$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b235726-c232-318e-a28f-85863c8c83c2.roa File: 3b235726-c232-318e-a28f-85863c8c83c2.roa (raw, json) Hash identifier: 8rnEVKNLrW+que843vuAYX+mKOS96rFYbEvWGfcb8Js= Subject key identifier: DD:96:35:BC:59:DC:33:C9:DD:C8:98:E1:82:A6:25:14:09:45:C0:32 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC77CDC96BA3D93408FC38 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b235726-c232-318e-a28f-85863c8c83c2.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.146.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:77:cd:c9:6b:a3:d9:34:08:fc:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=cdcce092-85a8-492a-b95f-48163a298891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ba:18:a1:b2:a5:47:c5:29:bb:14:ce:a0:20: c8:f1:ef:d6:13:37:9a:fe:ba:b5:85:16:d7:de:c2: ef:14:4e:5a:80:ae:36:1e:a5:eb:bb:c1:e8:85:d2: 39:23:69:f9:56:9e:f2:bb:47:c0:5e:73:39:c7:e8: 34:a3:3e:df:40:2a:b7:b0:f2:47:ab:5f:24:c7:1f: 0f:69:24:9e:dc:14:64:76:d4:d8:7e:2d:31:45:fa: 99:52:06:5e:bb:39:a8:c3:26:21:7b:ba:6f:dc:83: c3:01:93:44:6b:e7:04:a2:4d:c5:49:f6:88:14:b6: e8:82:b7:c0:20:7b:23:8c:3a:f8:ab:00:66:b7:93: cc:8c:3e:a3:42:6c:03:ff:d5:14:b3:b7:57:d7:57: e4:ed:fc:b2:3b:13:11:2a:e2:c9:35:45:e5:e1:1c: 24:71:1d:a5:a2:c9:0b:02:5d:0b:9d:c3:9a:4a:66: 39:73:00:7d:10:4a:80:46:40:27:43:cc:19:e8:cc: ce:0e:e8:e9:a8:b6:25:f3:61:bd:cb:d6:d0:e7:44: d2:ad:09:a8:8f:ab:b6:33:cb:91:87:5c:b4:30:ff: b6:a9:67:08:09:d1:11:d1:c8:a7:b3:b5:0b:dc:dc: 85:57:fe:11:ea:55:07:24:a4:2e:25:9a:d8:f7:e2: cb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:96:35:BC:59:DC:33:C9:DD:C8:98:E1:82:A6:25:14:09:45:C0:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b235726-c232-318e-a28f-85863c8c83c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:29:23:9f:25:05:fe:52:3a:dc:55:7d:e1:9c:cf:8f:c8:8e: e6:42:75:87:e4:c7:bc:c8:41:a7:01:f9:18:be:98:34:cb:93: e5:a5:0d:f0:93:06:26:e8:bc:e6:5a:17:df:e2:4b:00:ba:96: 3f:28:f6:a0:5c:b7:ac:37:e0:f5:a6:d2:a4:c4:75:a0:c5:2f: 9d:52:1f:f9:97:6b:c6:a0:b9:3d:c1:c2:56:5c:e3:0f:f5:e5: e2:88:6f:cc:ed:a5:67:b9:54:ea:91:ab:64:cb:a0:10:33:83: b8:d2:47:51:5f:2f:ca:f5:f4:64:a5:30:75:68:4e:43:e7:00: e3:f4:e1:0b:ee:8b:fe:f3:23:e1:17:11:22:40:bf:78:56:26: d5:fc:56:c4:9d:03:58:da:ab:64:66:bb:93:e3:ab:3b:b3:aa: da:3b:17:c1:22:65:83:f8:b3:97:4b:9b:36:c0:a3:f9:67:c0: 5f:20:da:9a:b7:82:cc:15:4d:e6:a2:06:f2:36:49:56:6f:a2: 52:28:5f:2a:52:5f:02:47:d6:85:a5:f1:ce:68:ea:f7:94:54: 1d:a7:16:70:df:26:f8:e5:7f:9d:b0:b4:cd:d7:f7:7f:74:b1: c3:d9:a5:8a:54:c8:7b:08:56:c4:cc:87:a6:27:09:46:77:38: a8:7c:84:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHfNyWuj2TQI/DgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk Y2RjY2UwOTItODVhOC00OTJhLWI5NWYtNDgxNjNhMjk4ODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7oYobKlR8UpuxTOoCDI8e/WEzea/rq1hRbX 3sLvFE5agK42HqXru8HohdI5I2n5Vp7yu0fAXnM5x+g0oz7fQCq3sPJHq18kxx8P aSSe3BRkdtTYfi0xRfqZUgZeuzmowyYhe7pv3IPDAZNEa+cEok3FSfaIFLbogrfA IHsjjDr4qwBmt5PMjD6jQmwD/9UUs7dX11fk7fyyOxMRKuLJNUXl4RwkcR2loskL Al0LncOaSmY5cwB9EEqARkAnQ8wZ6MzODujpqLYl82G9y9bQ50TSrQmoj6u2M8uR h1y0MP+2qWcICdER0cins7UL3NyFV/4R6lUHJKQuJZrY9+LLOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2WNbxZ3DPJ3ciY4YKmJRQJRcAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2IyMzU3MjYtYzIzMi0z MThlLWEyOGYtODU4NjNjOGM4M2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8pI58lBf5SOtxVfeGcz4/IjuZCdYfkx7zIQacB+Ri+mDTLk+WlDfCT BibovOZaF9/iSwC6lj8o9qBct6w34PWm0qTEdaDFL51SH/mXa8aguT3BwlZc4w/1 5eKIb8ztpWe5VOqRq2TLoBAzg7jSR1FfL8r19GSlMHVoTkPnAOP04Qvui/7zI+EX ESJAv3hWJtX8VsSdA1jaq2Rmu5Pjqzuzqto7F8EiZYP4s5dLmzbAo/lnwF8g2pq3 gswVTeaiBvI2SVZvolIoXypSXwJH1oWl8c5o6veUVB2nFnDfJvjlf52wtM3X9390 scPZpYpUyHsIVsTMh6YnCUZ3OKh8hCU= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:40 2026 by rpki-client