$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cf1d315-b875-391f-bde7-230f7e720d39.roa File: 3cf1d315-b875-391f-bde7-230f7e720d39.roa (raw, json) Hash identifier: 4aCSKQuF8CV8K5VWgCOvxu4EBhY0hiAByFb5Qh3MVAY= Subject key identifier: 56:C2:B8:4C:2F:9B:22:48:CA:7A:04:64:4B:65:E4:DF:18:0A:D5:65 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC732D51378FEA498BBDC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cf1d315-b875-391f-bde7-230f7e720d39.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.146.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:73:2d:51:37:8f:ea:49:8b:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=8dc57c39-683e-41e5-8a90-5d98ce393eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:1d:40:ed:05:3f:2c:c7:6a:25:72:15:1e: 11:b3:9c:64:24:a9:18:af:9c:ac:20:70:f8:8a:c4: 50:0d:f8:d1:49:dc:bd:27:2d:61:17:6d:e3:26:db: ad:1c:27:88:6b:cf:5c:9a:77:cb:74:b7:ba:03:d9: c0:1b:1e:50:db:b3:0a:a7:5c:1a:dc:49:6d:a7:a0: 79:ae:36:43:a6:0a:c0:d4:10:e7:11:a4:9a:1f:a6: 0d:51:04:61:64:c7:b4:73:69:3b:b0:c7:64:30:94: d7:da:d0:0b:e9:70:f5:d7:28:c4:2a:f1:81:78:28: ca:89:d7:79:f7:a3:96:ea:8b:00:f4:7d:be:23:e2: b8:3b:19:93:c3:e3:fd:99:bb:64:ec:cd:75:b2:49: 7c:17:8b:66:ac:f1:2a:15:bb:e5:f5:39:d7:47:27: 1f:fe:e3:c9:40:38:e4:e4:2f:dd:40:0a:1f:19:e7: cf:5b:3d:38:55:51:7a:97:81:98:0b:83:14:e0:b1: 68:4f:85:69:fa:c6:c2:1b:67:8e:7e:d4:7c:01:7c: 4d:1d:2e:31:03:18:71:b7:a8:08:e1:ee:96:6c:64: db:5d:ee:01:a6:6e:64:d3:d9:f2:05:c0:56:d9:7a: c5:72:90:21:08:27:ee:3b:d0:e9:79:f3:e6:c8:76: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C2:B8:4C:2F:9B:22:48:CA:7A:04:64:4B:65:E4:DF:18:0A:D5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cf1d315-b875-391f-bde7-230f7e720d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6b:67:c1:5b:30:f0:ae:58:52:6a:82:38:9a:e2:06:d3:bb: ff:06:79:a2:8b:0a:c5:d2:5e:7d:64:23:67:cc:dc:f2:9b:49: 22:57:06:7a:14:76:31:b3:4d:e2:00:06:cf:e3:6d:79:b2:31: 3e:e8:a3:ad:b0:da:08:ea:7d:b6:1a:2b:ca:14:10:31:db:e9: 6c:e6:94:0c:2b:b9:27:1a:8f:c7:a8:12:84:0f:f4:fa:d5:5c: 37:db:eb:65:ed:51:fa:64:51:ac:7b:c1:42:e9:21:a8:95:d9: fc:9d:50:99:fe:3e:fe:17:db:e2:17:2b:26:e1:73:3e:9e:b2: 1f:48:ea:6e:3b:49:ce:de:1a:d1:2e:9c:06:de:c5:9c:69:64: 13:b7:08:c1:0b:01:98:7f:f2:c6:e4:d5:90:62:ea:b0:1e:05: b8:ac:c9:77:79:b9:30:f6:c3:a2:50:d0:1e:1f:12:1b:91:49: 8f:db:83:40:10:bb:97:fe:8a:13:39:9c:ca:c8:4e:57:81:f9: bf:44:fb:dc:86:d0:a7:25:3a:3f:1d:a6:a8:33:78:3f:3f:e3: 6c:db:22:f2:56:a9:6d:d9:f6:e0:db:c4:a1:74:83:55:37:07: d8:1b:d7:b5:1d:16:9a:12:f6:ed:12:6b:15:5a:8f:35:41:33: e2:e4:e2:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHMtUTeP6kmLvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk OGRjNTdjMzktNjgzZS00MWU1LThhOTAtNWQ5OGNlMzkzZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRgdQO0FPyzHaiVyFR4Rs5xkJKkYr5ysIHD4 isRQDfjRSdy9Jy1hF23jJtutHCeIa89cmnfLdLe6A9nAGx5Q27MKp1wa3Eltp6B5 rjZDpgrA1BDnEaSaH6YNUQRhZMe0c2k7sMdkMJTX2tAL6XD11yjEKvGBeCjKidd5 96OW6osA9H2+I+K4OxmTw+P9mbtk7M11skl8F4tmrPEqFbvl9TnXRycf/uPJQDjk 5C/dQAofGefPWz04VVF6l4GYC4MU4LFoT4Vp+sbCG2eOftR8AXxNHS4xAxhxt6gI 4e6WbGTbXe4Bpm5k09nyBcBW2XrFcpAhCCfuO9DpefPmyHYYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbCuEwvmyJIynoEZEtl5N8YCtVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2NmMWQzMTUtYjg3NS0z OTFmLWJkZTctMjMwZjdlNzIwZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1rZ8FbMPCuWFJqgjia4gbTu/8GeaKLCsXSXn1kI2fM3PKbSSJXBnoU djGzTeIABs/jbXmyMT7oo62w2gjqfbYaK8oUEDHb6WzmlAwruScaj8eoEoQP9PrV XDfb62XtUfpkUax7wULpIaiV2fydUJn+Pv4X2+IXKybhcz6esh9I6m47Sc7eGtEu nAbexZxpZBO3CMELAZh/8sbk1ZBi6rAeBbisyXd5uTD2w6JQ0B4fEhuRSY/bg0AQ u5f+ihM5nMrITleB+b9E+9yG0KclOj8dpqgzeD8/42zbIvJWqW3Z9uDbxKF0g1U3 B9gb17UdFpoS9u0SaxVajzVBM+Lk4lM= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:18 2026 by rpki-client