$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b24c156-f093-3d90-8cfc-13149056c5db.roa File: 1b24c156-f093-3d90-8cfc-13149056c5db.roa (raw, json) Hash identifier: nGgOVxn8V5B1g8d56RcTFsa2Lq47tkUNGODmzROw8CY= Subject key identifier: E3:C2:55:92:62:55:2F:53:2C:85:0E:F9:BC:1A:BC:67:49:BF:C4:AE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A8D3ACFF405513F27F600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b24c156-f093-3d90-8cfc-13149056c5db.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.146.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:8d:3a:cf:f4:05:51:3f:27:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=4628213f-8c8b-493a-ae76-fa81b6041766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:ba:d2:ac:1d:31:6e:1f:be:dc:6c:0f:4f: 59:2e:19:df:2a:0c:87:6e:b2:d8:26:67:8c:6a:c3: ca:11:fa:4f:bb:1e:42:d2:cb:3b:4c:5b:87:5d:62: 44:6d:d8:50:5c:ff:22:c2:b8:4c:28:c4:db:98:bb: 4d:a2:2e:98:42:d7:53:cf:fc:b7:71:87:26:fc:2f: 63:7f:7a:d8:dc:f3:c8:75:2d:69:8b:50:0b:68:52: 5f:cb:84:04:9b:a1:32:aa:51:06:fe:a1:fd:fd:02: 4e:45:12:bc:a6:59:c6:bb:c9:39:74:a6:65:2c:62: b3:0b:4c:1c:f3:c3:9b:6d:43:3f:5a:9f:e8:30:a2: 51:1b:28:09:37:e9:74:ec:69:07:2c:6c:53:c7:9c: 10:92:c6:7b:9c:f8:1e:8e:83:b9:a6:20:57:70:cb: 72:a3:fb:93:9a:02:a3:d9:09:fb:ed:c9:55:d6:69: 8c:e0:a1:ce:64:b4:e6:43:c1:81:b0:23:3a:bc:d2: af:cc:00:da:22:71:f8:b6:32:b6:67:d3:52:91:2a: 94:e4:fe:bb:ff:cc:25:d5:82:71:b9:1a:4c:ee:b0: f7:5e:c4:70:a2:da:8f:7a:2b:c8:88:29:ea:b4:2f: 95:a7:93:aa:9c:ea:04:62:53:f8:09:da:0d:2a:5f: 86:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C2:55:92:62:55:2F:53:2C:85:0E:F9:BC:1A:BC:67:49:BF:C4:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b24c156-f093-3d90-8cfc-13149056c5db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:06:88:19:ce:c2:3a:3d:48:e0:6d:b9:91:aa:f1:ba:a2:60: d8:9c:ea:b9:48:32:63:4a:a0:10:c1:f4:f5:d3:a5:36:f5:5e: cb:b2:a9:8d:ce:86:8e:fa:0b:c8:55:e9:54:53:d8:44:de:e9: 08:94:3e:21:5f:fa:f2:c6:1b:51:b2:47:04:df:b2:98:9b:6d: a6:46:20:43:af:0e:60:98:50:bf:b0:e1:55:19:6d:fa:43:da: 79:55:58:69:82:c6:ee:32:ba:4c:02:fc:fd:ff:8e:0d:d6:2c: 2d:03:70:19:42:64:92:a9:ba:91:1c:b3:2c:7f:dd:ff:5a:e0: 1e:69:9b:e5:34:eb:12:88:57:66:90:71:d6:0e:0c:15:cd:34: 23:1e:ad:03:8d:1b:6d:9a:b3:37:15:64:df:52:db:45:55:d8: 29:e1:52:e0:d7:e2:71:cb:33:77:ab:aa:66:24:4a:72:76:66: 6f:fd:a0:cf:a9:88:0a:b9:d3:30:c6:97:46:ca:b3:ce:2e:19: 91:1a:26:e4:bd:e8:1f:05:4a:dd:e2:6d:02:36:9b:61:71:21: 62:b7:8a:3d:9a:5a:af:0d:46:95:c8:d8:43:8f:1e:05:d3:3d: ce:17:23:c4:2d:3b:66:5f:9f:97:27:64:fa:bf:f7:bf:04:d8: af:e0:ec:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWo06z/QFUT8n9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk NDYyODIxM2YtOGM4Yi00OTNhLWFlNzYtZmE4MWI2MDQxNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4i60qwdMW4fvtxsD09ZLhnfKgyHbrLYJmeM asPKEfpPux5C0ss7TFuHXWJEbdhQXP8iwrhMKMTbmLtNoi6YQtdTz/y3cYcm/C9j f3rY3PPIdS1pi1ALaFJfy4QEm6EyqlEG/qH9/QJORRK8plnGu8k5dKZlLGKzC0wc 88ObbUM/Wp/oMKJRGygJN+l07GkHLGxTx5wQksZ7nPgejoO5piBXcMtyo/uTmgKj 2Qn77clV1mmM4KHOZLTmQ8GBsCM6vNKvzADaInH4tjK2Z9NSkSqU5P67/8wl1YJx uRpM7rD3XsRwotqPeivIiCnqtC+Vp5OqnOoEYlP4CdoNKl+GlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPCVZJiVS9TLIUO+bwavGdJv8SuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWIyNGMxNTYtZjA5My0z ZDkwLThjZmMtMTMxNDkwNTZjNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZIOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkGiBnOwjo9SOBtuZGq8bqiYNic6rlIMmNKoBDB9PXTpTb1XsuyqY3O ho76C8hV6VRT2ETe6QiUPiFf+vLGG1GyRwTfspibbaZGIEOvDmCYUL+w4VUZbfpD 2nlVWGmCxu4yukwC/P3/jg3WLC0DcBlCZJKpupEcsyx/3f9a4B5pm+U06xKIV2aQ cdYODBXNNCMerQONG22aszcVZN9S20VV2CnhUuDX4nHLM3erqmYkSnJ2Zm/9oM+p iAq50zDGl0bKs84uGZEaJuS96B8FSt3ibQI2m2FxIWK3ij2aWq8NRpXI2EOPHgXT Pc4XI8QtO2Zfn5cnZPq/978E2K/g7BY= -----END CERTIFICATE-----Generated at Wed May 13 13:20:09 2026 by rpki-client