$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a3ada1e-e4f7-3bf1-8186-3a1457ee38c3.roa File: 6a3ada1e-e4f7-3bf1-8186-3a1457ee38c3.roa (raw, json) Hash identifier: aScG07XWcfm/ENBF22K49kM5ufv70C6dtGt3kU/lnsg= Subject key identifier: 41:D1:3D:A1:0C:FC:D8:04:80:14:40:FE:D1:9B:F9:64:1F:0F:7F:24 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA27302D05ACD96595FC0820 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a3ada1e-e4f7-3bf1-8186-3a1457ee38c3.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 129.148.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:30:2d:05:ac:d9:65:95:fc:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=37c5491b-e25d-44dc-af8b-4c67e455a25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:f3:2c:17:c3:0e:3e:03:76:06:72:c1:b7: f0:1f:48:68:96:e4:3b:2f:92:41:53:48:23:9c:30: 37:52:18:57:ac:5a:bf:f0:1f:05:cf:35:26:4a:92: 1b:3d:58:b9:2e:15:c6:67:9a:c0:c1:25:50:2f:79: 19:c0:61:4d:68:a8:d4:54:ff:ca:ea:bc:2c:d0:88: 66:a1:60:46:fd:21:54:a6:45:bc:8a:72:6c:6f:47: b3:79:2c:57:18:fd:d6:17:32:9e:d6:b5:63:10:aa: bc:19:ed:26:7f:92:e3:74:52:45:25:6c:3a:6a:f7: 8a:42:6b:44:72:c0:6e:6b:24:50:88:c3:23:a0:56: 5a:92:c6:00:3a:cd:48:0f:31:ed:03:48:41:5f:9d: 74:b8:04:f0:e7:ad:11:91:be:94:74:0b:51:80:8d: 5d:f6:50:0f:d4:1d:eb:36:e3:4d:2f:d2:16:63:5d: 71:f5:36:41:ea:16:da:c0:74:2a:f8:e0:00:2f:aa: 81:ec:8c:e2:80:93:12:cf:97:11:eb:bd:b1:7f:2a: fc:d3:ae:9f:f9:54:ff:3f:1d:f6:0b:22:7a:fd:df: 8b:77:bb:f1:ad:11:ab:d9:a5:f1:5a:36:97:1d:d1: 7d:0c:89:db:6b:9e:8a:eb:1f:51:9e:cd:7b:37:df: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D1:3D:A1:0C:FC:D8:04:80:14:40:FE:D1:9B:F9:64:1F:0F:7F:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a3ada1e-e4f7-3bf1-8186-3a1457ee38c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:20:86:47:96:ad:f0:09:a4:80:98:b6:57:d9:a1:ae:d0:05: 58:54:c4:0b:c1:7b:df:27:19:d4:db:f1:0a:62:81:0b:9f:de: 55:24:8e:c0:30:09:01:fb:5a:3a:70:c1:10:5a:57:f6:86:12: 8c:13:0d:e1:bd:d8:e5:87:b0:9c:ac:7b:7a:b7:52:02:58:38: 84:1b:81:18:23:65:61:9e:41:0d:2b:de:71:54:8e:87:4b:20: 74:aa:34:1b:8a:65:27:01:c2:42:10:ec:f9:47:a9:11:11:74: d4:5c:21:6b:c4:ea:f9:3e:79:08:79:a5:a4:04:f2:63:63:8b: d5:79:14:3f:c8:c5:dd:5d:12:f9:8c:43:21:36:4e:29:38:38: df:9f:e8:02:97:66:ee:ae:5e:a7:e2:6f:e1:10:95:ad:18:bd: 2d:fb:27:71:83:24:e4:f2:a5:7c:83:c7:0e:39:1e:8a:eb:01: 9a:08:3c:ac:e4:b8:c0:e8:36:25:70:11:23:3c:f8:b2:27:a2: 16:d6:18:4a:13:88:0b:08:c7:09:40:9b:58:85:83:f8:54:5e: 98:59:d3:e7:ba:ed:be:1d:0f:91:da:4e:d1:2c:d2:10:7b:2b: 25:2a:62:14:3f:c4:3d:2d:93:5a:aa:cc:24:75:d3:58:70:b4: 56:22:fe:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJzAtBazZZZX8CCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MzdjNTQ5MWItZTI1ZC00NGRjLWFmOGItNGM2N2U0NTVhMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ODzLBfDDj4DdgZywbfwH0holuQ7L5JBU0gj nDA3UhhXrFq/8B8FzzUmSpIbPVi5LhXGZ5rAwSVQL3kZwGFNaKjUVP/K6rws0Ihm oWBG/SFUpkW8inJsb0ezeSxXGP3WFzKe1rVjEKq8Ge0mf5LjdFJFJWw6aveKQmtE csBuayRQiMMjoFZaksYAOs1IDzHtA0hBX510uATw560Rkb6UdAtRgI1d9lAP1B3r NuNNL9IWY11x9TZB6hbawHQq+OAAL6qB7IzigJMSz5cR672xfyr8066f+VT/Px32 CyJ6/d+Ld7vxrRGr2aXxWjaXHdF9DInba56K6x9Rns17N9/2zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHRPaEM/NgEgBRA/tGb+WQfD38kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmEzYWRhMWUtZTRmNy0z YmYxLTgxODYtM2ExNDU3ZWUzOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoghkeWrfAJpICYtlfZoa7QBVhUxAvBe98nGdTb8QpigQuf3lUkjsAw CQH7WjpwwRBaV/aGEowTDeG92OWHsJyse3q3UgJYOIQbgRgjZWGeQQ0r3nFUjodL IHSqNBuKZScBwkIQ7PlHqRERdNRcIWvE6vk+eQh5paQE8mNji9V5FD/Ixd1dEvmM QyE2Tik4ON+f6AKXZu6uXqfib+EQla0YvS37J3GDJOTypXyDxw45HorrAZoIPKzk uMDoNiVwESM8+LInohbWGEoTiAsIxwlAm1iFg/hUXphZ0+e67b4dD5HaTtEs0hB7 KyUqYhQ/xD0tk1qqzCR101hwtFYi/uo= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:24 2026 by rpki-client