$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa File: 7da0bbf2-854f-312a-a5ff-6ab760be9635.roa (raw, json) Hash identifier: qnuTnF1+s3NgcxFtW71AVgLglYNzOTfRSFTVM2KmfgM= Subject key identifier: ED:5D:86:8F:C6:7F:27:B8:F1:9B:4B:21:E2:CB:2E:CE:3E:00:6F:FB Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584D02179ABB8438520592978580 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 25649 IP address blocks: 129.220.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:9a:bb:84:38:52:05:92:97:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=e5b7805a-feb5-4fd3-bd92-69e47c354090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:ce:a4:cc:88:d5:3b:01:0f:7b:bb:5e:af: 44:9a:ac:80:f5:a5:4b:96:43:47:4b:2c:92:73:3d: 4a:6f:f3:9c:f0:42:b5:bd:02:42:90:de:29:50:c0: e5:90:d8:ef:53:2c:a2:dd:ea:03:9c:89:f5:d6:49: a3:8b:89:04:f1:77:fb:80:c3:b8:a2:60:8b:6f:db: 22:b3:66:78:0e:af:67:d4:9c:d0:d7:9e:1d:92:5c: 0b:57:4d:6d:02:ce:fb:89:39:6e:c3:78:02:c1:c3: fd:e1:c0:00:63:ff:fc:36:dd:d4:93:3f:67:d8:75: d1:fd:c0:53:ae:f5:fa:d3:80:38:6a:ce:ac:0f:7c: c0:91:35:b5:e0:e5:0f:d9:f4:66:e0:f2:02:fc:c8: 73:c8:59:8d:8f:e5:69:5b:27:ed:96:08:e1:71:f0: 31:97:71:0c:83:87:45:d2:4d:df:65:a9:f8:e6:8a: d7:dd:88:05:6d:d1:7a:69:7a:e3:99:9c:80:4b:05: 56:22:49:93:2c:86:f7:a0:77:a2:38:c7:d3:31:34: d2:d4:e1:9f:42:a7:6e:c6:92:54:96:6e:e0:ca:80: 98:ce:f5:ac:37:49:13:d8:8a:fa:fd:74:2f:bb:ae: 12:c3:7a:46:78:a2:fb:c8:d9:da:36:4a:3f:3b:61: 5b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5D:86:8F:C6:7F:27:B8:F1:9B:4B:21:E2:CB:2E:CE:3E:00:6F:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 129.220.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:82:8a:bc:2f:7a:bc:4a:22:12:dd:0c:df:f7:7a:d4:07:d9: e6:c4:77:da:3f:9a:21:28:73:1d:d5:37:3f:6c:2b:b9:85:b3: de:45:54:38:f2:13:fa:c5:51:eb:bc:e3:78:2e:ba:5e:66:1f: e0:e5:30:a7:b8:80:ce:22:47:7e:fe:50:74:58:a7:66:66:79: 2f:9e:22:4a:1d:a5:21:71:68:70:61:fd:90:78:d0:6d:3b:7e: c9:c9:00:af:32:a2:af:0b:06:02:c7:b5:ca:a5:35:df:1b:8c: fe:02:45:e0:42:bc:94:00:a9:3b:40:29:c0:a2:cb:ba:23:eb: 43:56:0d:76:79:e5:41:60:c6:9f:3f:5e:d7:54:ed:8f:ff:0a: 07:65:42:06:5c:23:18:f1:f8:08:ea:58:22:5f:95:15:34:33: 45:f6:44:dd:eb:9b:7c:df:55:4a:cc:79:36:3c:46:b3:0e:3c: 34:db:76:a3:21:a1:5c:06:e5:43:7d:56:e5:b1:8e:b3:7c:ba: b3:db:60:43:27:85:d7:de:e7:b7:08:73:cc:f2:05:30:26:9a: c4:ea:5c:7c:11:4c:18:ec:9f:8e:ce:af:62:69:73:b3:ee:95: d0:f3:76:39:13:ca:6e:6f:16:8b:2c:11:01:a8:42:5f:6c:9f: 3d:fe:48:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF5q7hDhSBZKXhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTViNzgwNWEtZmViNS00ZmQzLWJkOTItNjllNDdjMzU0MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1jOpMyI1TsBD3u7Xq9EmqyA9aVLlkNHSyyS cz1Kb/Oc8EK1vQJCkN4pUMDlkNjvUyyi3eoDnIn11kmji4kE8Xf7gMO4omCLb9si s2Z4Dq9n1JzQ154dklwLV01tAs77iTluw3gCwcP94cAAY//8Nt3Ukz9n2HXR/cBT rvX604A4as6sD3zAkTW14OUP2fRm4PIC/MhzyFmNj+VpWyftlgjhcfAxl3EMg4dF 0k3fZan45orX3YgFbdF6aXrjmZyASwVWIkmTLIb3oHeiOMfTMTTS1OGfQqduxpJU lm7gyoCYzvWsN0kT2Ir6/XQvu64Sw3pGeKL7yNnaNko/O2FbWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1dho/Gfye48ZtLIeLLLs4+AG/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvN2RhMGJiZjItODU0Zi0z MTJhLWE1ZmYtNmFiNzYwYmU5NjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgdzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+CirwverxKIhLdDN/3etQH2ebEd9o/miEocx3VNz9sK7mFs95FVDjy E/rFUeu843guul5mH+DlMKe4gM4iR37+UHRYp2ZmeS+eIkodpSFxaHBh/ZB40G07 fsnJAK8yoq8LBgLHtcqlNd8bjP4CReBCvJQAqTtAKcCiy7oj60NWDXZ55UFgxp8/ XtdU7Y//CgdlQgZcIxjx+AjqWCJflRU0M0X2RN3rm3zfVUrMeTY8RrMOPDTbdqMh oVwG5UN9VuWxjrN8urPbYEMnhdfe57cIc8zyBTAmmsTqXHwRTBjsn47Or2Jpc7Pu ldDzdjkTym5vFossEQGoQl9snz3+SEw= -----END CERTIFICATE-----Generated at Mon Mar 2 07:40:58 2026 by rpki-client