$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa File: aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa (raw, json) Hash identifier: 37M2gt05tUtoL2Tct+k7kW6TtzhmtV2FQF3fHyLqMjk= Subject key identifier: F5:E4:86:E8:AB:AC:F4:71:45:1D:EA:AA:D1:75:54:A9:71:2A:F7:4A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5720937558A63CC3275C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 129.148.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:20:93:75:58:a6:3c:c3:27:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7d8ec11b-e6d0-405b-92ed-793cd1dbbe14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:55:47:ce:1e:b3:76:6d:a6:b8:78:4f:49: b8:0f:77:75:a3:46:f7:a1:d1:ec:18:ee:63:af:af: 72:40:89:54:e4:07:82:b1:72:c6:48:c8:f0:40:fa: 8f:22:04:91:80:90:49:81:10:95:9c:0d:2e:d6:28: 4f:04:66:66:d9:5b:cc:9d:3b:49:4e:4d:37:cc:13: d5:a6:7a:aa:61:fb:90:c3:a7:d1:3c:6f:a4:1d:6f: 78:29:c2:3f:4d:9f:e8:4a:df:05:2c:ef:19:22:6f: 9f:79:c1:46:11:59:9d:8b:f1:3d:a5:b3:4a:a4:33: 43:f7:ee:96:fd:ca:b2:c6:4f:1c:7b:69:92:a8:5b: 58:45:b9:58:29:80:60:64:8a:db:da:94:cb:81:a9: b5:5b:79:92:22:b4:4e:f9:c9:2a:19:32:57:c5:aa: 79:4e:54:63:ac:ec:22:e1:14:27:7d:b2:0b:9e:33: 91:95:08:af:e1:0e:57:34:1d:8c:b7:8c:c2:43:cc: 17:86:0a:04:f1:2d:c1:7b:19:33:38:89:55:2c:96: 61:8a:3c:f9:74:28:b4:bf:17:22:b5:cf:b5:87:5b: 22:64:bf:99:23:0c:31:5e:1d:08:a9:9a:f7:73:00: 43:36:38:71:f2:ba:cc:6e:20:ff:24:20:5f:9d:89: 8d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E4:86:E8:AB:AC:F4:71:45:1D:EA:AA:D1:75:54:A9:71:2A:F7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:74:85:89:43:b8:52:b0:ad:6e:1c:60:c2:c7:f1:cf:36:66: 40:c2:7e:1c:eb:3f:89:79:07:1a:4b:ec:e4:af:c8:a8:8d:d2: c3:3e:bb:b0:28:99:0c:0f:1a:03:34:36:85:ba:26:6d:a2:36: 9b:cb:f1:fd:5c:1c:a4:77:e8:cb:b5:62:a9:c6:95:db:ce:d9: d0:54:03:50:78:a2:31:a8:f9:37:20:de:31:29:c7:14:05:29: 88:3f:a4:74:da:e2:14:70:50:6a:6c:3f:c7:d5:c7:1a:dd:bc: b1:38:9a:87:18:dd:1a:d8:bd:37:88:af:27:16:70:54:31:af: 06:da:95:8d:8c:81:42:60:cb:48:de:0c:d5:3b:7e:7e:e1:53: 3b:9c:53:e6:8f:b3:4e:85:a5:d4:7d:ec:6f:63:4c:7f:3b:ef: 93:da:ef:21:31:b4:30:7c:96:6f:cb:c1:49:e9:9b:51:62:3b: c3:85:94:de:0c:20:97:27:a9:ee:0e:f2:83:bb:f9:ee:43:2d: 2f:5e:be:ee:1e:dd:3b:2a:d0:55:6e:9a:9d:f7:eb:d6:31:c9: d5:a4:04:2f:7e:a5:b0:15:79:d8:37:31:49:ae:13:23:02:73: 67:3d:c4:86:94:da:ac:2a:f6:04:0d:e6:1f:a9:d8:c1:42:d1: a8:0e:a3:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyCTdVimPMMnXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2Q4ZWMxMWItZTZkMC00MDViLTkyZWQtNzkzY2QxZGJiZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzZVR84es3Ztprh4T0m4D3d1o0b3odHsGO5j r69yQIlU5AeCsXLGSMjwQPqPIgSRgJBJgRCVnA0u1ihPBGZm2VvMnTtJTk03zBPV pnqqYfuQw6fRPG+kHW94KcI/TZ/oSt8FLO8ZIm+fecFGEVmdi/E9pbNKpDND9+6W /cqyxk8ce2mSqFtYRblYKYBgZIrb2pTLgam1W3mSIrRO+ckqGTJXxap5TlRjrOwi 4RQnfbILnjORlQiv4Q5XNB2Mt4zCQ8wXhgoE8S3BexkzOIlVLJZhijz5dCi0vxci tc+1h1siZL+ZIwwxXh0IqZr3cwBDNjhx8rrMbiD/JCBfnYmNsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXkhuirrPRxRR3qqtF1VKlxKvdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWE5YThiNmMtYjZlZC0z N2VkLWE0OTItNjlmNmNjMGQxN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ0hYlDuFKwrW4cYMLH8c82ZkDCfhzrP4l5BxpL7OSvyKiN0sM+u7Ao mQwPGgM0NoW6Jm2iNpvL8f1cHKR36Mu1YqnGldvO2dBUA1B4ojGo+Tcg3jEpxxQF KYg/pHTa4hRwUGpsP8fVxxrdvLE4mocY3RrYvTeIrycWcFQxrwbalY2MgUJgy0je DNU7fn7hUzucU+aPs06FpdR97G9jTH8775Pa7yExtDB8lm/LwUnpm1FiO8OFlN4M IJcnqe4O8oO7+e5DLS9evu4e3Tsq0FVump3369YxydWkBC9+pbAVedg3MUmuEyMC c2c9xIaU2qwq9gQN5h+p2MFC0agOowE= -----END CERTIFICATE-----Generated at Thu Feb 26 03:28:04 2026 by rpki-client