$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be5afb24-ad07-3150-835e-21c7285740e8.roa File: be5afb24-ad07-3150-835e-21c7285740e8.roa (raw, json) Hash identifier: +ZSRFKnUpUVzvnxSl5FcEQAEaUMsEc7C76G6g11qFVM= Subject key identifier: 7C:0A:7B:68:1B:C4:C3:22:17:97:50:E8:D9:57:18:11:DA:70:1D:C8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5706EE9CF38190BDC2AA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be5afb24-ad07-3150-835e-21c7285740e8.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 149.130.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:06:ee:9c:f3:81:90:bd:c2:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=84648957-bf3b-4677-a3aa-b8f1826e8fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:72:89:91:b5:37:45:a6:2a:55:62:48:66: de:a4:1f:71:57:46:e2:f8:e2:32:a3:21:ca:cc:df: 78:90:d9:01:7b:9e:d0:96:be:01:b6:00:7f:01:46: 0c:92:a7:88:5c:7d:10:df:48:92:f7:be:09:c9:a3: 2e:7e:e7:1f:22:63:28:61:39:17:b6:42:e9:5f:93: b4:e4:0a:50:97:03:02:4b:13:f4:cb:94:be:b9:37: a0:cc:46:46:a0:47:bc:40:66:d8:1d:68:af:58:ff: 02:92:3b:6e:ac:b9:e8:b3:1b:51:d6:9d:41:29:a2: 31:1a:cb:18:8c:3d:17:e7:6c:16:b7:5e:26:04:10: a1:ef:7c:41:2e:05:99:f5:10:f2:b9:cf:c8:ae:0a: d0:f0:39:5d:32:1a:5e:b6:02:fa:d1:22:98:08:bb: 45:6d:e3:9d:9e:f3:bd:04:4a:51:f0:2a:fb:51:d3: 16:e8:28:0c:ce:2d:3b:00:31:80:cd:cb:c8:31:df: 45:62:0f:26:b4:2c:a8:e0:30:cb:63:b7:09:ae:0f: c1:0a:ae:02:b1:cd:ce:da:3c:76:f3:8f:05:a8:b4: 42:2b:60:b6:00:9f:84:aa:62:7b:3b:94:e1:c5:0f: ea:4c:74:4d:83:10:57:43:db:80:7a:39:21:8e:71: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0A:7B:68:1B:C4:C3:22:17:97:50:E8:D9:57:18:11:DA:70:1D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be5afb24-ad07-3150-835e-21c7285740e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.130.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4c:02:14:69:8a:a6:22:85:ac:77:e7:c2:0b:e1:58:e3:38: ea:71:50:90:6c:d8:27:ed:c6:0c:4c:9f:ab:ed:98:26:a1:c1: b8:7b:eb:42:47:cb:0d:1c:75:8c:03:1b:a2:0c:be:b5:2b:6c: 3a:44:e2:74:1f:d8:b7:84:1e:6e:8b:31:0e:de:bc:ef:a5:40: 73:20:28:7f:01:0b:dc:a7:6d:24:73:81:9b:6a:0c:49:60:dd: 56:d3:67:ef:00:99:55:04:8f:21:dd:00:52:1c:59:c4:70:20: 41:db:e1:8c:a5:12:91:1f:42:3a:e3:16:16:0d:cf:46:dc:71: d5:51:bb:1e:ef:6d:6b:a3:c3:2f:b2:70:0f:59:53:00:3a:93: 09:44:02:43:a9:43:d4:95:03:4a:c4:fe:ca:01:27:14:39:a5: 9e:17:55:22:ac:a1:33:53:8d:ca:fb:91:85:e5:a9:61:2b:d7: d7:2d:9e:72:9e:72:01:5a:89:89:5d:64:07:64:b0:8f:3b:ee: 1c:77:03:11:4b:1e:13:b2:f4:c5:16:49:4e:84:e6:8a:47:ad: 95:a7:33:bb:bb:71:ed:76:ed:ca:ce:1a:c7:45:42:99:af:71: 6e:c0:3a:f6:2a:82:80:e2:83:1f:06:31:1d:ae:c1:bb:3e:51: 4f:f8:de:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVwbunPOBkL3CqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODQ2NDg5NTctYmYzYi00Njc3LWEzYWEtYjhmMTgyNmU4ZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh5yiZG1N0WmKlViSGbepB9xV0bi+OIyoyHK zN94kNkBe57Qlr4BtgB/AUYMkqeIXH0Q30iS974JyaMufucfImMoYTkXtkLpX5O0 5ApQlwMCSxP0y5S+uTegzEZGoEe8QGbYHWivWP8CkjturLnosxtR1p1BKaIxGssY jD0X52wWt14mBBCh73xBLgWZ9RDyuc/IrgrQ8DldMhpetgL60SKYCLtFbeOdnvO9 BEpR8Cr7UdMW6CgMzi07ADGAzcvIMd9FYg8mtCyo4DDLY7cJrg/BCq4Csc3O2jx2 848FqLRCK2C2AJ+EqmJ7O5ThxQ/qTHRNgxBXQ9uAejkhjnHdKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwKe2gbxMMiF5dQ6NlXGBHacB3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmU1YWZiMjQtYWQwNy0z MTUwLTgzNWUtMjFjNzI4NTc0MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxMAhRpiqYihax358IL4VjjOOpxUJBs2CftxgxMn6vtmCahwbh760JH yw0cdYwDG6IMvrUrbDpE4nQf2LeEHm6LMQ7evO+lQHMgKH8BC9ynbSRzgZtqDElg 3VbTZ+8AmVUEjyHdAFIcWcRwIEHb4YylEpEfQjrjFhYNz0bccdVRux7vbWujwy+y cA9ZUwA6kwlEAkOpQ9SVA0rE/soBJxQ5pZ4XVSKsoTNTjcr7kYXlqWEr19ctnnKe cgFaiYldZAdksI877hx3AxFLHhOy9MUWSU6E5opHrZWnM7u7ce127crOGsdFQpmv cW7AOvYqgoDigx8GMR2uwbs+UU/43po= -----END CERTIFICATE-----Generated at Thu Feb 26 03:31:50 2026 by rpki-client