$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d7879c4-361c-3f2e-a683-07248d3080a6.roa File: 3d7879c4-361c-3f2e-a683-07248d3080a6.roa (raw, json) Hash identifier: LShNp32REw2VX5Euj40eATEKf5sFQX+RCL1Hi9cI/xI= Subject key identifier: 9E:D3:47:A5:DC:1D:9E:40:C6:27:87:A1:20:7C:CB:3C:D0:CB:FE:B4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE571BD26CFFCE17672DFEE0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d7879c4-361c-3f2e-a683-07248d3080a6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 129.151.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:1b:d2:6c:ff:ce:17:67:2d:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=9e70d050-9551-4778-8d0e-e89620e9c862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:3c:ce:16:05:af:45:1b:17:33:dc:2d:15: a6:7f:cb:04:49:2e:40:f2:e0:41:68:11:d2:fb:be: c8:79:e6:b7:ba:79:e9:0f:ef:39:8f:ae:42:f0:ad: e0:05:92:70:69:ac:0f:d6:ce:cd:cd:a2:55:97:7b: 67:4b:c2:7f:2e:6e:1b:a0:1c:d3:9c:84:d0:18:5b: 2e:dd:83:42:56:3e:62:a0:08:b8:1f:bb:af:2b:7e: 02:5d:03:24:8a:02:db:97:10:60:15:20:a3:53:74: ed:f3:2f:b6:48:2a:b8:b4:36:4a:6f:21:4f:ef:36: ef:0a:ac:da:b8:5b:10:1e:16:20:f4:e0:f0:30:8b: fc:05:a1:b5:9c:83:44:41:62:de:f9:f7:93:2f:87: bd:8b:9a:8f:fa:6e:86:9c:78:ab:3b:25:7b:b8:b0: 40:29:43:92:87:7e:cf:f4:2c:3d:3a:2c:30:1b:7c: 92:92:1c:ce:67:f2:00:ed:37:52:47:19:c4:00:cf: 0a:5f:27:af:26:12:c6:82:cf:0a:75:01:4e:d9:3a: 8a:59:ac:ac:68:d7:18:94:d5:52:94:99:1f:2e:02: 49:19:8f:c6:6c:77:c9:ca:07:41:47:eb:b7:4e:40: 89:70:fd:8b:c0:a0:df:b5:28:0f:51:91:f0:70:4e: a9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D3:47:A5:DC:1D:9E:40:C6:27:87:A1:20:7C:CB:3C:D0:CB:FE:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d7879c4-361c-3f2e-a683-07248d3080a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.151.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:dd:e5:58:d5:af:c4:db:80:e1:10:72:4b:24:60:82:2e:f4: 87:f3:97:93:59:81:99:2e:f3:42:8c:00:9d:66:9b:7f:15:42: 75:91:39:04:9d:23:b7:f4:6b:ce:80:7e:cf:55:c0:95:b8:b6: 8e:d2:be:92:8b:89:bf:61:9c:81:ca:39:01:94:7b:ae:ca:1b: 41:01:13:54:c7:e4:ee:0c:46:6b:4d:17:71:67:c0:8e:d2:5a: 43:5d:be:dd:8c:27:8f:1b:c0:9f:a0:a1:7a:ad:93:38:8e:1f: 36:9f:c1:c9:cd:20:04:7b:e7:bc:21:3c:18:52:fe:9c:87:7f: f5:1b:85:8c:e2:21:21:02:39:b4:83:11:07:50:ba:54:d2:8e: 47:8b:0b:22:3d:ec:60:e7:27:fb:b6:5e:1b:f8:3c:55:e0:9c: cb:2e:5a:9a:f8:c5:ab:a6:9b:8a:10:b5:80:91:5d:2c:50:77: d1:c9:2a:de:f0:3a:d8:36:e1:e0:51:ea:40:37:24:70:d2:52: 99:40:7c:57:33:fd:7f:1c:23:38:3f:08:0d:2f:c8:e4:8e:74: 7d:7b:71:c4:ed:fe:7e:3b:c2:30:c0:36:b0:e7:97:36:ae:49: 48:48:7c:e2:d5:c4:0a:b9:de:9e:61:de:e1:53:3b:2f:27:5b: 99:db:8f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxvSbP/OF2ct/uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWU3MGQwNTAtOTU1MS00Nzc4LThkMGUtZTg5NjIwZTljODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Wo8zhYFr0UbFzPcLRWmf8sESS5A8uBBaBHS +77Ieea3unnpD+85j65C8K3gBZJwaawP1s7NzaJVl3tnS8J/Lm4boBzTnITQGFsu 3YNCVj5ioAi4H7uvK34CXQMkigLblxBgFSCjU3Tt8y+2SCq4tDZKbyFP7zbvCqza uFsQHhYg9ODwMIv8BaG1nINEQWLe+feTL4e9i5qP+m6GnHirOyV7uLBAKUOSh37P 9Cw9OiwwG3ySkhzOZ/IA7TdSRxnEAM8KXyevJhLGgs8KdQFO2TqKWaysaNcYlNVS lJkfLgJJGY/GbHfJygdBR+u3TkCJcP2LwKDftSgPUZHwcE6pkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7TR6XcHZ5AxieHoSB8yzzQy/60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2Q3ODc5YzQtMzYxYy0z ZjJlLWE2ODMtMDcyNDhkMzA4MGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfd5VjVr8TbgOEQckskYIIu9Ifzl5NZgZku80KMAJ1mm38VQnWROQSd I7f0a86Afs9VwJW4to7SvpKLib9hnIHKOQGUe67KG0EBE1TH5O4MRmtNF3FnwI7S WkNdvt2MJ48bwJ+goXqtkziOHzafwcnNIAR757whPBhS/pyHf/UbhYziISECObSD EQdQulTSjkeLCyI97GDnJ/u2Xhv4PFXgnMsuWpr4xaumm4oQtYCRXSxQd9HJKt7w Otg24eBR6kA3JHDSUplAfFcz/X8cIzg/CA0vyOSOdH17ccTt/n47wjDANrDnlzau SUhIfOLVxAq53p5h3uFTOy8nW5nbjyQ= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:04 2026 by rpki-client