$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa File: ca414a24-2cf9-355c-b83f-5c043bd7f053.roa (raw, json) Hash identifier: mcWMgNw2VL7LWxXNUkA/4VobG6BEXRmRqoXpaGwEcSg= Subject key identifier: 32:8E:27:F4:C4:2C:23:16:6C:46:7B:C3:8B:C0:35:49:0E:3D:26:5D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC80B2A91E3540D999E080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.153.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:80:b2:a9:1e:35:40:d9:99:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=67bc7082-a97c-4606-be48-909ee22d1f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d4:66:6f:84:9c:62:5a:c1:34:47:69:7b:f8: 6f:19:fd:06:74:8c:97:ba:79:b4:24:cd:ca:42:3a: 3f:93:29:75:13:6c:e9:0c:2e:7e:9e:ec:6d:92:3e: ae:c8:17:50:ee:6a:8a:a5:e4:ce:b5:af:52:0d:22: 4c:18:e6:62:1e:53:21:02:7f:04:9a:1d:3d:bc:74: 99:da:40:cd:77:be:35:04:24:4c:9b:d9:92:b9:af: 2c:50:3b:dd:e1:24:e0:e1:7c:9f:d4:41:7b:3e:14: 65:6f:e1:76:89:3a:ed:5d:10:42:a5:00:84:e8:7c: 15:a3:dc:fa:aa:89:ed:1c:fa:de:5c:b7:79:ab:30: fd:49:ff:fc:1a:2c:8c:86:04:15:d3:58:24:45:1e: 21:ca:ba:69:07:69:97:cf:4f:4e:c1:12:56:be:60: 58:47:34:ba:ea:89:f7:4e:ff:72:27:91:71:5c:22: 2a:b5:af:86:1a:ee:41:7d:75:0c:96:2d:26:f2:b5: ca:be:f5:2a:b7:99:e9:12:24:68:d2:e6:4b:b3:bd: 17:46:bd:32:e8:f9:ac:7b:9e:f0:e2:d1:06:ec:97: d9:70:d6:cf:96:3e:f2:21:14:f6:ec:c0:58:b5:7d: c9:6a:8a:6f:18:75:5f:8c:3c:04:0f:8f:8c:77:75: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8E:27:F4:C4:2C:23:16:6C:46:7B:C3:8B:C0:35:49:0E:3D:26:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c2:ca:62:4d:37:70:e1:6e:4e:b0:61:99:ca:41:60:4d:1e: 45:d1:18:e7:45:76:75:da:4f:9d:29:9f:41:7c:c0:4d:24:b6: 55:71:bb:ea:fd:8a:18:1b:0e:28:93:98:e6:14:6d:e2:ee:b7: 1b:33:73:7b:2e:d0:b9:ea:6e:80:c3:0b:50:34:a9:89:67:49: 85:f9:8d:04:52:0c:b4:b6:33:0f:15:6b:da:e1:62:7e:e4:f4: f2:54:48:d1:c7:e0:69:29:26:2f:10:5f:d6:24:b7:35:5b:3e: 8f:82:f1:91:c8:8a:27:06:10:fc:46:bd:ef:09:1c:bb:e7:fe: 33:8c:9c:71:b4:ea:2f:1d:e8:08:d7:26:3f:d5:29:c9:40:53: 07:7c:98:53:9d:d9:aa:44:5c:b3:59:c8:b6:2c:f5:97:fa:c9: b8:91:49:1e:75:4b:86:da:cf:82:92:c6:48:16:59:b2:98:99: 73:e0:0d:ef:e1:7a:30:54:b1:74:41:76:58:38:a8:83:6f:de: dd:21:c2:de:d9:3f:f5:dd:83:77:08:ab:d1:3c:3f:b1:98:ce: f4:fc:02:e3:f8:03:dd:d3:0d:7b:20:c2:d6:6f:8e:c7:8a:cb: 61:c5:6b:15:7f:96:14:c5:74:de:15:28:aa:fe:d6:63:34:20: 86:8f:7c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvICyqR41QNmZ4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NjdiYzcwODItYTk3Yy00NjA2LWJlNDgtOTA5ZWUyMmQxZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tRmb4ScYlrBNEdpe/hvGf0GdIyXunm0JM3K Qjo/kyl1E2zpDC5+nuxtkj6uyBdQ7mqKpeTOta9SDSJMGOZiHlMhAn8Emh09vHSZ 2kDNd741BCRMm9mSua8sUDvd4STg4Xyf1EF7PhRlb+F2iTrtXRBCpQCE6HwVo9z6 qontHPreXLd5qzD9Sf/8GiyMhgQV01gkRR4hyrppB2mXz09OwRJWvmBYRzS66on3 Tv9yJ5FxXCIqta+GGu5BfXUMli0m8rXKvvUqt5npEiRo0uZLs70XRr0y6Pmse57w 4tEG7JfZcNbPlj7yIRT27MBYtX3JaopvGHVfjDwED4+Md3UUBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKOJ/TELCMWbEZ7w4vANUkOPSZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2E0MTRhMjQtMmNmOS0z NTVjLWI4M2YtNWMwNDNiZDdmMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3CymJNN3Dhbk6wYZnKQWBNHkXRGOdFdnXaT50pn0F8wE0ktlVxu+r9 ihgbDiiTmOYUbeLutxszc3su0LnqboDDC1A0qYlnSYX5jQRSDLS2Mw8Va9rhYn7k 9PJUSNHH4GkpJi8QX9YktzVbPo+C8ZHIiicGEPxGve8JHLvn/jOMnHG06i8d6AjX Jj/VKclAUwd8mFOd2apEXLNZyLYs9Zf6ybiRSR51S4baz4KSxkgWWbKYmXPgDe/h ejBUsXRBdlg4qINv3t0hwt7ZP/Xdg3cIq9E8P7GYzvT8AuP4A93TDXsgwtZvjseK y2HFaxV/lhTFdN4VKKr+1mM0IIaPfNo= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:26 2026 by rpki-client