$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa File: 2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa (raw, json) Hash identifier: tIuJSpVpvP4BN6zOpwOZqs4d7aTBKwshq6W1Pjc83Jc= Subject key identifier: 11:2D:D3:DB:04:D0:57:C2:CF:69:52:FA:E2:6E:45:1B:82:CD:A3:2B Certificate issuer: /CN=f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa Certificate serial: 010D0C9F4328584CBDB1F6565479CEAC233F8AC0 Authority key identifier: 38:8D:E2:9E:26:A9:85:99:37:7B:0F:13:70:86:39:08:A4:F8:36:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 14503 IP address blocks: 161.129.22.0/24 maxlen: 24 2620:13f:c000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:f6:56:54:79:ce:ac:23:3f:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=c7db6619-5b04-48eb-bf83-4caec397e214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:15:2e:5e:ad:3e:39:70:c4:3c:f6:98:50: 51:ad:57:3d:cf:01:96:41:48:d3:df:5e:1f:b3:9c: e8:1e:ac:b6:17:48:e1:24:61:21:28:c1:e1:d4:a0: 73:ec:03:c2:47:50:5a:6f:ec:9c:8a:05:9f:5f:e5: 9a:d4:b3:81:2a:37:34:2e:b2:57:3f:2f:df:59:3a: fc:a1:04:d2:71:d1:c8:fb:73:2d:7f:3b:76:56:60: 5d:b5:05:4c:9a:42:13:c9:16:19:2e:f1:d2:d5:21: b3:dc:fa:84:d9:e0:96:3d:2c:09:13:7c:43:7e:c0: 33:38:d0:5b:21:b3:13:7b:9b:48:cf:29:4b:4b:86: 16:27:46:8a:7b:76:b1:6f:69:60:c0:42:2a:c2:ca: 5b:7c:86:ef:b1:55:05:22:58:a8:d7:20:91:24:9d: c5:8c:1a:2f:b9:75:e6:21:99:a5:40:c4:8d:bb:7e: ed:f1:3a:17:8e:b3:13:36:d0:df:e6:d8:1b:0e:bd: ca:e7:be:d9:b2:22:cc:91:62:98:1c:65:64:db:40: 78:07:84:d6:9b:f9:3f:23:4c:53:d2:4a:ce:de:35: ed:64:b7:fe:8f:40:9d:0a:b5:10:c4:a6:be:58:ad: c6:b0:c6:1f:ba:40:1c:33:a7:33:94:0c:56:83:09: d3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2D:D3:DB:04:D0:57:C2:CF:69:52:FA:E2:6E:45:1B:82:CD:A3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.crl X509v3 Authority Key Identifier: keyid:38:8D:E2:9E:26:A9:85:99:37:7B:0F:13:70:86:39:08:A4:F8:36:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer sbgp-ipAddrBlock: critical IPv4: 161.129.22.0/24 IPv6: 2620:13f:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:79:8b:23:d3:3e:c4:20:4e:bc:96:41:05:1e:95:52:62:03: a1:14:12:5a:d8:42:aa:94:fb:3d:29:14:ce:c4:55:b7:d4:f7: b9:be:f4:d4:4c:ce:67:d3:13:49:b6:7e:d1:62:d3:27:9c:84: b7:5a:97:43:26:82:d2:ef:00:83:cc:7d:9e:57:84:23:4b:f5: 6e:50:aa:1a:e1:c4:c0:82:ba:9a:a1:a1:aa:d3:29:17:70:2f: a3:ce:bf:60:22:69:41:95:b6:46:7b:23:29:22:53:9f:dc:bb: af:69:4d:d6:c2:3d:de:d7:de:3c:24:1c:d9:eb:82:d6:ca:e1: 79:e6:ed:62:d4:e5:8a:f9:52:8c:88:71:2e:b8:1b:5e:90:f3: 4a:3d:6b:af:dd:12:66:dc:6c:8a:ef:07:f7:46:dd:f3:da:40: 5c:b5:a5:3c:a5:7f:3e:6a:64:eb:22:22:ab:20:02:8a:bc:5e: 5f:55:27:1b:60:09:70:bd:be:1a:57:1e:11:26:37:a9:15:ca: 0a:8a:df:a2:78:80:59:93:d3:37:9a:ce:cb:63:cf:c1:83:11: ae:5a:cd:16:c1:85:aa:d5:78:a5:1b:8e:9a:6d:6a:21:e3:4e: 46:4d:46:c5:42:05:fe:8b:8d:d4:56:48:80:3a:13:6e:70:dc: d1:a0:2d:60 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEy9sfZWVHnOrCM/isAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjAwZWZiNWQtZjZlMS00OWJmLWE0ZTMtZWE1YjRjNzVi OWZhMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk YzdkYjY2MTktNWIwNC00OGViLWJmODMtNGNhZWMzOTdlMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C8VLl6tPjlwxDz2mFBRrVc9zwGWQUjT314f s5zoHqy2F0jhJGEhKMHh1KBz7APCR1Bab+ycigWfX+Wa1LOBKjc0LrJXPy/fWTr8 oQTScdHI+3Mtfzt2VmBdtQVMmkITyRYZLvHS1SGz3PqE2eCWPSwJE3xDfsAzONBb IbMTe5tIzylLS4YWJ0aKe3axb2lgwEIqwspbfIbvsVUFIlio1yCRJJ3FjBovuXXm IZmlQMSNu37t8ToXjrMTNtDf5tgbDr3K577ZsiLMkWKYHGVk20B4B4TWm/k/I0xT 0krO3jXtZLf+j0CdCrUQxKa+WK3GsMYfukAcM6czlAxWgwnTUQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBEt09sE0FfCz2lS+uJuRRuCzaMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mMDBl ZmI1ZC1mNmUxLTQ5YmYtYTRlMy1lYTViNGM3NWI5ZmEvMmNkZTcwNjQtOWIzMS0z YWVkLThjZjMtMjNjZjFhZTVhNzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjAwZWZiNWQtZjZlMS00OWJmLWE0 ZTMtZWE1YjRjNzViOWZhL2YwMGVmYjVkLWY2ZTEtNDliZi1hNGUzLWVhNWI0Yzc1 YjlmYS5jcmwwHwYDVR0jBBgwFoAUOI3iniaphZk3ew8TcIY5CKT4NhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mMDBlZmI1ZC1mNmUxLTQ5YmYtYTRlMy1lYTVi NGM3NWI5ZmEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAoYEWMA8E AgACMAkDBwQmIAE/wAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFHmLI9M+xCBOvJZBBR6VUmIDoRQSWthC qpT7PSkUzsRVt9T3ub701EzOZ9MTSbZ+0WLTJ5yEt1qXQyaC0u8Ag8x9nleEI0v1 blCqGuHEwIK6mqGhqtMpF3Avo86/YCJpQZW2RnsjKSJTn9y7r2lN1sI93tfePCQc 2euC1srheebtYtTlivlSjIhxLrgbXpDzSj1rr90SZtxsiu8H90bd89pAXLWlPKV/ Pmpk6yIiqyACirxeX1UnG2AJcL2+GlceESY3qRXKCorfoniAWZPTN5rOy2PPwYMR rlrNFsGFqtV4pRuOmm1qIeNORk1GxUIF/ouN1FZIgDoTbnDc0aAtYA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:10:22 2026 by rpki-client