$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af720b5-edb1-3a64-a631-fb6c358235e3.roa File: 8af720b5-edb1-3a64-a631-fb6c358235e3.roa (raw, json) Hash identifier: zC1VZlEG9c+Qsa0RXxwvhyhlEUHQMkVtW8S6uc5CqQA= Subject key identifier: 3A:9D:77:25:83:61:27:05:AE:AF:52:DD:7E:EC:F6:49:A2:4C:16:17 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC8028F6A237B0D7180B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af720b5-edb1-3a64-a631-fb6c358235e3.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.153.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:80:28:f6:a2:37:b0:d7:18:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=88a84e48-83fc-4cc5-923b-b8f659fd5e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:81:90:34:36:32:de:8d:6d:e8:30:a0:d7:05: 69:0a:48:d1:20:b5:91:b4:06:5e:69:24:44:84:a9: 25:c4:72:df:a1:a8:e0:83:a4:d1:60:48:e5:cc:2f: bb:28:12:0b:61:b9:04:18:a5:7e:26:1f:26:c4:d6: a4:5a:f4:8d:b3:1d:5d:75:a8:50:71:cd:17:d3:26: 4b:ee:e5:76:db:56:18:79:b4:e4:54:5e:a6:74:17: 6e:03:f6:d8:88:2d:09:53:a9:94:5a:06:cf:97:23: 84:41:d0:65:83:01:04:68:a3:99:80:f5:10:da:1b: 44:9c:71:a8:72:22:19:e4:42:44:9e:05:04:e7:67: 87:34:5b:9e:11:14:87:71:b3:d0:ed:e5:90:e9:22: 2a:46:05:08:b6:6e:f2:e1:1b:29:01:30:f4:45:e0: 32:86:04:70:7f:0e:93:7b:a2:10:98:21:a2:e2:d2: 29:f8:4d:4f:89:0a:0f:d9:8a:03:e5:28:c8:21:8c: 2d:81:d8:49:9f:6b:69:46:aa:fe:84:26:05:75:a5: 12:02:b1:10:22:42:0f:45:de:3b:a7:6a:ae:19:24: e6:1d:b0:4c:8e:5d:f0:55:6b:40:10:26:64:3a:15: 8b:2c:00:9e:51:f5:af:34:c1:68:a2:38:c9:28:db: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9D:77:25:83:61:27:05:AE:AF:52:DD:7E:EC:F6:49:A2:4C:16:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af720b5-edb1-3a64-a631-fb6c358235e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:73:2b:f2:89:57:18:a5:68:d9:0f:3a:8a:c1:15:10:b1:70: db:d2:30:24:d5:ec:2b:99:77:28:87:23:3a:10:b4:74:35:11: c0:ed:6a:36:cd:4b:54:92:ba:a6:9d:b4:5d:a5:e0:72:c0:2b: 4e:35:dd:3a:66:08:25:ab:2b:47:ee:71:88:26:ba:80:7a:9b: 7e:e7:39:95:1c:78:a6:0c:f1:d7:d6:cf:af:ae:85:00:e3:32: 64:67:a3:d2:88:dd:b9:87:c6:4f:3d:6e:e3:63:bb:79:86:03: b6:70:81:f7:fd:b9:c6:05:59:86:e3:07:18:c6:28:ec:cb:4e: fe:ca:a8:49:3e:b9:f6:12:56:17:40:50:98:fd:40:87:15:5f: 97:ca:fa:d3:52:bb:87:f7:ee:e1:05:f2:66:2f:3e:9c:3a:37: 64:06:38:8f:98:c8:2c:40:aa:c5:33:2d:72:df:8a:23:4b:42: d9:65:95:75:9c:5b:94:af:e0:47:29:a0:b8:d0:20:d8:61:b0: 99:4f:67:40:15:1a:df:3e:0b:9d:a2:f1:8c:8d:41:34:9a:69: 5f:fa:e1:0d:34:66:9d:86:85:74:d7:87:95:9b:44:94:ee:b5: 6c:a2:26:2d:28:09:de:30:83:47:d2:2e:d9:0b:a0:98:94:6b: d6:07:dc:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIAo9qI3sNcYCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk ODhhODRlNDgtODNmYy00Y2M1LTkyM2ItYjhmNjU5ZmQ1ZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIGQNDYy3o1t6DCg1wVpCkjRILWRtAZeaSRE hKklxHLfoajgg6TRYEjlzC+7KBILYbkEGKV+Jh8mxNakWvSNsx1ddahQcc0X0yZL 7uV221YYebTkVF6mdBduA/bYiC0JU6mUWgbPlyOEQdBlgwEEaKOZgPUQ2htEnHGo ciIZ5EJEngUE52eHNFueERSHcbPQ7eWQ6SIqRgUItm7y4RspATD0ReAyhgRwfw6T e6IQmCGi4tIp+E1PiQoP2YoD5SjIIYwtgdhJn2tpRqr+hCYFdaUSArEQIkIPRd47 p2quGSTmHbBMjl3wVWtAECZkOhWLLACeUfWvNMFoojjJKNvHxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqddyWDYScFrq9S3X7s9kmiTBYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGFmNzIwYjUtZWRiMS0z YTY0LWE2MzEtZmI2YzM1ODIzNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgZlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERzK/KJVxilaNkPOorBFRCxcNvSMCTV7CuZdyiHIzoQtHQ1EcDtajbN S1SSuqadtF2l4HLAK0413TpmCCWrK0fucYgmuoB6m37nOZUceKYM8dfWz6+uhQDj MmRno9KI3bmHxk89buNju3mGA7Zwgff9ucYFWYbjBxjGKOzLTv7KqEk+ufYSVhdA UJj9QIcVX5fK+tNSu4f37uEF8mYvPpw6N2QGOI+YyCxAqsUzLXLfiiNLQtlllXWc W5Sv4EcpoLjQINhhsJlPZ0AVGt8+C52i8YyNQTSaaV/64Q00Zp2GhXTXh5WbRJTu tWyiJi0oCd4wg0fSLtkLoJiUa9YH3M0= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:36 2026 by rpki-client