$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa File: 8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa (raw, json) Hash identifier: LgJfo3p/i/H0CmX5HnLZwu/YZtK6ccoFytoipgroTg0= Subject key identifier: CC:BC:5A:8D:B7:4F:71:95:35:7F:04:C2:FE:0B:3C:11:B1:C1:E5:7D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC6D7BA2746A85455E2C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.146.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:6d:7b:a2:74:6a:85:45:5e:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=0c5410d4-ac2f-4982-908f-26a4279a39c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:1b:28:e9:72:df:45:84:a7:47:8e:3d:5d: 22:1a:3d:e0:7c:f7:05:b5:9b:b9:ca:86:58:4d:42: 58:06:6a:c5:19:54:eb:df:3c:cd:b5:98:8c:5c:70: 81:61:e7:77:fc:7f:39:a9:0c:23:8b:69:58:2e:2d: f9:97:cc:0b:20:90:a6:2e:25:03:a4:9c:63:c6:f4: dd:76:9f:81:75:8b:b3:e2:ce:d0:64:ef:8b:0f:a1: 70:5a:bc:7d:9c:ec:aa:f8:f9:bf:a7:b5:07:db:8a: 28:a5:cf:7e:11:2f:d5:4d:e4:1d:cd:1d:f2:8b:3a: d0:7e:62:28:1b:9d:e9:62:b2:5c:d8:3b:e0:8f:fc: 94:a7:6d:3d:04:0d:c6:3a:c3:0c:b7:2e:51:c7:10: f7:6e:28:f1:8a:9a:40:89:fd:78:f0:7a:bd:14:f9: bc:7a:aa:39:23:73:7d:5a:99:0d:c2:00:ec:35:64: d7:49:8f:5e:ed:e2:21:66:d1:e1:be:38:79:3f:de: e1:38:54:b1:bc:cf:f7:01:1c:b8:df:e5:64:0c:0f: fb:fe:ae:0a:8f:9e:b9:53:f9:f6:6d:58:28:37:3c: a6:7e:f0:8f:a3:17:17:08:d8:ab:ab:5b:84:d6:0e: 6b:c3:c3:06:59:f5:d0:98:2b:00:04:e4:a5:60:83: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BC:5A:8D:B7:4F:71:95:35:7F:04:C2:FE:0B:3C:11:B1:C1:E5:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:3b:56:24:0a:06:29:2c:ab:e9:2c:b4:ee:ec:1b:91:79:f7: cf:c8:45:f9:c1:5d:5d:bc:a1:60:8e:32:5d:cf:da:9c:cc:e7: 93:02:58:be:4b:34:91:a8:1b:5d:25:60:86:30:b1:4b:2c:c0: e4:d7:22:00:f7:c9:7a:9a:63:68:f4:27:a7:3a:23:df:58:d7: 30:70:b9:73:f1:95:2b:56:04:54:a3:fd:58:87:ce:eb:16:17: b3:bc:fb:33:64:b8:32:a0:cc:42:2c:04:eb:4b:8c:75:6f:5a: da:ab:94:b4:e5:b8:3f:7e:d0:fe:7f:ed:ad:96:26:63:28:d5: a0:cd:cb:63:e3:47:01:43:e8:40:05:e7:dd:cf:a0:45:d3:fc: ec:6a:46:90:a2:31:55:b0:b4:08:ed:90:12:6e:8b:58:fc:dc: eb:e6:39:86:2c:24:56:01:e3:fa:49:76:7b:89:11:3c:43:c0: ee:92:db:a3:6e:2c:76:01:c1:bb:87:c6:a8:dc:2b:8e:db:ee: 69:bd:05:cc:1d:7e:9b:11:66:dc:b9:21:5d:3b:12:50:ad:1a: ee:14:80:56:bc:f0:4c:fa:de:ef:2e:e3:e4:51:d8:0f:da:f5: 75:1e:f3:db:86:65:16:5a:b6:fc:58:83:a3:c8:11:d8:81:1c: 83:a3:78:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvG17onRqhUVeLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk MGM1NDEwZDQtYWMyZi00OTgyLTkwOGYtMjZhNDI3OWEzOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTUbKOly30WEp0eOPV0iGj3gfPcFtZu5yoZY TUJYBmrFGVTr3zzNtZiMXHCBYed3/H85qQwji2lYLi35l8wLIJCmLiUDpJxjxvTd dp+BdYuz4s7QZO+LD6FwWrx9nOyq+Pm/p7UH24oopc9+ES/VTeQdzR3yizrQfmIo G53pYrJc2Dvgj/yUp209BA3GOsMMty5RxxD3bijxippAif148Hq9FPm8eqo5I3N9 WpkNwgDsNWTXSY9e7eIhZtHhvjh5P97hOFSxvM/3ARy43+VkDA/7/q4Kj565U/n2 bVgoNzymfvCPoxcXCNirq1uE1g5rw8MGWfXQmCsABOSlYIMtywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMy8Wo23T3GVNX8Ewv4LPBGxweV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGU5ZjdkOTctODgxNS0z Y2ViLTgxZWMtZTYxM2YyYTI3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU7ViQKBiksq+kstO7sG5F598/IRfnBXV28oWCOMl3P2pzM55MCWL5L NJGoG10lYIYwsUsswOTXIgD3yXqaY2j0J6c6I99Y1zBwuXPxlStWBFSj/ViHzusW F7O8+zNkuDKgzEIsBOtLjHVvWtqrlLTluD9+0P5/7a2WJmMo1aDNy2PjRwFD6EAF 593PoEXT/OxqRpCiMVWwtAjtkBJui1j83OvmOYYsJFYB4/pJdnuJETxDwO6S26Nu LHYBwbuHxqjcK47b7mm9BcwdfpsRZty5IV07ElCtGu4UgFa88Ez63u8u4+RR2A/a 9XUe89uGZRZatvxYg6PIEdiBHIOjeJU= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:34 2026 by rpki-client