$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1127bd9-993a-3003-91c6-a84fe929e89d.roa File: a1127bd9-993a-3003-91c6-a84fe929e89d.roa (raw, json) Hash identifier: TmJlsUn5KzFgTwBPIzNwBbnjKHGMV3gedLseMV4f7ik= Subject key identifier: 83:44:A9:92:63:A3:53:AD:A6:74:65:A2:10:31:FC:31:FA:6A:07:86 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC7FDC819CA4D13B882DC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1127bd9-993a-3003-91c6-a84fe929e89d.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 192.29.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:7f:dc:81:9c:a4:d1:3b:88:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=c19ddf45-4449-4180-a386-b9bfc2407324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:eb:89:a3:35:f9:f3:30:4d:20:2a:29:35:58: 0d:4e:cb:a1:f0:d2:7d:8b:b0:55:78:22:11:a3:a2: c2:51:96:6b:c0:a0:c4:3b:5a:b2:45:69:b4:3c:ed: 7e:30:36:39:58:59:cc:40:47:4d:36:c1:78:6e:8f: 99:19:11:95:b2:95:75:fc:13:30:58:e3:91:0e:eb: 36:1f:7b:76:6e:d6:71:86:1f:c5:3e:ee:4f:cb:30: 39:3e:19:50:63:c6:5d:ef:68:87:73:a0:ac:ff:21: a0:aa:c3:d4:80:39:26:e6:55:68:4c:eb:99:8a:a6: 1d:56:24:40:64:d8:c1:5d:eb:f0:a5:57:26:24:12: 1d:68:85:f9:82:ea:af:25:46:3c:2e:2a:8b:0c:2e: ca:54:e2:b2:e9:7a:a2:99:6d:1f:87:04:26:7c:0b: 32:51:c3:f6:70:6c:83:eb:bc:fe:dd:54:6f:fb:82: 09:1a:98:59:03:0d:8f:5b:00:24:88:0b:72:01:99: a9:56:91:9c:98:22:5a:c6:4d:90:b7:da:73:95:7a: 39:ec:69:4f:ce:ad:ab:d8:d5:c0:8f:d9:5a:5d:a0: fa:95:ba:6b:cb:d5:54:0e:49:aa:fe:af:7a:83:29: 18:5a:67:5e:d2:12:50:44:dc:ab:5f:41:dc:e0:90: 4e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:44:A9:92:63:A3:53:AD:A6:74:65:A2:10:31:FC:31:FA:6A:07:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1127bd9-993a-3003-91c6-a84fe929e89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5d:23:7f:33:9f:77:84:e3:08:16:ee:c9:3a:0c:0e:ed:94: fd:e5:e6:52:f7:18:6b:4c:c2:b3:cd:be:aa:53:83:ac:0d:b3: 05:22:65:db:87:a1:a2:b8:8a:5d:8f:4d:81:56:ae:d1:02:d1: ce:44:69:34:17:41:c4:57:17:f3:67:22:13:49:41:41:67:82: 4d:c3:2b:79:52:cc:ee:e6:bf:86:c7:47:2f:cf:33:c7:0c:df: c4:4e:64:52:b1:9f:95:36:e5:cf:0d:95:97:9c:1f:b9:c2:52: b9:45:0c:f4:e5:a8:e3:a0:f6:22:e5:57:c0:55:f2:e4:0b:49: df:63:c3:35:a8:0c:68:73:51:ee:d8:05:aa:50:51:ed:5e:1c: f3:e0:41:3b:90:18:f8:81:b9:d5:93:b1:dd:f4:84:bb:17:43: 67:34:6b:60:e2:c3:e6:c1:5b:b5:d2:60:76:dd:43:07:72:09: 88:c5:59:be:dd:7c:6a:e3:63:8b:c8:9c:59:8a:bb:45:42:d7: 90:4c:15:59:bb:71:f8:74:99:57:1c:f4:95:8d:6d:56:e1:47: e7:dc:e1:fa:eb:05:d5:1e:46:9d:6d:68:be:aa:56:3a:c4:6c: 7e:04:81:2a:60:1c:c3:7e:a5:b9:ff:66:55:7d:74:ea:40:a6: f3:62:c6:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvH/cgZyk0TuILcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YzE5ZGRmNDUtNDQ0OS00MTgwLWEzODYtYjliZmMyNDA3MzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOuJozX58zBNICopNVgNTsuh8NJ9i7BVeCIR o6LCUZZrwKDEO1qyRWm0PO1+MDY5WFnMQEdNNsF4bo+ZGRGVspV1/BMwWOORDus2 H3t2btZxhh/FPu5PyzA5PhlQY8Zd72iHc6Cs/yGgqsPUgDkm5lVoTOuZiqYdViRA ZNjBXevwpVcmJBIdaIX5guqvJUY8LiqLDC7KVOKy6XqimW0fhwQmfAsyUcP2cGyD 67z+3VRv+4IJGphZAw2PWwAkiAtyAZmpVpGcmCJaxk2Qt9pzlXo57GlPzq2r2NXA j9laXaD6lbpry9VUDkmq/q96gykYWmde0hJQRNyrX0Hc4JBOJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINEqZJjo1OtpnRlohAx/DH6ageGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTExMjdiZDktOTkzYS0z MDAzLTkxYzYtYTg0ZmU5MjllODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1dI38zn3eE4wgW7sk6DA7tlP3l5lL3GGtMwrPNvqpTg6wNswUiZduH oaK4il2PTYFWrtEC0c5EaTQXQcRXF/NnIhNJQUFngk3DK3lSzO7mv4bHRy/PM8cM 38ROZFKxn5U25c8NlZecH7nCUrlFDPTlqOOg9iLlV8BV8uQLSd9jwzWoDGhzUe7Y BapQUe1eHPPgQTuQGPiBudWTsd30hLsXQ2c0a2Diw+bBW7XSYHbdQwdyCYjFWb7d fGrjY4vInFmKu0VC15BMFVm7cfh0mVcc9JWNbVbhR+fc4frrBdUeRp1taL6qVjrE bH4EgSpgHMN+pbn/ZlV9dOpApvNixlc= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:27 2026 by rpki-client