$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0790413-eb94-394f-baab-4ac4a546e2d9.roa File: f0790413-eb94-394f-baab-4ac4a546e2d9.roa (raw, json) Hash identifier: rX5fv6XSeZLTyHNufQysvWVTzx6xpdnTFNIxA9cLeAU= Subject key identifier: 74:81:35:92:9B:AD:CC:10:A5:58:2A:B6:06:51:E7:8E:5A:79:23:30 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC76E6DFD3DB6341F661C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0790413-eb94-394f-baab-4ac4a546e2d9.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 129.149.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:76:e6:df:d3:db:63:41:f6:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=45fd90e6-63d5-40d9-b155-4b8d7764228c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:a1:5e:20:27:ea:a4:e7:be:e3:e0:12:79: b6:78:7e:b7:9c:f4:78:e6:4a:f2:b9:cd:3b:de:b8: 71:72:f7:9a:39:bb:6c:ca:b2:c2:6f:c8:fd:eb:48: ac:7e:79:1d:3e:19:02:e9:89:dd:23:fd:7b:e6:b1: 8e:32:b2:72:db:d3:07:9b:1c:9d:e1:89:98:8f:2f: 91:fd:f0:f2:ad:0d:d1:a9:c4:1f:37:d8:3b:16:95: 73:9c:f2:e1:b4:1e:c2:1b:90:fb:cc:f6:1e:b7:7d: 47:b2:6d:d3:ea:13:07:7b:6b:a4:c8:f4:ff:17:84: 70:43:46:b7:af:51:22:61:1f:82:2a:bf:0b:b8:ae: dd:95:8e:1d:bc:51:d1:99:70:9f:b0:b5:da:38:17: 63:04:04:72:76:0b:8a:1a:a4:38:c6:fa:a0:8e:1e: 48:9c:af:22:59:de:65:65:7e:71:7a:8e:ed:38:93: 79:c2:be:a3:05:19:d9:63:74:f2:3e:3e:c7:4d:ae: 8d:02:cb:cf:93:6b:0a:b6:3e:43:3b:f5:b8:0e:4f: aa:ba:b0:1a:ac:e3:dc:65:c2:8e:0f:18:fc:d5:da: 7e:40:fb:6b:c2:b8:f6:83:5e:bc:91:97:21:34:cc: c0:7b:46:8b:49:50:c3:94:24:f1:82:bb:d7:50:7b: 01:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:81:35:92:9B:AD:CC:10:A5:58:2A:B6:06:51:E7:8E:5A:79:23:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0790413-eb94-394f-baab-4ac4a546e2d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:56:ad:ac:50:66:28:39:d6:b0:80:b3:a3:55:8c:48:61:fb: 57:5f:2d:ec:92:3d:22:7e:c6:4f:6c:f7:48:ba:4d:14:ef:de: 11:7e:11:d8:a2:16:d4:32:95:ca:86:ea:55:1c:14:15:f1:a4: c6:c9:00:45:ea:5e:a0:17:d8:0c:27:ab:33:67:79:79:d8:93: 9d:60:a3:1d:0b:a1:4b:a5:8a:90:ae:b3:4d:3a:ba:30:63:28: c6:b8:8b:cb:2a:ca:6e:dc:59:b1:d1:8e:f5:53:88:32:45:a5: 2a:6c:bf:e5:21:1d:98:d0:28:3a:06:a6:d2:5b:62:d5:11:e5: 48:b9:74:1f:ce:ab:c3:7e:ae:00:3d:53:e0:c6:bd:94:1b:6e: 52:02:5f:2b:3d:be:21:7a:48:aa:08:fb:61:54:10:d4:2e:64: d6:05:6e:31:e0:82:d2:23:a9:22:17:d4:4b:90:a7:4d:c2:98: c4:cb:ef:0d:8e:dc:bb:0f:34:99:6f:29:41:43:f5:32:b8:43: 13:55:2f:da:f3:39:10:26:16:cb:99:ba:da:d5:40:bf:40:31: 4f:6e:d8:f6:3a:0a:6c:1a:44:a1:75:7a:7a:f4:25:e0:ed:dd: c4:80:f6:a4:c3:b4:06:67:41:da:bc:f8:e3:3d:c8:02:1f:dc: 82:6b:c3:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHbm39PbY0H2YcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NDVmZDkwZTYtNjNkNS00MGQ5LWIxNTUtNGI4ZDc3NjQyMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC6hXiAn6qTnvuPgEnm2eH63nPR45kryuc07 3rhxcveaObtsyrLCb8j960isfnkdPhkC6YndI/175rGOMrJy29MHmxyd4YmYjy+R /fDyrQ3RqcQfN9g7FpVznPLhtB7CG5D7zPYet31Hsm3T6hMHe2ukyPT/F4RwQ0a3 r1EiYR+CKr8LuK7dlY4dvFHRmXCfsLXaOBdjBARydguKGqQ4xvqgjh5InK8iWd5l ZX5xeo7tOJN5wr6jBRnZY3TyPj7HTa6NAsvPk2sKtj5DO/W4Dk+qurAarOPcZcKO Dxj81dp+QPtrwrj2g168kZchNMzAe0aLSVDDlCTxgrvXUHsBwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSBNZKbrcwQpVgqtgZR545aeSMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjA3OTA0MTMtZWI5NC0z OTRmLWJhYWItNGFjNGE1NDZlMmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1WraxQZig51rCAs6NVjEhh+1dfLeySPSJ+xk9s90i6TRTv3hF+Edii FtQylcqG6lUcFBXxpMbJAEXqXqAX2AwnqzNneXnYk51gox0LoUulipCus006ujBj KMa4i8sqym7cWbHRjvVTiDJFpSpsv+UhHZjQKDoGptJbYtUR5Ui5dB/Oq8N+rgA9 U+DGvZQbblICXys9viF6SKoI+2FUENQuZNYFbjHggtIjqSIX1EuQp03CmMTL7w2O 3LsPNJlvKUFD9TK4QxNVL9rzORAmFsuZutrVQL9AMU9u2PY6CmwaRKF1enr0JeDt 3cSA9qTDtAZnQdq8+OM9yAIf3IJrw8s= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:04 2026 by rpki-client