$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/39a8d9ab-c288-30b1-92f2-001a2c976038.roa File: 39a8d9ab-c288-30b1-92f2-001a2c976038.roa (raw, json) Hash identifier: pRpiHCwgZrC5NYZilKahishdhDZxdiosykArxuwSxxw= Subject key identifier: 07:7F:F0:59:21:AC:19:F0:F5:F9:AE:B8:39:9D:0D:F1:1F:83:41:12 Certificate issuer: /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021 Certificate serial: 010D0C9F4328584CD21FC9CD0B57CADA2EB21900 Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/39a8d9ab-c288-30b1-92f2-001a2c976038.roa Signing time: Tue 10 Feb 2026 21:38:26 +0000 ROA not before: Tue 10 Feb 2026 21:38:26 +0000 ROA not after: Mon 11 May 2026 20:38:26 +0000 asID: 2496 IP address blocks: 129.237.174.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d2:1f:c9:cd:0b:57:ca:da:2e:b2:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021 Validity Not Before: Feb 10 21:38:26 2026 GMT Not After : May 11 20:38:26 2026 GMT Subject: CN=0866056a-d14a-41f1-9815-852766747168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:26:81:ac:f9:07:e6:79:66:53:4e:81:36: a4:1f:34:f5:89:99:b1:78:f6:71:ba:7a:d1:03:36: 20:cf:9b:b5:05:ed:63:11:7f:57:d4:f9:b3:2b:25: 14:00:67:a6:7c:31:8f:91:dd:44:aa:43:52:5a:e9: bf:ce:95:29:bc:21:95:b0:72:18:7e:33:ac:57:ba: e1:9f:92:17:0e:2e:ed:65:cd:50:a8:67:52:6e:d9: 24:0c:5c:da:98:f3:55:f8:2d:ca:85:00:47:54:80: 3e:87:c3:dc:fb:f2:e9:c1:03:f5:5e:d8:d5:87:ef: b4:7f:dd:77:92:5e:6a:87:a7:b6:42:1f:34:b7:2c: 56:5b:7d:54:53:a5:12:9d:c2:25:48:20:4f:0a:6e: c3:8d:01:01:7c:fa:f1:4e:74:50:9d:db:03:d0:33: 3f:e5:b3:ea:13:ea:39:23:36:84:f6:a3:5c:13:f4: 96:ab:0b:7f:fd:0a:b7:ff:cb:c9:d2:d1:a2:58:38: 2b:ba:31:be:dd:30:be:41:1c:4d:8a:67:0b:f2:8b: 34:a6:b4:d9:01:db:61:b7:28:68:a9:8e:46:4e:7e: a7:20:96:57:77:ac:70:b0:db:e4:1d:2d:a5:ac:b0: c8:41:cc:4b:a7:df:6d:4a:e8:12:fa:8c:4f:7c:28: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7F:F0:59:21:AC:19:F0:F5:F9:AE:B8:39:9D:0D:F1:1F:83:41:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/39a8d9ab-c288-30b1-92f2-001a2c976038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl X509v3 Authority Key Identifier: keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer sbgp-ipAddrBlock: critical IPv4: 129.237.174.0/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b8:81:03:ae:05:f4:dc:9b:cb:7f:e3:a1:47:ad:2c:c4:ba: 8c:af:39:1b:2f:9b:0b:9d:53:12:39:ba:4f:56:c5:75:27:89: 0f:80:b3:d0:d7:30:c2:7f:25:eb:92:dc:a4:87:af:db:ad:bd: d5:21:2e:ba:ec:a0:1d:20:ee:0a:bc:0a:d4:bf:db:49:35:5b: 4d:a3:71:b9:ad:57:b3:72:c7:8a:4d:34:a9:e1:a3:e3:9c:1d: ec:b9:49:cd:cf:8d:b5:07:2a:eb:9d:e2:af:2c:46:d0:a5:f8: 3c:a8:8f:d9:a8:df:76:22:e8:6a:8a:65:c2:6a:9a:00:fd:5c: 14:cf:36:3a:3c:27:fe:12:34:95:6a:87:7f:b3:8c:34:90:27: 63:ec:65:4b:7c:e6:33:30:ae:c5:63:5a:ba:37:43:6b:bf:d8: 84:36:2c:ce:dc:74:81:e5:dd:de:b6:af:e0:f8:24:f1:7e:da: 36:01:91:66:ae:95:e3:69:74:88:58:6a:7f:87:6f:02:00:4b: 5c:81:4d:59:b7:a4:e7:aa:da:86:d1:49:2a:03:87:07:95:5e: 1e:41:b6:94:fe:13:06:38:08:e4:66:b0:30:c8:93:f5:65:fc: 6a:a2:d7:f2:8f:ff:71:5f:79:d5:ee:ca:67:08:65:79:44:9e: 30:e4:5d:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzSH8nNC1fK2i6yGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiZTNjNWUtNjk3OC00OWJmLThmNjYtMDVhYTZiMWMy MDIxMB4XDTI2MDIxMDIxMzgyNloXDTI2MDUxMTIwMzgyNlowLzEtMCsGA1UEAxMk MDg2NjA1NmEtZDE0YS00MWYxLTk4MTUtODUyNzY2NzQ3MTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3gmgaz5B+Z5ZlNOgTakHzT1iZmxePZxunrR AzYgz5u1Be1jEX9X1PmzKyUUAGemfDGPkd1EqkNSWum/zpUpvCGVsHIYfjOsV7rh n5IXDi7tZc1QqGdSbtkkDFzamPNV+C3KhQBHVIA+h8Pc+/LpwQP1XtjVh++0f913 kl5qh6e2Qh80tyxWW31UU6USncIlSCBPCm7DjQEBfPrxTnRQndsD0DM/5bPqE+o5 IzaE9qNcE/SWqwt//Qq3/8vJ0tGiWDgrujG+3TC+QRxNimcL8os0prTZAdthtyho qY5GTn6nIJZXd6xwsNvkHS2lrLDIQcxLp99tSugS+oxPfCgiXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAd/8FkhrBnw9fmuuDmdDfEfg0ESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOGJl M2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFhNmIxYzIwMjEvMzlhOGQ5YWItYzI4OC0z MGIxLTkyZjItMDAxYTJjOTc2MDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYThiZTNjNWUtNjk3OC00OWJmLThm NjYtMDVhYTZiMWMyMDIxL2E4YmUzYzVlLTY5NzgtNDliZi04ZjY2LTA1YWE2YjFj MjAyMS5jcmwwHwYDVR0jBBgwFoAUtLV6vDnImsdK8ZqNipMaX1x2UUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOGJlM2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFh NmIxYzIwMjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGge2uADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvuIEDrgX03JvLf+OhR60sxLqMrzkbL5sLnVMSObpPVsV1J4kPgLPQ 1zDCfyXrktykh6/brb3VIS667KAdIO4KvArUv9tJNVtNo3G5rVezcseKTTSp4aPj nB3suUnNz421ByrrneKvLEbQpfg8qI/ZqN92IuhqimXCapoA/VwUzzY6PCf+EjSV aod/s4w0kCdj7GVLfOYzMK7FY1q6N0Nrv9iENizO3HSB5d3etq/g+CTxfto2AZFm rpXjaXSIWGp/h28CAEtcgU1Zt6TnqtqG0UkqA4cHlV4eQbaU/hMGOAjkZrAwyJP1 Zfxqotfyj/9xX3nV7spnCGV5RJ4w5F0E -----END CERTIFICATE-----Generated at Mon Mar 2 15:04:22 2026 by rpki-client