$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/919bf68c-ba5f-3f1f-b773-31b13a5d38d1.roa File: 919bf68c-ba5f-3f1f-b773-31b13a5d38d1.roa (raw, json) Hash identifier: /kFttWHYnUa7yIMXW0lGrUdM9piBFgoyTuOFT/JFWSs= Subject key identifier: 2C:22:13:1E:3D:BE:60:07:03:06:9A:2E:BD:88:8D:16:49:91:FA:45 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE57073965FF85C45D9A4C40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/919bf68c-ba5f-3f1f-b773-31b13a5d38d1.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 129.91.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:07:39:65:ff:85:c4:5d:9a:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=9c834e25-1b9b-414b-b7b7-1bff7c0b05ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:d2:08:c1:68:ce:d1:c5:b3:7a:72:02:79: 90:b4:85:ed:67:78:15:2a:bf:21:1e:68:c6:ab:6a: 91:d4:a5:b0:d9:bf:c1:f7:74:53:06:6f:3f:0e:8a: eb:91:15:26:5f:86:50:b1:e9:63:a5:0e:a6:86:9b: 00:2d:cc:6b:5c:a3:17:26:e7:d3:3c:64:70:fc:5b: 89:51:cf:d1:99:e6:08:f3:05:73:75:c4:17:48:8e: b8:e5:65:16:34:a2:31:87:bd:5d:c1:41:2a:00:bf: df:3c:aa:2a:a2:e3:a2:aa:6b:d9:52:0a:60:a5:9f: ab:0e:b5:a7:39:4c:4a:e8:ef:cf:c4:57:34:74:21: 6b:8b:ab:1b:95:4e:6c:26:fa:2b:ea:d9:5b:d5:67: d7:00:95:17:b7:21:35:c7:75:c6:09:97:4d:47:07: 8d:eb:58:d0:75:fd:3b:7d:f7:35:be:f8:fe:90:46: 9e:5b:22:74:b4:66:5e:97:93:c5:c6:74:4d:80:4e: d8:4f:38:18:8b:4c:7e:68:18:7c:9d:f4:30:43:39: 26:0a:18:7c:99:9c:98:bc:d5:7e:cc:02:7e:0e:44: 50:12:85:a6:f0:93:5d:6e:66:9c:94:64:e6:1d:09: a2:6b:5a:e9:52:4e:76:6e:c2:bd:4f:48:42:1f:e4: 72:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:22:13:1E:3D:BE:60:07:03:06:9A:2E:BD:88:8D:16:49:91:FA:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/919bf68c-ba5f-3f1f-b773-31b13a5d38d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.91.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:bf:20:79:e2:1d:fd:3e:ec:2a:a1:2d:15:49:d5:61:00:b2: 4c:a5:3d:84:cf:2f:8e:be:15:36:03:a3:93:f1:9c:87:7b:85: 24:68:70:56:ca:9b:27:c2:2e:2b:57:8e:0f:bb:e3:d3:07:a1: 49:3a:17:08:c8:e8:dd:25:a4:06:12:54:66:7c:2b:e1:30:06: 45:09:45:75:4b:ab:64:97:4d:08:be:1a:f9:19:e4:66:f2:b3: 4a:9d:9c:b2:4c:b3:e3:b9:d3:05:ec:5b:06:0a:1b:a6:e6:e6: 89:3c:aa:30:90:59:3b:d1:4a:cc:55:2d:7b:f2:b1:77:f6:1c: 6b:e6:3b:b8:8f:17:87:54:f0:eb:ad:47:85:d8:fb:f0:87:5a: c3:79:62:52:09:be:d7:b2:46:6f:3d:2e:2c:c6:06:17:4d:1c: 80:a5:fb:fa:78:45:d7:58:1e:69:8e:01:6c:ee:5e:6e:b5:08: 50:74:c6:e9:a4:8b:37:9b:f7:85:1d:72:07:77:ab:82:4f:a4: 14:dd:b6:ee:7c:01:0d:0d:5c:d7:8b:4e:b4:06:36:dd:63:05: d6:da:62:fa:71:29:a5:39:54:0c:c4:9f:80:60:81:e7:a9:bc: e6:89:1b:b1:0e:cd:6d:3d:ef:8b:39:c7:70:e1:0e:03:b0:30: 2b:c9:da:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVwc5Zf+FxF2aTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWM4MzRlMjUtMWI5Yi00MTRiLWI3YjctMWJmZjdjMGIwNWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu/SCMFoztHFs3pyAnmQtIXtZ3gVKr8hHmjG q2qR1KWw2b/B93RTBm8/DorrkRUmX4ZQseljpQ6mhpsALcxrXKMXJufTPGRw/FuJ Uc/RmeYI8wVzdcQXSI645WUWNKIxh71dwUEqAL/fPKoqouOiqmvZUgpgpZ+rDrWn OUxK6O/PxFc0dCFri6sblU5sJvor6tlb1WfXAJUXtyE1x3XGCZdNRweN61jQdf07 ffc1vvj+kEaeWyJ0tGZel5PFxnRNgE7YTzgYi0x+aBh8nfQwQzkmChh8mZyYvNV+ zAJ+DkRQEoWm8JNdbmaclGTmHQmia1rpUk52bsK9T0hCH+RymQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwiEx49vmAHAwaaLr2IjRZJkfpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTE5YmY2OGMtYmE1Zi0z ZjFmLWI3NzMtMzFiMTNhNWQzOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgVsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIO/IHniHf0+7CqhLRVJ1WEAskylPYTPL46+FTYDo5PxnId7hSRocFbK myfCLitXjg+749MHoUk6FwjI6N0lpAYSVGZ8K+EwBkUJRXVLq2SXTQi+GvkZ5Gby s0qdnLJMs+O50wXsWwYKG6bm5ok8qjCQWTvRSsxVLXvysXf2HGvmO7iPF4dU8Out R4XY+/CHWsN5YlIJvteyRm89LizGBhdNHICl+/p4RddYHmmOAWzuXm61CFB0xumk izeb94Udcgd3q4JPpBTdtu58AQ0NXNeLTrQGNt1jBdbaYvpxKaU5VAzEn4Bggeep vOaJG7EOzW0974s5x3DhDgOwMCvJ2v0= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:04 2026 by rpki-client