$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa File: ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa (raw, json) Hash identifier: r+7tpzM/oEp7FT4nc14750SJoqjD2kdIDoMmpdG4VWU= Subject key identifier: 54:B8:CD:72:89:9D:5C:BF:D9:AD:8A:5B:DF:AC:1A:80:BE:9D:DE:28 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE57042AA715312A00581B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 129.149.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:04:2a:a7:15:31:2a:00:58:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b6cd40e3-5a49-4862-8791-584193e4e652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fc:97:4e:9e:45:77:3f:da:cd:7f:61:c1:dc: 2f:28:e1:56:86:d6:15:d4:c4:c2:a6:c7:09:9c:27: 20:4f:20:ee:79:76:1a:d2:7b:ae:cc:0f:4c:e5:aa: a9:42:81:10:4f:5c:b4:53:73:8e:cc:cd:e1:b9:57: bf:37:c0:a9:16:f1:eb:5d:e0:00:05:48:56:05:12: 83:40:d4:e1:35:e1:e6:e2:7c:e1:a5:a1:cc:3d:24: ed:cb:82:8f:17:63:0d:3c:db:22:de:e4:1f:d8:8e: 6d:11:38:0f:d6:66:85:c6:dd:81:82:0e:cd:25:c8: f0:fa:f8:3c:e4:ae:2f:5f:58:d9:d2:e0:1e:97:d4: af:e3:22:48:96:07:dd:d9:4e:f6:a1:10:5e:ea:64: e7:a7:4e:75:81:37:fa:34:24:59:3c:af:25:14:0f: 73:54:6a:83:22:6c:be:51:48:cb:dc:c6:65:18:70: f4:5a:b6:1a:44:22:8d:33:50:e4:75:31:a8:c4:5f: 94:fa:1b:84:09:54:86:89:0a:0a:81:93:e6:92:04: 61:37:0a:e1:0d:3f:68:20:3d:8d:9f:66:0b:21:d0: f3:cb:82:54:9e:87:2a:dc:af:70:c0:06:fe:ce:bd: a9:14:bd:d4:77:68:07:39:88:5f:c2:c6:2a:4f:5d: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B8:CD:72:89:9D:5C:BF:D9:AD:8A:5B:DF:AC:1A:80:BE:9D:DE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c9:b9:9f:2d:07:ea:95:76:64:40:1d:ea:1b:1d:7e:18:ff: b1:48:a6:b8:43:2e:e2:02:a5:e1:07:3d:d4:6b:ae:bd:86:06: 55:b0:01:94:30:d8:eb:63:dd:a9:24:89:79:b7:ba:1a:a9:39: 48:14:80:fc:fb:f8:91:d1:ed:9a:0c:f6:23:77:f7:57:36:ec: a2:40:ff:9a:c3:dc:97:ac:4a:c6:92:00:08:80:ac:cc:e7:29: a1:b5:9c:e4:9b:16:11:1e:18:c5:90:5c:cc:10:7f:5e:d2:cd: 45:18:24:36:b6:cb:b7:4b:2e:30:06:9e:5a:ef:f1:2b:12:66: 8a:7e:22:ab:ae:92:6f:4b:81:1f:7c:2e:cd:46:b2:80:a9:e1: fb:18:cd:70:da:36:dd:70:66:16:e5:5b:c3:9d:57:24:e5:a5: 49:26:e0:f2:e5:ca:29:24:f4:8a:4f:a8:8c:a7:19:d5:c5:d8: 6b:d0:c3:d9:51:f8:20:e3:3b:ce:25:f5:ce:2a:52:05:f1:ba: c4:81:00:13:f1:4e:85:df:fb:19:23:5f:5b:cd:d0:ee:18:5b: 38:27:6d:d7:d9:c8:06:22:e8:bc:04:03:b3:ff:61:f1:59:b3: 95:2c:13:cc:76:27:e6:ee:6e:47:89:10:26:90:9a:e0:e8:7c: f9:e2:32:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVwQqpxUxKgBYGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjZjZDQwZTMtNWE0OS00ODYyLTg3OTEtNTg0MTkzZTRlNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vyXTp5Fdz/azX9hwdwvKOFWhtYV1MTCpscJ nCcgTyDueXYa0nuuzA9M5aqpQoEQT1y0U3OOzM3huVe/N8CpFvHrXeAABUhWBRKD QNThNeHm4nzhpaHMPSTty4KPF2MNPNsi3uQf2I5tETgP1maFxt2Bgg7NJcjw+vg8 5K4vX1jZ0uAel9Sv4yJIlgfd2U72oRBe6mTnp051gTf6NCRZPK8lFA9zVGqDImy+ UUjL3MZlGHD0WrYaRCKNM1DkdTGoxF+U+huECVSGiQoKgZPmkgRhNwrhDT9oID2N n2YLIdDzy4JUnocq3K9wwAb+zr2pFL3Ud2gHOYhfwsYqT114uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFS4zXKJnVy/2a2KW9+sGoC+nd4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGVkMWQxYzctZWI2YS0z NjUxLThhZGEtZmYzODc4N2YyMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInJuZ8tB+qVdmRAHeobHX4Y/7FIprhDLuICpeEHPdRrrr2GBlWwAZQw 2Otj3akkiXm3uhqpOUgUgPz7+JHR7ZoM9iN391c27KJA/5rD3JesSsaSAAiArMzn KaG1nOSbFhEeGMWQXMwQf17SzUUYJDa2y7dLLjAGnlrv8SsSZop+Iquukm9LgR98 Ls1GsoCp4fsYzXDaNt1wZhblW8OdVyTlpUkm4PLlyikk9IpPqIynGdXF2GvQw9lR +CDjO84l9c4qUgXxusSBABPxToXf+xkjX1vN0O4YWzgnbdfZyAYi6LwEA7P/YfFZ s5UsE8x2J+bubkeJECaQmuDofPniMpw= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:44 2026 by rpki-client