$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa File: 23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa (raw, json) Hash identifier: 3Ej7vdsi+O3dNqp4wtGUI3zIXCuZSAbsqkIh2/vf1Us= Subject key identifier: 63:79:7E:DC:FE:A9:DE:D3:50:29:89:6F:03:19:DD:97:10:82:30:A4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC556A9359F2DB2586B5D00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.148.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:56:a9:35:9f:2d:b2:58:6b:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=a1a11ea2-7167-4fd7-a54d-73121be3e582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:13:ac:a4:3f:6c:e8:d7:ec:87:17:5f:17:63: 2e:fa:d8:34:78:a9:74:16:a4:33:4a:84:f6:6e:de: 6b:13:45:bb:1d:eb:7f:4c:cb:bf:12:84:5b:46:5f: 71:0e:52:fb:af:7e:5b:c5:a9:10:52:ec:2e:47:41: 76:81:fb:86:fe:61:ca:4b:e2:af:bc:5d:43:17:07: 6d:b6:b2:78:42:db:ed:f3:09:e0:3e:93:e4:ba:d1: ad:ce:b0:69:43:2e:bb:80:c8:eb:23:80:c2:3b:c7: 2e:d4:c8:2b:88:40:3e:39:ef:e7:4c:ae:0d:a4:35: 32:3c:c7:3b:a0:d4:a7:10:d2:6a:7c:9c:16:ad:71: 0b:6f:bb:c3:ef:fb:c7:40:71:ea:cc:0a:b5:ae:f1: da:95:47:da:40:a4:16:eb:2d:e1:aa:21:7c:97:3c: 16:c3:1e:16:19:fe:ce:47:f4:8d:ab:5e:21:09:52: 44:e6:e8:97:21:bc:d2:78:3d:e6:5f:c7:73:7b:d4: f4:29:30:e8:02:29:3b:bf:10:ec:c1:66:c8:ec:27: e6:4d:94:a6:b9:67:cb:8e:1e:95:16:d8:a9:45:34: 4c:b8:56:e4:89:96:56:b9:ca:76:85:23:ac:cb:a0: 6b:e9:bb:79:a9:c8:93:5c:03:ae:10:47:55:e8:cc: ec:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:79:7E:DC:FE:A9:DE:D3:50:29:89:6F:03:19:DD:97:10:82:30:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d5:7c:61:0d:7f:47:e2:95:e6:9b:5c:5c:89:5f:b8:bd:87: f3:18:50:09:5f:ff:8b:f8:2e:0a:8f:08:d0:7a:d8:6d:56:7e: b7:18:97:3c:92:97:f5:2b:e5:9d:f0:cf:81:e4:d9:f3:df:b2: b1:34:b5:32:7a:c9:cc:b5:c0:9d:de:a4:e0:fc:32:7e:48:6f: cd:da:99:91:d5:6e:9e:0f:36:41:d5:22:07:b5:d8:cc:8a:19: 50:74:39:b4:f1:2c:e6:64:04:54:ce:bd:b8:22:0a:54:b4:fe: c7:29:fe:e5:f4:17:ad:cd:0d:1c:4b:fb:0c:f6:98:5e:7e:35: a3:48:9b:e7:db:1a:3b:70:0a:64:af:cc:00:e2:43:4d:39:c1: 21:d1:4a:59:86:00:3a:9c:ee:ca:0c:bb:2a:74:a6:19:2c:9f: ef:2d:f0:a4:e2:8e:57:bf:6d:55:69:31:69:9e:ab:57:02:37: 6f:68:83:78:de:8f:33:cd:60:28:fe:2d:3c:14:5e:71:65:09: 06:df:05:80:27:45:36:c0:2c:97:91:11:bb:ff:f6:f9:3a:ce: 2f:1e:7f:96:83:ef:21:67:16:df:06:e7:bd:7a:f1:d1:67:68: a4:f3:b4:f1:01:60:63:89:2e:16:87:f5:7c:c1:62:c1:06:3f: d0:27:84:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVapNZ8tslhrXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YTFhMTFlYTItNzE2Ny00ZmQ3LWE1NGQtNzMxMjFiZTNlNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhOspD9s6NfshxdfF2Mu+tg0eKl0FqQzSoT2 bt5rE0W7Het/TMu/EoRbRl9xDlL7r35bxakQUuwuR0F2gfuG/mHKS+KvvF1DFwdt trJ4Qtvt8wngPpPkutGtzrBpQy67gMjrI4DCO8cu1MgriEA+Oe/nTK4NpDUyPMc7 oNSnENJqfJwWrXELb7vD7/vHQHHqzAq1rvHalUfaQKQW6y3hqiF8lzwWwx4WGf7O R/SNq14hCVJE5uiXIbzSeD3mX8dze9T0KTDoAik7vxDswWbI7CfmTZSmuWfLjh6V FtipRTRMuFbkiZZWucp2hSOsy6Br6bt5qciTXAOuEEdV6MzsbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN5ftz+qd7TUCmJbwMZ3ZcQgjCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjNkMmQ0NTgtZWQ4OS0z YTdlLWJmNmQtNjYzNjA2MTJhN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfVfGENf0fileabXFyJX7i9h/MYUAlf/4v4LgqPCNB62G1WfrcYlzyS l/Ur5Z3wz4Hk2fPfsrE0tTJ6ycy1wJ3epOD8Mn5Ib83amZHVbp4PNkHVIge12MyK GVB0ObTxLOZkBFTOvbgiClS0/scp/uX0F63NDRxL+wz2mF5+NaNIm+fbGjtwCmSv zADiQ005wSHRSlmGADqc7soMuyp0phksn+8t8KTijle/bVVpMWmeq1cCN29og3je jzPNYCj+LTwUXnFlCQbfBYAnRTbALJeREbv/9vk6zi8ef5aD7yFnFt8G57168dFn aKTztPEBYGOJLhaH9XzBYsEGP9AnhN4= -----END CERTIFICATE-----Generated at Wed May 13 05:39:16 2026 by rpki-client