$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa File: 7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa (raw, json) Hash identifier: KISbOu2W1gKO7LwbN6tr6XGAnnNIATzIQWCgXj0sU28= Subject key identifier: C4:09:B5:59:3C:AC:B5:2D:33:8D:20:CF:6E:3F:F4:A7:2B:3D:2D:A5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC7954245AA45C0069DD80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.146.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:79:54:24:5a:a4:5c:00:69:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=c8e2b590-8fc5-43f7-ac4c-ddfd0cd248a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:0c:96:4f:7e:ad:2d:f2:0d:48:46:d9:dc: b9:3b:8c:b3:9c:52:25:ea:a6:f8:6a:d4:82:a7:16: 06:81:3e:3d:0d:8e:a5:23:8a:51:e9:de:1d:95:29: f4:83:3f:e7:9e:58:75:fa:19:c9:69:34:f3:29:2a: 64:6f:32:84:b9:3d:75:fb:32:60:65:c2:a4:ba:85: b8:5d:07:bc:34:cb:d5:d5:91:b8:62:d8:48:e1:0f: fe:67:ca:83:68:da:43:d6:0d:07:d7:d1:10:2a:7f: 38:39:d0:f7:6d:ac:f4:40:9a:45:c3:63:72:97:b8: 04:e8:70:6a:6e:50:82:78:aa:f6:8e:9f:e3:9c:0f: ee:ca:17:51:13:57:06:7f:b7:f0:92:8d:f5:41:7d: c7:d7:56:8a:f7:12:33:8c:24:bd:04:6c:b3:be:29: 85:33:b1:d2:d5:e9:ad:7e:32:24:4b:50:28:14:37: 17:97:77:42:93:66:80:ba:41:dc:ec:11:40:7f:9a: 0e:b8:55:19:21:de:01:4b:32:e8:a4:aa:8e:f0:e4: d6:b0:17:52:41:0a:c5:7a:a4:67:f1:91:aa:62:6b: 03:40:a3:f1:68:96:df:2b:1c:ef:a9:c5:bb:6f:ac: b9:98:4d:c9:ec:1a:c9:78:47:6d:21:66:d5:19:c5: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:09:B5:59:3C:AC:B5:2D:33:8D:20:CF:6E:3F:F4:A7:2B:3D:2D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:fe:59:e8:1f:7a:ea:b0:30:db:dd:ea:14:b6:1f:0d:e1:ce: 39:9c:3a:1a:5e:33:d0:d0:3d:53:46:14:33:cf:60:3d:59:c5: 17:4f:fa:7a:5f:42:03:2a:f0:9e:e8:7e:1e:65:c3:07:71:14: 38:49:ae:14:e1:cf:a3:06:a8:1d:21:86:aa:15:34:4a:52:01: 6a:2d:9f:8f:6e:23:8f:41:e8:6f:6a:50:4c:e9:e9:45:e7:d4: 95:e1:fc:bc:7a:2c:92:5b:b3:20:5c:87:43:97:35:aa:d6:8b: e6:f9:ac:88:47:fc:85:0c:ee:c3:66:95:90:1f:06:34:96:71: 7d:0e:74:71:c4:6d:40:49:d4:49:29:5a:09:44:b1:e6:d0:59: 8e:c0:58:56:99:99:98:ab:c7:a2:f5:a9:2c:a1:6c:3f:da:94: c2:69:b5:7d:f8:af:30:0a:8b:97:88:96:81:bb:55:bc:e3:6f: 30:ef:d7:2b:07:f9:b8:45:35:a6:28:d2:44:71:86:31:ac:a7: 25:f4:3b:64:eb:e9:78:f2:7d:18:99:ae:12:86:bf:89:bd:80: 7a:c3:52:e7:7d:48:46:e7:3e:3b:b1:2c:85:29:1f:7f:6b:76: 78:c7:04:d9:52:50:17:b9:91:0a:ad:62:eb:01:83:7c:97:f5: 41:f5:16:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHlUJFqkXABp3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YzhlMmI1OTAtOGZjNS00M2Y3LWFjNGMtZGRmZDBjZDI0OGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunsMlk9+rS3yDUhG2dy5O4yznFIl6qb4atSC pxYGgT49DY6lI4pR6d4dlSn0gz/nnlh1+hnJaTTzKSpkbzKEuT11+zJgZcKkuoW4 XQe8NMvV1ZG4YthI4Q/+Z8qDaNpD1g0H19EQKn84OdD3baz0QJpFw2Nyl7gE6HBq blCCeKr2jp/jnA/uyhdRE1cGf7fwko31QX3H11aK9xIzjCS9BGyzvimFM7HS1emt fjIkS1AoFDcXl3dCk2aAukHc7BFAf5oOuFUZId4BSzLopKqO8OTWsBdSQQrFeqRn 8ZGqYmsDQKPxaJbfKxzvqcW7b6y5mE3J7BrJeEdtIWbVGcUBWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQJtVk8rLUtM40gz24/9KcrPS2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzY3MWMyNGItZDhiYy0z MDY3LTlmNTgtNmI5ZjhkOGJkZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/+WegfeuqwMNvd6hS2Hw3hzjmcOhpeM9DQPVNGFDPPYD1ZxRdP+npf QgMq8J7ofh5lwwdxFDhJrhThz6MGqB0hhqoVNEpSAWotn49uI49B6G9qUEzp6UXn 1JXh/Lx6LJJbsyBch0OXNarWi+b5rIhH/IUM7sNmlZAfBjSWcX0OdHHEbUBJ1Ekp WglEsebQWY7AWFaZmZirx6L1qSyhbD/alMJptX34rzAKi5eIloG7VbzjbzDv1ysH +bhFNaYo0kRxhjGspyX0O2Tr6XjyfRiZrhKGv4m9gHrDUud9SEbnPjuxLIUpH39r dnjHBNlSUBe5kQqtYusBg3yX9UH1Fvg= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:17 2026 by rpki-client