3f44b804a8db.roa File: 37eb1be9-577e-3e55-b6e1-3f44b804a8db.roa (raw, json) Hash identifier: 2MHPxx5YTILNBuK5N1hWmO+JgTC3tmpmAeLujEiaCUc= Subject key identifier: FE:7B:3E:59:95:BF:FE:68:82:D8:1F:04:D6:49:02:02:3D:25:96:47 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA27105D978236687EFB1200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37eb1be9-577e-3e55-b6e1-3f44b804a8db.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 129.149.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:10:5d:97:82:36:68:7e:fb:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=b79952cd-a1c8-480a-a5d3-87b2112c2df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:5c:43:b6:c0:f6:bb:fe:55:25:75:2c:16: 83:6d:74:5c:5f:2b:21:4b:d3:e6:e8:02:79:cb:f1: a9:10:bc:1c:1d:13:09:61:44:f9:b0:99:b4:49:0a: 1d:4a:68:df:61:c8:6c:7e:67:d7:2a:e8:3c:dd:df: 8f:3d:ab:c5:e1:2d:5b:ca:45:38:b6:33:9c:ce:d6: e0:9f:5e:eb:cc:bb:b4:36:b4:47:82:b2:29:e2:c3: 33:1e:ca:55:ab:e9:4d:f0:53:d4:0b:1c:3f:cc:4d: 02:ec:ac:56:b7:5c:ef:a4:76:8e:79:cb:52:07:cb: 60:c9:4a:8c:66:7e:50:c2:eb:d0:da:c8:9a:7e:e2: b5:88:06:32:7b:48:52:89:b0:aa:1a:fb:2e:02:92: 86:e3:ca:d5:60:a5:9a:fc:6b:d7:8c:29:e6:c0:fd: 0f:18:4b:c4:7a:04:e3:50:bd:86:74:63:28:47:38: 5e:fb:3b:4b:47:e8:40:8e:9c:40:cf:d8:28:bf:64: 98:1e:48:5c:34:0e:70:d2:35:ec:0b:8c:90:44:34: af:ea:5a:9e:a1:63:3f:2e:04:b7:9c:16:2f:cc:80: f9:1f:f9:c4:59:da:ee:97:cb:0b:4c:4f:34:5c:ba: 58:e6:a6:bd:ec:25:f2:f4:ad:59:ab:f9:a0:25:b9: fd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7B:3E:59:95:BF:FE:68:82:D8:1F:04:D6:49:02:02:3D:25:96:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37eb1be9-577e-3e55-b6e1-3f44b804a8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:61:c0:5c:88:c3:17:2b:ed:73:82:84:a4:a2:6e:d1:be:91: 4f:f1:5f:d8:7f:4a:cc:5b:c4:97:73:ec:0e:ca:75:96:c3:cc: 9b:24:4a:55:52:bb:1e:b0:5c:9e:8a:0d:b3:20:ec:85:c3:6f: 9f:07:ae:0f:46:74:8a:aa:05:38:c3:12:3c:82:79:9c:0b:0e: 83:24:4a:a7:df:44:ad:b6:32:b4:03:44:aa:11:ca:6f:37:d6: ce:a9:cb:cb:a2:d5:da:bd:dd:2a:ee:38:c6:b4:51:4b:22:2d: 87:13:e3:0f:b7:b2:8e:29:cb:5b:9b:d9:6e:73:33:2e:1d:0a: f0:8e:71:4b:0a:13:54:82:da:d4:6d:b2:6f:8e:fe:ea:16:d7: da:e8:6f:1c:9f:92:86:29:f2:5d:4e:12:a3:3e:f6:bd:9d:aa: e6:70:1b:f5:a6:de:9c:84:16:b3:10:39:20:b7:73:44:4b:3b: 93:c9:87:af:2f:46:a5:92:80:ad:7a:f4:70:0f:06:4f:99:60: 4a:9b:0c:f2:e6:46:3c:3b:c5:a6:c5:a2:93:79:a9:f1:e1:8a: a2:bf:19:fe:a9:2e:e9:a3:39:c8:3a:80:b0:0d:44:50:c0:8e: 78:91:02:67:ee:80:44:5a:de:57:39:45:cc:b9:bd:2b:70:26: 64:0b:6a:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxBdl4I2aH77EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk Yjc5OTUyY2QtYTFjOC00ODBhLWE1ZDMtODdiMjExMmMyZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcRcQ7bA9rv+VSV1LBaDbXRcXyshS9Pm6AJ5 y/GpELwcHRMJYUT5sJm0SQodSmjfYchsfmfXKug83d+PPavF4S1bykU4tjOcztbg n17rzLu0NrRHgrIp4sMzHspVq+lN8FPUCxw/zE0C7KxWt1zvpHaOectSB8tgyUqM Zn5QwuvQ2siafuK1iAYye0hSibCqGvsuApKG48rVYKWa/GvXjCnmwP0PGEvEegTj UL2GdGMoRzhe+ztLR+hAjpxAz9gov2SYHkhcNA5w0jXsC4yQRDSv6lqeoWM/LgS3 nBYvzID5H/nEWdrul8sLTE80XLpY5qa97CXy9K1Zq/mgJbn9hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP57PlmVv/5ogtgfBNZJAgI9JZZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzdlYjFiZTktNTc3ZS0z ZTU1LWI2ZTEtM2Y0NGI4MDRhOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxhwFyIwxcr7XOChKSibtG+kU/xX9h/SsxbxJdz7A7KdZbDzJskSlVS ux6wXJ6KDbMg7IXDb58Hrg9GdIqqBTjDEjyCeZwLDoMkSqffRK22MrQDRKoRym83 1s6py8ui1dq93SruOMa0UUsiLYcT4w+3so4py1ub2W5zMy4dCvCOcUsKE1SC2tRt sm+O/uoW19robxyfkoYp8l1OEqM+9r2dquZwG/Wm3pyEFrMQOSC3c0RLO5PJh68v RqWSgK169HAPBk+ZYEqbDPLmRjw7xabFopN5qfHhiqK/Gf6pLumjOcg6gLANRFDA jniRAmfugERa3lc5Rcy5vStwJmQLatE= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:58 2026 by rpki-client