$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/6c912e53-7f9f-359d-9783-9d739696e83e.roa File: 6c912e53-7f9f-359d-9783-9d739696e83e.roa (raw, json) Hash identifier: nTS1hT7oBUJkcb2+m1Hkk0ntxfMLEPQ/BMXTJQt2u70= Subject key identifier: 22:D8:48:F7:AB:C2:5A:27:A6:6A:AC:6A:EA:5C:6D:9E:81:B4:41:E9 Certificate issuer: /CN=fb26a778-1de5-4c0c-ae29-169277907d9c Certificate serial: 010D0C9F4328584D571FA92DA72FB6948DB45900 Authority key identifier: E1:27:44:12:2B:2D:5A:DA:49:3D:88:C8:4E:00:EA:2C:AF:97:46:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/6c912e53-7f9f-359d-9783-9d739696e83e.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 589 IP address blocks: 129.120.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/fb26a778-1de5-4c0c-ae29-169277907d9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/fb26a778-1de5-4c0c-ae29-169277907d9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a9:2d:a7:2f:b6:94:8d:b4:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb26a778-1de5-4c0c-ae29-169277907d9c Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=1f9029bd-12d9-454a-a1fa-ed844d418284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f4:77:93:ae:a6:ac:97:b3:2e:35:3f:6c:d1: 78:c0:33:d0:c0:ff:bd:e0:46:c8:cb:b8:c3:40:15: e6:48:c9:aa:f5:6b:1f:42:9d:9a:73:2d:1c:8f:8e: 1f:a3:3f:25:75:82:a4:a4:a4:59:a9:c6:8c:d9:dd: e3:e6:c7:91:bf:45:73:3a:ed:66:34:d8:60:9c:67: 1f:9d:fc:b3:23:ed:7b:57:cf:89:da:5b:b1:f9:11: ae:c4:ac:e5:ce:50:3a:4b:5b:07:07:ea:a3:0b:bb: 0a:84:f5:ac:f4:23:3e:f9:5c:4e:f7:0e:90:41:56: d0:a0:b3:fd:40:51:ed:9f:ac:50:49:c4:c9:b5:70: ad:ac:0b:6b:6e:7d:3e:92:1c:c8:3e:18:37:eb:36: f9:61:eb:7d:b0:2a:b8:4d:bb:73:62:d0:f9:55:e7: 99:89:61:36:4c:bb:ae:6f:8a:90:1e:37:dc:a5:b2: 9a:52:1b:99:f8:d6:0b:a2:be:8c:3c:13:2a:6a:e6: 86:20:ab:5f:18:12:70:b0:7a:aa:d6:00:83:3c:d2: 25:57:44:65:2d:56:08:22:3a:79:e6:13:60:c0:93: ba:f0:9a:4f:f5:da:9d:2c:c0:ae:58:f9:72:a0:8d: 5f:a0:99:e8:80:6c:5f:95:fb:5c:4e:e9:50:80:98: be:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D8:48:F7:AB:C2:5A:27:A6:6A:AC:6A:EA:5C:6D:9E:81:B4:41:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/6c912e53-7f9f-359d-9783-9d739696e83e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/fb26a778-1de5-4c0c-ae29-169277907d9c.crl X509v3 Authority Key Identifier: keyid:E1:27:44:12:2B:2D:5A:DA:49:3D:88:C8:4E:00:EA:2C:AF:97:46:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c.cer sbgp-ipAddrBlock: critical IPv4: 129.120.