$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae680b60-6565-3429-a4e9-f3b759a53631.roa File: ae680b60-6565-3429-a4e9-f3b759a53631.roa (raw, json) Hash identifier: QRW0q8Z56wjyYKOgR/S3UY//mbcDt69eSg6mP/+c8Yc= Subject key identifier: A8:8F:10:AD:7D:86:3C:EC:89:0F:AE:BB:75:79:26:89:B6:20:FE:4D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CBDB1EDC1B6D6339A6EADE7D8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae680b60-6565-3429-a4e9-f3b759a53631.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 31898 IP address blocks: 129.157.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:ed:c1:b6:d6:33:9a:6e:ad:e7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=06452872-37be-4c96-b706-a827d560b01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e2:60:f9:e3:0a:a1:1b:b1:1f:93:10:1f:5d: a2:13:17:b9:b2:81:b3:b1:d1:8b:3e:30:40:5a:ca: fd:08:a5:76:58:27:13:70:00:19:24:ad:6e:0d:9d: df:68:04:9f:a9:30:f7:13:7a:a8:50:1f:1c:23:f6: 16:94:67:ba:1e:fe:e8:35:6a:60:c8:4a:3b:f1:80: 71:df:60:e5:13:6a:3a:07:0e:ba:58:4e:fc:5f:1a: d5:90:47:08:09:0a:98:f7:d7:a3:9b:4c:90:30:6b: 75:4b:b2:d3:00:0e:3c:61:0f:d3:63:8e:1c:44:07: c9:d9:ca:fc:cb:cf:36:ea:47:e9:cc:b9:05:97:89: 18:6c:49:a6:fd:15:b6:64:9e:91:d2:ac:35:f8:81: cc:95:84:71:18:fd:f0:12:b6:48:61:ef:31:d3:bd: 91:ac:35:dd:60:ad:0a:62:b1:03:b9:04:62:bb:5a: 46:08:d6:10:a1:43:7d:ef:07:7f:af:06:94:3a:e8: cc:ef:c0:ca:5a:57:a0:2c:c9:ab:be:7c:01:eb:63: d6:04:f4:2c:d8:77:65:d1:e2:d0:b1:41:bd:3e:6a: bc:92:2b:d8:99:ab:d0:d3:13:ab:60:94:aa:b1:5d: f6:bc:db:b0:a2:3d:c2:09:5e:37:24:e9:49:d9:c5: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8F:10:AD:7D:86:3C:EC:89:0F:AE:BB:75:79:26:89:B6:20:FE:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae680b60-6565-3429-a4e9-f3b759a53631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.157.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:17:38:d8:3d:76:d3:d7:79:f1:e0:63:e4:4e:df:f3:2f:26: 69:66:e4:71:2d:43:1b:dc:9b:4b:06:fb:1b:b5:69:69:8f:24: 4e:5d:8b:68:69:55:d0:bb:ad:ca:6a:13:21:c7:96:b0:27:de: 96:4d:0a:32:e9:19:52:bf:de:8e:9c:0c:77:bf:9e:07:36:27: 7a:1a:33:32:ab:4a:9a:a8:8f:a6:ec:b2:bf:cf:91:75:b6:34: fe:78:a7:ca:05:a3:4b:d4:de:8d:62:e3:14:cd:d0:42:4b:af: 8f:18:1e:db:7e:cd:cf:9c:92:49:ae:58:14:4f:30:e7:56:cf: b1:de:75:67:43:df:95:02:51:ae:d2:9d:51:eb:03:22:29:98: 26:fd:f9:77:52:9b:55:2f:0d:4b:e7:c2:dc:45:bf:56:8e:24: 3d:78:33:be:5d:98:fb:2e:b2:df:de:cf:1f:e2:ee:de:62:e2: 9c:f4:8b:e2:16:a1:4b:84:af:0e:50:95:3b:08:12:4a:5c:d3: cb:ed:f7:4f:6a:47:a7:90:55:d0:a0:c4:32:cb:e3:c0:3f:38: 3d:ac:8b:d5:9e:df:1a:c2:3f:40:41:52:37:ec:6d:39:65:0d: 10:35:80:e4:59:31:05:d9:9b:9f:f8:52:5e:fa:d2:44:4e:71: e8:95:a0:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9se3BttYzmm6t59gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk MDY0NTI4NzItMzdiZS00Yzk2LWI3MDYtYTgyN2Q1NjBiMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+Jg+eMKoRuxH5MQH12iExe5soGzsdGLPjBA Wsr9CKV2WCcTcAAZJK1uDZ3faASfqTD3E3qoUB8cI/YWlGe6Hv7oNWpgyEo78YBx 32DlE2o6Bw66WE78XxrVkEcICQqY99ejm0yQMGt1S7LTAA48YQ/TY44cRAfJ2cr8 y8826kfpzLkFl4kYbEmm/RW2ZJ6R0qw1+IHMlYRxGP3wErZIYe8x072RrDXdYK0K YrEDuQRiu1pGCNYQoUN97wd/rwaUOujM78DKWlegLMmrvnwB62PWBPQs2Hdl0eLQ sUG9Pmq8kivYmavQ0xOrYJSqsV32vNuwoj3CCV43JOlJ2cX8lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiPEK19hjzsiQ+uu3V5Jom2IP5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWU2ODBiNjAtNjU2NS0z NDI5LWE0ZTktZjNiNzU5YTUzNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZ11MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMXONg9dtPXefHgY+RO3/MvJmlm5HEtQxvcm0sG+xu1aWmPJE5di2hp VdC7rcpqEyHHlrAn3pZNCjLpGVK/3o6cDHe/ngc2J3oaMzKrSpqoj6bssr/PkXW2 NP54p8oFo0vU3o1i4xTN0EJLr48YHtt+zc+ckkmuWBRPMOdWz7HedWdD35UCUa7S nVHrAyIpmCb9+XdSm1UvDUvnwtxFv1aOJD14M75dmPsust/ezx/i7t5i4pz0i+IW oUuErw5QlTsIEkpc08vt909qR6eQVdCgxDLL48A/OD2si9We3xrCP0BBUjfsbTll DRA1gORZMQXZm5/4Ul760kROceiVoCc= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:46 2026 by rpki-client