$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa File: 9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa (raw, json) Hash identifier: kCGZMCBWFC+WZ9qRQUR7NIbGIeDz2YmFSUt7DTiRWTw= Subject key identifier: 3D:5E:AC:13:30:8F:54:24:FE:8E:6A:92:3D:DF:E8:8E:DA:34:30:81 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CBDB1D33704C550CD3F573600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 31898 IP address blocks: 129.191.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:d3:37:04:c5:50:cd:3f:57:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=013dcb64-a6f7-483a-b052-a1e55b2cdd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:17:31:89:d4:c4:58:33:20:1a:5f:5f:57: bf:5a:3d:33:6c:48:84:f8:27:6f:f9:f9:78:18:10: 56:4d:3f:a0:27:73:84:0f:98:50:ee:c0:07:94:a6: d6:c7:a5:ac:06:61:d6:92:97:bd:65:32:54:c2:a4: 70:a4:10:51:a1:f6:89:9b:35:0d:9b:cb:ac:15:3a: 2c:9a:b4:a8:f0:65:f7:2d:4f:f9:9e:3d:b4:f5:37: 13:57:aa:a0:5b:34:a7:0d:7c:9f:a8:f8:a8:d0:ec: 3e:18:1d:8a:ac:aa:59:72:5a:a2:71:92:af:8c:57: 91:b1:c5:97:aa:af:b4:c4:15:b4:d7:68:d9:6d:3d: eb:5a:32:08:ee:00:f6:db:8e:51:15:da:72:7b:65: 97:01:80:69:f9:39:cf:b6:81:5a:f1:74:57:5c:ab: 7c:17:99:81:30:12:59:7c:c1:61:f4:47:85:c9:3e: c2:87:cd:95:19:51:f2:b6:0b:ec:eb:56:a4:36:95: 17:14:7a:cb:79:f5:d3:d6:a3:37:f2:1b:87:ed:66: 97:fa:36:3d:77:05:99:21:1f:16:70:28:95:b9:97: 17:e7:e2:91:a9:1d:a6:6c:85:e2:96:77:35:5a:2f: f8:48:93:63:62:b4:5b:c2:8f:1e:e0:a5:41:3c:ec: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5E:AC:13:30:8F:54:24:FE:8E:6A:92:3D:DF:E8:8E:DA:34:30:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.191.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:55:5a:e1:96:f1:1d:0b:05:8e:f8:a3:f2:cd:af:d8:ad:b8: 1b:2a:d8:54:05:c6:0e:7b:01:01:f4:1a:e0:e8:52:a7:33:86: 7e:d9:5c:ba:27:71:ee:27:ae:7b:65:e6:28:ba:60:2c:34:81: d4:44:41:58:b2:55:43:34:15:bf:86:06:1f:16:76:be:9f:33: 87:b2:02:94:10:97:fd:51:de:c9:83:fe:69:cf:00:b6:0d:e3: fd:36:41:14:c1:ea:c8:45:f0:cd:dd:13:a9:72:ef:da:4b:81: 7d:6d:8d:bb:16:0a:53:b8:99:2d:47:ad:0d:51:a8:2a:be:b6: bb:5e:c0:0e:da:c8:a5:86:17:e7:40:f4:a8:c5:f1:1e:af:e8: 6b:3e:10:17:7f:37:fa:b5:ec:0b:55:6e:ad:01:1b:c2:fb:cf: 77:08:0f:71:b8:07:87:7c:04:a0:49:4a:42:80:28:a8:6a:4c: 4f:88:e5:c5:24:1d:df:ab:a6:08:62:51:6c:be:e4:41:98:c5: 33:d7:71:97:40:7e:59:e5:6b:95:49:10:aa:81:5f:05:d5:01: 5a:f9:07:b2:e2:6d:ab:c7:78:a5:fb:18:e5:21:31:fe:2e:e5: 80:77:88:5a:21:8a:d2:6a:43:a3:e6:8b:62:d2:9a:ce:11:88: f4:85:f1:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sdM3BMVQzT9XNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk MDEzZGNiNjQtYTZmNy00ODNhLWIwNTItYTFlNTViMmNkZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv4XMYnUxFgzIBpfX1e/Wj0zbEiE+Cdv+fl4 GBBWTT+gJ3OED5hQ7sAHlKbWx6WsBmHWkpe9ZTJUwqRwpBBRofaJmzUNm8usFTos mrSo8GX3LU/5nj209TcTV6qgWzSnDXyfqPio0Ow+GB2KrKpZclqicZKvjFeRscWX qq+0xBW012jZbT3rWjII7gD2245RFdpye2WXAYBp+TnPtoFa8XRXXKt8F5mBMBJZ fMFh9EeFyT7Ch82VGVHytgvs61akNpUXFHrLefXT1qM38huH7WaX+jY9dwWZIR8W cCiVuZcX5+KRqR2mbIXilnc1Wi/4SJNjYrRbwo8e4KVBPOzuSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1erBMwj1Qk/o5qkj3f6I7aNDCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWM4ZWU5MWItODRmOS0z YWY4LWE4MDUtZjQ5YzNlODYyYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgb+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNVWuGW8R0LBY74o/LNr9ituBsq2FQFxg57AQH0GuDoUqczhn7ZXLon ce4nrntl5ii6YCw0gdREQViyVUM0Fb+GBh8Wdr6fM4eyApQQl/1R3smD/mnPALYN 4/02QRTB6shF8M3dE6ly79pLgX1tjbsWClO4mS1HrQ1RqCq+trtewA7ayKWGF+dA 9KjF8R6v6Gs+EBd/N/q17AtVbq0BG8L7z3cID3G4B4d8BKBJSkKAKKhqTE+I5cUk Hd+rpghiUWy+5EGYxTPXcZdAflnla5VJEKqBXwXVAVr5B7LibavHeKX7GOUhMf4u 5YB3iFohitJqQ6Pmi2LSms4RiPSF8f8= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:33 2026 by rpki-client