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8b:17:9a:80:be:f7:06:60:eb:12:ba:47:42:92:c9:3a:cb: b8:3c:7a:00:6f:7f:32:8d:7b:ca:60:d6:40:30:db:63:7e:24: 73:70:be:22:e2:eb:8a:54:ed:83:6c:19:a9:c4:f8:ef:4b:2a: 23:a4:68:cb:db:1c:ff:37:03:77:dc:b7:ce:87:66:4f:92:d8: 18:eb:94:51:70:be:ee:ba:d7:d6:22:1d:a4:f4:46:4d:6f:1d: f7:07:3e:8d:b9:83:4d:b7:97:4f:69:12:44:a1:a7:64:ff:e7: d3:b9:c0:0c:2c:96:ee:38:80:19:77:b5:42:da:3e:93:2a:b0: d2:65:b8:22:32:f7:31:56:ea:d2:13:bb:29:e1:27:87:7b:5f: cf:83:7a:9e:39:91:61:66:53:73:6b:00:63:0e:58:b4:ec:75: cb:13:60:8c:3d:83:57:95:89:dc:b8:9e:c2:15:aa:9a:9a:9e: 9f:fb:90:5a:96:5f:af:9a:77:b9:65:4e:33:68:c3:86:a8:43: 14:b8:47:9c:71:cb:eb:f1:78:02:5a:6e:6c:33:74:74:ef:7d: 27:b6:e6:00:17:a3:9e:c0:fa:7f:48:05:9b:e5:1a:4d:85:89: 3f:69:fc:70:56:9f:3c:7f:da:58:7f:3a:a5:09:90:57:c2:38: 2d:3b:4b:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1XH6ktpy+2lI20WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmIyNmE3NzgtMWRlNS00YzBjLWFlMjktMTY5Mjc3OTA3 ZDljMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MWY5MDI5YmQtMTJkOS00NTRhLWExZmEtZWQ4NDRkNDE4Mjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvR3k66mrJezLjU/bNF4wDPQwP+94EbIy7jD QBXmSMmq9WsfQp2acy0cj44foz8ldYKkpKRZqcaM2d3j5seRv0VzOu1mNNhgnGcf nfyzI+17V8+J2lux+RGuxKzlzlA6S1sHB+qjC7sKhPWs9CM++VxO9w6QQVbQoLP9 QFHtn6xQScTJtXCtrAtrbn0+khzIPhg36zb5Yet9sCq4TbtzYtD5VeeZiWE2TLuu b4qQHjfcpbKaUhuZ+NYLor6MPBMqauaGIKtfGBJwsHqq1gCDPNIlV0RlLVYIIjp5 5hNgwJO68JpP9dqdLMCuWPlyoI1foJnogGxflftcTulQgJi+6wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCLYSPerwlonpmqsaupcbZ6BtEHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYjI2 YTc3OC0xZGU1LTRjMGMtYWUyOS0xNjkyNzc5MDdkOWMvNmM5MTJlNTMtN2Y5Zi0z NTlkLTk3ODMtOWQ3Mzk2OTZlODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmIyNmE3NzgtMWRlNS00YzBjLWFl MjktMTY5Mjc3OTA3ZDljL2ZiMjZhNzc4LTFkZTUtNGMwYy1hZTI5LTE2OTI3Nzkw N2Q5Yy5jcmwwHwYDVR0jBBgwFoAU4SdEEistWtpJPYjITgDqLK+XRmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYjI2YTc3OC0xZGU1LTRjMGMtYWUyOS0xNjky Nzc5MDdkOWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgXgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAg4sXmoC+9wZg6xK6R0KSyTrLuDx6AG9/Mo17ymDWQDDbY34kc3C+IuLr ilTtg2wZqcT470sqI6Roy9sc/zcDd9y3zodmT5LYGOuUUXC+7rrX1iIdpPRGTW8d 9wc+jbmDTbeXT2kSRKGnZP/n07nADCyW7jiAGXe1Qto+kyqw0mW4IjL3MVbq0hO7 KeEnh3tfz4N6njmRYWZTc2sAYw5YtOx1yxNgjD2DV5WJ3LiewhWqmpqen/uQWpZf r5p3uWVOM2jDhqhDFLhHnHHL6/F4AlpubDN0dO99J7bmABejnsD6f0gFm+UaTYWJ P2n8cFafPH/aWH86pQmQV8I4LTtLtQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:45:04 2026 by rpki-client