$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/686badf9-71ff-3a50-8be9-89519dccd889.roa File: 686badf9-71ff-3a50-8be9-89519dccd889.roa (raw, json) Hash identifier: obth0mDxw4Z5p2MjmjkIpje2D0yvHJmARF12yiOjt7U= Subject key identifier: EC:59:B9:A2:E8:CD:B1:9A:23:55:32:B7:31:09:93:C1:BE:72:75:A1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CB81C7DAB03AC5AED55729184 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/686badf9-71ff-3a50-8be9-89519dccd889.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.158.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:7d:ab:03:ac:5a:ed:55:72:91:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=c8b0ed1b-ba41-467c-9a66-5381843152b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:81:a5:39:69:70:ec:49:9c:39:18:dd:0f: 5e:00:ef:92:3d:82:08:83:c0:2b:df:11:58:64:06: 6f:6e:f4:a0:2a:2f:39:74:b4:d0:36:7d:0f:6d:cf: e6:22:9b:f8:85:fc:c1:c1:8f:08:9b:17:9e:51:a6: 66:53:f6:b1:41:6e:b0:ed:a8:53:09:9c:3c:e9:b4: 93:e6:c5:0e:e7:13:37:de:13:a8:92:39:4d:9d:fd: 76:5b:49:37:4d:39:aa:1f:6c:24:6c:30:f5:7a:9b: 1f:e5:f4:64:f7:28:5a:60:8b:6d:3f:81:87:3e:95: a7:a0:3a:7b:87:60:d2:80:c3:d6:a0:31:ab:80:c8: 03:11:29:ef:5b:2d:f6:76:0b:ef:f8:3f:d9:23:66: 92:a1:fa:98:b5:f3:3d:02:0d:65:02:c2:fc:ce:91: 9f:34:08:b4:3e:6a:a4:f1:e5:4d:6c:a4:49:87:83: b0:9e:ed:05:52:4f:c8:96:8e:a4:87:90:e1:98:79: b7:6f:f4:c2:1e:6a:01:38:a0:1c:cd:8d:64:64:89: f2:c5:1e:ec:da:a7:e9:fb:a0:4d:b9:a9:56:69:55: d8:88:54:f4:8c:5b:46:41:7b:d9:e0:33:f0:2c:ed: 3f:79:54:f7:e0:86:8d:e4:10:d8:5a:d3:0d:bf:62: f9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:59:B9:A2:E8:CD:B1:9A:23:55:32:B7:31:09:93:C1:BE:72:75:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/686badf9-71ff-3a50-8be9-89519dccd889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.158.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0d:75:43:bd:3a:d6:52:a4:a6:da:a1:52:12:33:e0:ce:cf: 84:eb:30:db:12:38:b0:1e:fd:74:88:b3:27:f2:6b:21:28:1d: c0:ea:c7:78:d3:56:87:b1:71:f5:37:13:66:a2:ee:6e:58:ad: 4b:28:65:45:02:7b:87:0e:e5:af:7a:ed:9e:ec:eb:5f:4e:7d: 69:21:83:24:d3:93:bd:19:2b:50:d5:23:cf:cf:3f:87:28:22: 74:4c:61:48:e6:4a:e0:86:11:25:89:42:e5:30:c1:5e:64:07: 10:c7:6a:ca:2f:42:ba:84:58:20:66:36:43:a5:8b:f4:a2:f9: be:9b:5a:3c:60:32:37:f6:68:2a:3e:1a:4e:a3:82:81:2d:63: e8:e4:8b:81:29:9f:c9:46:af:ec:f9:e0:c4:14:45:85:b0:f3: e0:7f:7d:b7:ea:70:ad:4a:9b:b6:89:9b:10:d1:ad:1e:50:3b: e3:44:08:07:94:9c:a8:33:ce:ed:26:2c:da:10:e1:79:a1:89: 99:24:e6:2a:2d:07:e0:06:96:5e:36:ef:bf:7d:d9:1b:09:2a: 11:99:51:70:dc:7b:3e:be:34:7d:3b:fa:08:2b:7f:60:4c:c6: 39:fe:fc:c5:59:4f:5d:40:6a:de:7e:37:28:17:2f:f9:04:6b: fc:3a:d2:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HH2rA6xa7VVykYQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk YzhiMGVkMWItYmE0MS00NjdjLTlhNjYtNTM4MTg0MzE1MmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH+BpTlpcOxJnDkY3Q9eAO+SPYIIg8Ar3xFY ZAZvbvSgKi85dLTQNn0Pbc/mIpv4hfzBwY8ImxeeUaZmU/axQW6w7ahTCZw86bST 5sUO5xM33hOokjlNnf12W0k3TTmqH2wkbDD1epsf5fRk9yhaYIttP4GHPpWnoDp7 h2DSgMPWoDGrgMgDESnvWy32dgvv+D/ZI2aSofqYtfM9Ag1lAsL8zpGfNAi0Pmqk 8eVNbKRJh4Ownu0FUk/Ilo6kh5DhmHm3b/TCHmoBOKAczY1kZInyxR7s2qfp+6BN ualWaVXYiFT0jFtGQXvZ4DPwLO0/eVT34IaN5BDYWtMNv2L5gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxZuaLozbGaI1UytzEJk8G+cnWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjg2YmFkZjktNzFmZi0z YTUwLThiZTktODk1MTlkY2NkODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgZ6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEANdUO9OtZSpKbaoVISM+DOz4TrMNsSOLAe/XSIsyfyayEoHcDqx3jT VoexcfU3E2ai7m5YrUsoZUUCe4cO5a967Z7s619OfWkhgyTTk70ZK1DVI8/PP4co InRMYUjmSuCGESWJQuUwwV5kBxDHasovQrqEWCBmNkOli/Si+b6bWjxgMjf2aCo+ Gk6jgoEtY+jki4Epn8lGr+z54MQURYWw8+B/fbfqcK1Km7aJmxDRrR5QO+NECAeU nKgzzu0mLNoQ4XmhiZkk5iotB+AGll4277992RsJKhGZUXDcez6+NH07+ggrf2BM xjn+/MVZT11Aat5+NygXL/kEa/w60n0= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:27 2026 by rpki-client