$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/463eb926-1d00-3196-b72a-aa5e42a7152f.roa File: 463eb926-1d00-3196-b72a-aa5e42a7152f.roa (raw, json) Hash identifier: 2MnS0lm3IU4WJoew/9em+rnRqvM1Gn47mJQ/1I5zOzs= Subject key identifier: AD:3F:A4:D2:D9:BA:80:21:4E:91:C2:DC:D7:AC:2E:30:B6:7B:06:BC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC777825ACBCB796A2CDC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/463eb926-1d00-3196-b72a-aa5e42a7152f.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.146.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:77:78:25:ac:bc:b7:96:a2:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=b8d6097e-6a06-4c08-bd0b-6bbaebcb4d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1b:0b:fe:92:37:b0:f6:bb:e3:f8:6b:58:b0: df:43:a2:17:67:96:1f:6b:09:cd:1f:9d:6c:08:f7: 6a:cd:3a:92:42:20:44:c7:9b:61:2b:e4:36:03:d4: 53:8a:95:4d:03:17:86:cc:10:a7:72:1a:8d:b6:1d: f1:db:76:02:94:b3:e9:eb:8f:8b:d0:43:5f:85:b8: 65:9f:d3:89:24:86:a5:5f:67:e3:58:51:c7:6a:25: bc:68:ed:98:24:02:20:0b:86:6c:94:7d:2b:20:7b: eb:29:89:99:7c:53:fd:24:d2:3f:a5:3c:6c:5d:b6: ac:92:22:b2:3b:f2:c5:bb:3a:06:5c:e0:34:b2:7e: 98:37:e3:fa:f0:1f:89:cf:7b:bf:44:ca:49:e9:f5: de:e5:d3:21:b9:d7:cb:f9:c0:a3:2e:d8:80:bb:66: 38:36:8f:19:88:c9:90:a2:66:5b:16:7a:6b:5a:5c: 01:f0:db:7f:83:f2:c0:38:fd:e8:07:ac:6e:34:07: 63:9a:9d:c8:91:fd:78:4f:4b:6b:24:f3:3b:95:ed: c3:f2:ef:79:16:42:e8:0c:4c:08:60:e7:f7:25:d9: 17:d4:df:fa:11:3d:87:6e:96:d5:16:27:4c:e2:52: 98:32:c9:0e:b3:88:7c:14:3e:42:5a:76:07:a8:6d: 5f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3F:A4:D2:D9:BA:80:21:4E:91:C2:DC:D7:AC:2E:30:B6:7B:06:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/463eb926-1d00-3196-b72a-aa5e42a7152f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:42:63:4c:06:e0:85:6e:a2:5f:11:52:53:7a:6e:fb:fc:76: c3:79:f6:9a:f4:63:1a:7a:44:5b:57:76:4a:7c:11:94:b9:37: 07:43:23:75:1d:14:9d:66:6b:29:94:00:2f:b0:de:99:60:54: 13:e7:44:03:5a:b2:18:93:23:97:7e:cc:b7:b1:ed:06:4e:3c: 0f:5b:53:1f:6e:17:b6:86:f2:11:b5:d4:28:b7:45:7d:79:21: 1e:e4:f8:5c:7a:5a:08:40:e0:a7:de:3d:b6:7d:41:fe:03:ac: f1:8d:ad:6f:0a:7b:eb:04:d0:d8:5e:ae:36:49:a4:92:8d:4c: 0f:69:1d:b2:f1:e9:7d:ad:ac:14:d3:06:ed:bd:a5:2a:d4:05: af:6f:5e:ac:31:e5:63:d9:69:0a:10:58:cb:a4:95:4d:8f:cf: 74:82:fd:bf:d4:26:92:36:45:6b:52:d8:3e:9a:63:82:43:75: 52:90:19:a4:39:f7:93:06:ff:01:58:ca:c7:cf:81:82:cd:ce: a1:6f:6d:24:ff:06:0c:2c:31:b0:4d:34:d4:d2:f4:11:9b:f9: 4a:ea:1e:da:f1:5a:8a:8a:d9:79:0b:2f:80:57:6f:0e:9a:78: ae:4d:58:73:33:d3:f7:ec:a6:81:42:21:8a:db:75:9e:b3:5e: 5e:49:7c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHd4Jay8t5aizcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YjhkNjA5N2UtNmEwNi00YzA4LWJkMGItNmJiYWViY2I0ZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhsL/pI3sPa74/hrWLDfQ6IXZ5YfawnNH51s CPdqzTqSQiBEx5thK+Q2A9RTipVNAxeGzBCnchqNth3x23YClLPp64+L0ENfhbhl n9OJJIalX2fjWFHHaiW8aO2YJAIgC4ZslH0rIHvrKYmZfFP9JNI/pTxsXbaskiKy O/LFuzoGXOA0sn6YN+P68B+Jz3u/RMpJ6fXe5dMhudfL+cCjLtiAu2Y4No8ZiMmQ omZbFnprWlwB8Nt/g/LAOP3oB6xuNAdjmp3Ikf14T0trJPM7le3D8u95FkLoDEwI YOf3JdkX1N/6ET2HbpbVFidM4lKYMskOs4h8FD5CWnYHqG1fOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0/pNLZuoAhTpHC3NesLjC2ewa8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDYzZWI5MjYtMWQwMC0z MTk2LWI3MmEtYWE1ZTQyYTcxNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgZISMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJCY0wG4IVuol8RUlN6bvv8dsN59pr0Yxp6RFtXdkp8EZS5NwdDI3Ud FJ1maymUAC+w3plgVBPnRANashiTI5d+zLex7QZOPA9bUx9uF7aG8hG11Ci3RX15 IR7k+Fx6WghA4KfePbZ9Qf4DrPGNrW8Ke+sE0NherjZJpJKNTA9pHbLx6X2trBTT Bu29pSrUBa9vXqwx5WPZaQoQWMuklU2Pz3SC/b/UJpI2RWtS2D6aY4JDdVKQGaQ5 95MG/wFYysfPgYLNzqFvbST/BgwsMbBNNNTS9BGb+UrqHtrxWoqK2XkLL4BXbw6a eK5NWHMz0/fspoFCIYrbdZ6zXl5JfLI= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:05 2026 by rpki-client