$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4921a301-5aa7-3ee0-bce8-7472abd0fcae.roa File: 4921a301-5aa7-3ee0-bce8-7472abd0fcae.roa (raw, json) Hash identifier: oNqGgBdw8m1PEhgWf8TrJQ1jS4a4czy/FvcW50zs6jo= Subject key identifier: EB:0F:A9:20:B3:E8:9D:74:4E:B8:E2:06:5C:AA:A1:AF:47:80:56:F3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC8108D64BB98F6C808800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4921a301-5aa7-3ee0-bce8-7472abd0fcae.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.151.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:81:08:d6:4b:b9:8f:6c:80:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=d3c336a9-2e6b-4bb8-861b-deea57759865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b8:15:c3:bb:d1:8f:c7:c1:8e:8c:59:d3:ee: c8:1a:b5:2b:ff:69:b1:aa:0f:35:c2:72:ba:b7:19: 65:4d:5c:c9:70:67:f7:00:52:4c:aa:b5:69:ce:00: e2:5b:b3:37:03:77:ef:b8:e0:5a:b8:8c:15:80:26: a1:bc:3b:90:40:13:bc:39:0a:c1:8f:4a:9f:aa:ec: da:19:5a:0d:31:a6:03:4c:fa:89:d9:d5:3f:5c:94: e6:79:2b:9b:0b:24:56:51:17:9e:bd:db:f1:18:b4: 57:4f:c8:c3:19:e5:ae:0d:e6:fb:5a:2d:85:0f:50: 46:ce:ed:d0:ca:f4:1b:31:da:6b:b9:bf:b9:12:7f: f5:e3:5c:f6:75:cf:76:49:74:af:61:61:a9:2a:e3: 6a:b3:d1:1f:25:02:18:e3:e3:ab:43:c0:7e:aa:91: 48:36:0d:58:16:25:dd:6f:99:50:a3:8d:73:de:96: d5:86:de:0d:0c:f8:87:d5:4f:bc:d0:6c:95:03:65: 31:18:c1:b6:5f:96:d8:67:49:4d:ec:77:8f:6c:e6: 2e:f3:fd:33:44:7d:31:54:f7:e2:56:d1:fa:11:e8: 72:68:ca:e3:12:51:71:9d:25:07:01:6a:a0:64:d2: f9:6b:1b:68:66:86:b3:9a:fa:af:7c:3f:0d:60:ee: 77:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0F:A9:20:B3:E8:9D:74:4E:B8:E2:06:5C:AA:A1:AF:47:80:56:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4921a301-5aa7-3ee0-bce8-7472abd0fcae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.151.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c6:a6:22:0c:a2:d8:48:3d:48:d0:2f:96:36:62:23:f2:33: aa:31:a6:c5:9a:ca:a2:9c:60:83:6f:c3:45:54:47:86:a9:45: 08:62:31:4f:10:fa:be:47:45:78:b1:cd:c3:4e:fc:cc:18:cd: 55:a3:99:99:73:50:ad:25:ae:b2:02:b8:61:99:85:e8:a9:2b: 8d:b1:5e:0f:b1:83:26:07:5c:ec:19:af:c8:06:02:06:ea:69: e7:9d:26:11:ec:d0:9d:6a:29:aa:7d:41:1d:7e:51:96:f7:6e: cf:a0:03:20:18:f9:86:c7:db:1a:8d:6f:dd:2e:2b:5d:9a:1d: c7:18:72:9c:22:28:42:a8:14:e3:78:c3:2d:85:41:9a:71:8c: 0f:91:bf:6f:f2:e2:f6:88:fe:f9:59:ae:0a:d9:0a:ba:8f:0b: 4c:5a:bc:3d:76:53:16:25:7f:f0:30:da:66:cf:bf:91:76:e7: 58:f7:72:ac:26:46:1a:52:c3:2b:2b:1e:2a:9b:70:d7:ad:1e: dc:ce:25:3f:c4:eb:21:f8:03:35:d9:fa:e8:50:c9:90:eb:cf: 21:af:65:5a:c2:58:c4:dd:51:40:be:28:45:a8:82:16:9c:3a: a4:5a:4c:f0:06:c4:f8:fc:9c:1f:9a:73:95:84:0c:ef:0a:56: cc:f5:0a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIEI1ku5j2yAiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZDNjMzM2YTktMmU2Yi00YmI4LTg2MWItZGVlYTU3NzU5ODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLgVw7vRj8fBjoxZ0+7IGrUr/2mxqg81wnK6 txllTVzJcGf3AFJMqrVpzgDiW7M3A3fvuOBauIwVgCahvDuQQBO8OQrBj0qfquza GVoNMaYDTPqJ2dU/XJTmeSubCyRWUReevdvxGLRXT8jDGeWuDeb7Wi2FD1BGzu3Q yvQbMdprub+5En/141z2dc92SXSvYWGpKuNqs9EfJQIY4+OrQ8B+qpFINg1YFiXd b5lQo41z3pbVht4NDPiH1U+80GyVA2UxGMG2X5bYZ0lN7HePbOYu8/0zRH0xVPfi VtH6EehyaMrjElFxnSUHAWqgZNL5axtoZoazmvqvfD8NYO53eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsPqSCz6J10TrjiBlyqoa9HgFbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDkyMWEzMDEtNWFhNy0z ZWUwLWJjZTgtNzQ3MmFiZDBmY2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnGpiIMothIPUjQL5Y2YiPyM6oxpsWayqKcYINvw0VUR4apRQhiMU8Q +r5HRXixzcNO/MwYzVWjmZlzUK0lrrICuGGZheipK42xXg+xgyYHXOwZr8gGAgbq aeedJhHs0J1qKap9QR1+UZb3bs+gAyAY+YbH2xqNb90uK12aHccYcpwiKEKoFON4 wy2FQZpxjA+Rv2/y4vaI/vlZrgrZCrqPC0xavD12UxYlf/Aw2mbPv5F251j3cqwm RhpSwysrHiqbcNetHtzOJT/E6yH4AzXZ+uhQyZDrzyGvZVrCWMTdUUC+KEWoghac OqRaTPAGxPj8nB+ac5WEDO8KVsz1Cp0= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:13 2026 by rpki-client