$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba41a53c-7262-3cc0-8b22-72d10c28b1c6.roa File: ba41a53c-7262-3cc0-8b22-72d10c28b1c6.roa (raw, json) Hash identifier: g5NGctABRw7W4FdObCnWZs6k494B3/KynbpnNDG3EWI= Subject key identifier: 05:B0:80:9F:7D:00:D7:0B:99:A7:47:AE:7C:C1:09:18:B0:93:29:85 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC832D6E11D7C1A226AC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba41a53c-7262-3cc0-8b22-72d10c28b1c6.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.146.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:83:2d:6e:11:d7:c1:a2:26:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=713d0a16-83d2-4bc3-8d68-b1857dc410cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:ae:33:75:4b:8f:c3:80:55:aa:19:06:e6: 14:5e:de:f3:c6:30:65:34:0c:2d:d4:c9:f8:7c:98: c4:9d:10:48:6d:0c:cc:78:45:bb:a3:70:71:d1:4f: 13:20:c1:36:3d:3e:ec:5f:fe:67:20:ae:4e:36:f3: 55:c9:fe:8c:6e:3f:ba:c7:c0:0d:67:b2:88:83:ea: fd:09:8d:7c:d8:6e:7c:6e:31:89:4c:11:84:12:cb: cc:80:b6:cc:23:73:24:38:f6:f8:ca:5d:ea:4a:4a: 94:45:07:25:2d:cb:96:e5:1e:64:b7:6a:39:71:fb: 64:fd:ed:a6:0e:6c:8e:05:02:cb:25:8f:99:6f:78: 0e:78:b6:52:e0:20:1a:12:6c:c6:3e:00:ae:61:d4: 63:ce:8a:6c:01:b2:2c:dd:92:96:32:d8:b4:3f:c9: 3c:6a:0d:e9:aa:17:d6:25:2e:9d:a5:d1:f4:df:76: 8a:6a:3b:fc:82:58:a5:2a:2d:29:23:80:87:8e:c9: 35:ed:b1:3b:d5:b5:b9:e3:fe:26:2d:cb:b7:25:2e: f5:c2:f8:03:da:a5:7b:38:0d:76:88:44:aa:e6:14: 8f:9a:0a:56:34:82:d8:d5:4c:fa:24:8d:3c:51:33: 0d:cd:6d:37:28:db:89:cc:b6:cd:0e:ca:d3:9f:54: 90:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B0:80:9F:7D:00:D7:0B:99:A7:47:AE:7C:C1:09:18:B0:93:29:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba41a53c-7262-3cc0-8b22-72d10c28b1c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a8:45:12:cf:0f:6b:bd:21:a7:78:6c:0e:01:c7:07:e3:58: 10:fc:0c:0c:41:9d:5e:7c:19:fa:9a:b3:5c:e4:84:d7:26:fd: 51:83:4d:e4:43:cd:cd:a5:28:05:29:be:be:0e:b2:90:d9:cf: 71:0e:04:2f:33:29:6b:9f:89:fb:f1:8e:62:29:e8:d9:2a:4e: 6e:fb:29:67:9a:fc:a7:ac:71:eb:b9:42:3a:67:3b:8e:44:ce: 90:34:cb:8c:39:4d:f5:6c:33:58:4c:63:20:9d:cf:a7:3d:ce: 31:5d:1c:c1:cd:eb:50:a4:02:b9:4b:94:21:27:7d:4a:9c:fc: 7b:a2:21:d2:ab:b6:bc:73:d6:54:a7:b1:0b:66:4b:77:a9:46: 65:83:f9:bd:d9:23:5e:39:ef:c4:53:38:ee:0e:90:e9:ae:ab: 56:ca:28:c1:c2:7d:db:52:36:25:2b:9d:3e:a1:cf:ad:77:1e: 3e:0e:98:91:98:aa:99:44:ba:80:a6:1a:44:d9:26:45:67:95: 41:d7:d3:ae:a4:18:3f:1b:4f:67:5a:c8:58:bc:5d:d4:e8:6e: 77:30:8c:2c:e1:90:44:34:80:cd:f7:80:f0:d0:87:dd:a0:38: f8:e8:7f:f5:57:1a:49:0f:e1:34:5e:bc:1c:88:46:2a:a2:75: ae:81:f5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIMtbhHXwaImrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NzEzZDBhMTYtODNkMi00YmMzLThkNjgtYjE4NTdkYzQxMGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviiuM3VLj8OAVaoZBuYUXt7zxjBlNAwt1Mn4 fJjEnRBIbQzMeEW7o3Bx0U8TIME2PT7sX/5nIK5ONvNVyf6Mbj+6x8ANZ7KIg+r9 CY182G58bjGJTBGEEsvMgLbMI3MkOPb4yl3qSkqURQclLcuW5R5kt2o5cftk/e2m DmyOBQLLJY+Zb3gOeLZS4CAaEmzGPgCuYdRjzopsAbIs3ZKWMti0P8k8ag3pqhfW JS6dpdH033aKajv8glilKi0pI4CHjsk17bE71bW54/4mLcu3JS71wvgD2qV7OA12 iESq5hSPmgpWNILY1Uz6JI08UTMNzW03KNuJzLbNDsrTn1SQDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWwgJ99ANcLmadHrnzBCRiwkymFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE0MWE1M2MtNzI2Mi0z Y2MwLThiMjItNzJkMTBjMjhiMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSoRRLPD2u9Iad4bA4BxwfjWBD8DAxBnV58Gfqas1zkhNcm/VGDTeRD zc2lKAUpvr4OspDZz3EOBC8zKWufifvxjmIp6NkqTm77KWea/Kesceu5QjpnO45E zpA0y4w5TfVsM1hMYyCdz6c9zjFdHMHN61CkArlLlCEnfUqc/HuiIdKrtrxz1lSn sQtmS3epRmWD+b3ZI14578RTOO4OkOmuq1bKKMHCfdtSNiUrnT6hz613Hj4OmJGY qplEuoCmGkTZJkVnlUHX066kGD8bT2dayFi8XdTobncwjCzhkEQ0gM33gPDQh92g OPjof/VXGkkP4TRevByIRiqida6B9aI= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:40 2026 by rpki-client