$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/545871c5-7540-387b-8df2-75adcce7b17f.roa File: 545871c5-7540-387b-8df2-75adcce7b17f.roa (raw, json) Hash identifier: Gq5mrTFZ4hgZCRDiA2J6HRfPIvCyHPFbK+D+fPRbGwg= Subject key identifier: 93:9E:75:51:AE:B1:F9:19:E0:9E:54:CE:26:0B:78:26:72:7C:49:FD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE572084CC86A7E058919B70 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/545871c5-7540-387b-8df2-75adcce7b17f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 129.149.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:20:84:cc:86:a7:e0:58:91:9b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=07d661e3-27b7-4d79-bbb2-13d29041d509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:90:5c:39:66:46:46:0c:23:e0:3c:b3:5a: 22:24:ab:55:11:77:34:94:2b:83:8e:fd:83:5c:aa: 3a:d9:3d:cb:70:03:5f:c6:f1:77:eb:85:45:ff:89: ee:be:13:b3:de:ea:97:4a:4b:d5:35:ae:d3:06:53: 57:e7:3d:2f:94:80:e7:16:05:fe:c4:16:81:c9:60: 0f:d0:45:7c:f2:3a:5a:a3:7b:8e:2e:d8:e6:e9:5f: db:06:08:9c:8a:c7:ab:62:ba:ff:4d:eb:33:20:98: 06:f1:33:38:7d:f6:54:a0:8b:75:81:95:5f:b4:eb: 53:99:b5:dc:82:c1:0e:fa:91:e8:03:97:e7:bc:84: bb:b5:44:2f:57:16:be:05:57:22:bf:ec:c1:95:fb: b6:75:e4:41:27:4c:ba:c2:25:11:5e:d2:d2:1e:9c: 77:a9:37:31:22:57:3b:fe:e2:f4:08:6d:fb:01:c7: 92:b0:6a:90:87:4a:c1:19:f2:f8:b2:1f:4d:99:73: e3:6e:86:77:39:ad:cb:64:9c:d7:9e:22:0a:cf:19: 65:19:13:3d:88:27:cc:17:91:a5:df:05:5c:c5:fd: fd:47:a5:59:7f:2d:2e:3e:a2:6b:45:e0:e0:12:69: 13:e6:55:5c:18:3b:69:14:29:cb:d4:92:6e:98:5d: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9E:75:51:AE:B1:F9:19:E0:9E:54:CE:26:0B:78:26:72:7C:49:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/545871c5-7540-387b-8df2-75adcce7b17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:05:14:48:40:57:df:e4:33:04:46:a0:7e:51:c6:65:73:b1: f9:8f:75:39:10:e6:a4:11:52:3d:4f:7a:cd:25:f1:54:8a:55: 5c:d3:ee:3f:1e:75:f5:13:fa:30:39:68:f2:58:fd:94:29:c2: 0c:ca:43:c9:4b:84:e8:78:29:9e:6e:02:4b:65:0c:56:a5:6d: 5a:a9:47:fc:6a:40:aa:a2:8c:36:e7:6f:43:57:d1:fb:c8:0b: 0c:65:cf:73:fa:7a:3f:5d:34:f6:c2:7e:ea:1f:c4:bf:4e:09: 32:8f:25:8d:39:72:d1:44:a4:a3:6e:79:66:1a:e1:1a:7c:af: 3f:3f:c8:61:db:e6:5e:75:a7:ea:d5:37:13:cb:95:2d:31:80: 48:e8:73:7c:57:18:fa:84:17:5f:88:8a:c2:09:43:13:d1:0b: 16:63:1c:f7:73:44:d2:d6:38:92:08:93:b7:03:2c:a1:9d:3c: 44:6e:d6:c2:93:05:fa:ca:93:c1:3d:b6:e2:51:ef:90:d4:0b: 14:f9:a1:98:da:68:14:cc:95:51:56:c1:9d:d2:53:14:e0:51: 9d:72:4b:96:f7:72:5d:57:88:cb:36:4c:cb:51:60:52:74:ab: b1:ac:10:95:8e:9b:76:a3:21:87:b1:f3:b9:64:a2:1d:11:9c: c7:60:9e:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyCEzIan4FiRm3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDdkNjYxZTMtMjdiNy00ZDc5LWJiYjItMTNkMjkwNDFkNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBaQXDlmRkYMI+A8s1oiJKtVEXc0lCuDjv2D XKo62T3LcANfxvF364VF/4nuvhOz3uqXSkvVNa7TBlNX5z0vlIDnFgX+xBaByWAP 0EV88jpao3uOLtjm6V/bBgiciserYrr/TeszIJgG8TM4ffZUoIt1gZVftOtTmbXc gsEO+pHoA5fnvIS7tUQvVxa+BVciv+zBlfu2deRBJ0y6wiURXtLSHpx3qTcxIlc7 /uL0CG37AceSsGqQh0rBGfL4sh9NmXPjboZ3Oa3LZJzXniIKzxllGRM9iCfMF5Gl 3wVcxf39R6VZfy0uPqJrReDgEmkT5lVcGDtpFCnL1JJumF3MnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOedVGusfkZ4J5UziYLeCZyfEn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTQ1ODcxYzUtNzU0MC0z ODdiLThkZjItNzVhZGNjZTdiMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4FFEhAV9/kMwRGoH5RxmVzsfmPdTkQ5qQRUj1Pes0l8VSKVVzT7j8e dfUT+jA5aPJY/ZQpwgzKQ8lLhOh4KZ5uAktlDFalbVqpR/xqQKqijDbnb0NX0fvI Cwxlz3P6ej9dNPbCfuofxL9OCTKPJY05ctFEpKNueWYa4Rp8rz8/yGHb5l51p+rV NxPLlS0xgEjoc3xXGPqEF1+IisIJQxPRCxZjHPdzRNLWOJIIk7cDLKGdPERu1sKT BfrKk8E9tuJR75DUCxT5oZjaaBTMlVFWwZ3SUxTgUZ1yS5b3cl1XiMs2TMtRYFJ0 q7GsEJWOm3ajIYex87lkoh0RnMdgnoU= -----END CERTIFICATE-----Generated at Thu Feb 26 05:00:03 2026 by rpki-client