$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa File: 2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa (raw, json) Hash identifier: 63HD/FiKfuiZNTO46wY9y3KogzXD21IJu/raMGgbFQA= Subject key identifier: A3:0D:5B:3E:F0:84:1F:99:A4:D9:8D:61:A6:05:8A:E9:34:B3:50:18 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A937D4A472E50B74E8D00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.146.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:93:7d:4a:47:2e:50:b7:4e:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=c68dabcf-eda6-459e-ba7a-8a698e2c5bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:43:0a:29:1c:a4:ff:e9:04:6e:8d:4d:e9: f3:c0:74:98:f6:a3:c4:76:22:1a:3c:55:ac:88:5e: 17:89:a0:2e:f5:d5:2e:98:3e:56:5e:f1:1b:aa:44: 04:06:37:c8:1a:d9:4b:8d:52:4a:ce:d8:cc:26:70: 0b:c7:e7:57:46:33:7e:a4:d8:0d:ae:a6:fa:f7:65: a4:61:a1:3e:fa:37:3b:df:f5:84:25:08:ed:15:33: 44:85:67:54:da:9e:8c:be:1d:45:0e:f7:31:7a:27: 2c:e7:e6:03:71:0f:9b:bc:0e:5f:a4:93:6c:37:bc: e5:f9:1f:a6:50:ea:e3:f5:6d:19:e4:e9:59:50:f9: 4f:9b:36:cb:49:a3:06:f5:f9:92:2a:ff:df:43:3b: 0d:b2:ff:90:ac:63:73:79:a4:1a:8f:a5:77:04:af: b2:75:19:9d:b1:e2:85:1f:ba:ae:c9:59:4c:a0:e0: 6a:b7:d9:79:03:ad:8d:a2:6b:c8:91:88:32:7f:9f: c8:b5:eb:94:9d:58:c4:53:c9:34:1d:ed:ee:b6:e6: a6:82:4f:4b:9c:b3:52:e5:62:c7:6f:54:94:60:84: 4f:6e:17:68:66:1f:07:69:bf:ac:fb:60:4a:6b:8d: 43:a7:25:9f:9a:02:dd:c5:cc:5a:3d:12:13:bf:ee: 06:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0D:5B:3E:F0:84:1F:99:A4:D9:8D:61:A6:05:8A:E9:34:B3:50:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ba:01:38:44:b7:29:b1:05:33:4a:5d:6b:e7:8a:78:bc:33: 06:04:02:a4:20:52:e7:02:cd:7e:6a:01:69:7e:c0:0a:ec:fd: 86:07:92:cb:18:ea:d6:86:bc:be:19:7e:7e:e5:ce:ca:ca:ea: e6:9b:98:fd:77:82:51:06:e7:70:26:90:0b:91:70:d1:3c:88: 59:f5:2b:ec:8f:76:da:f1:42:01:a3:6a:ee:7d:66:f5:7d:0f: 60:d9:05:d3:15:db:d7:fd:d3:08:cc:bc:19:9a:5b:80:87:2f: 53:02:54:97:bc:a0:bc:d1:30:81:a9:33:86:58:3c:9b:26:2e: bc:0c:3e:52:1b:3b:0c:63:5b:83:33:83:f5:68:4b:52:5e:a2: cd:78:1b:87:a2:a9:0c:b9:65:9b:fa:bf:6a:cf:92:80:e0:e7: 10:d1:90:2a:fc:f1:5e:a1:4f:0a:5e:d7:6d:08:fa:55:a2:d3: 5d:18:ab:46:fb:d6:4a:18:25:1d:8c:f7:f8:91:04:ec:7d:77: 5d:29:8f:df:d2:aa:ef:01:d2:57:e0:c8:a1:17:16:01:f8:5c: 90:9b:f4:96:46:ba:b2:9b:05:08:e9:de:1c:b0:c7:31:56:84: 65:17:e1:47:13:a1:cb:d2:0f:e3:96:c8:e5:d4:8b:9e:b1:18: 87:c1:5a:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpN9SkcuULdOjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk YzY4ZGFiY2YtZWRhNi00NTllLWJhN2EtOGE2OThlMmM1YmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZhDCikcpP/pBG6NTenzwHSY9qPEdiIaPFWs iF4XiaAu9dUumD5WXvEbqkQEBjfIGtlLjVJKztjMJnALx+dXRjN+pNgNrqb692Wk YaE++jc73/WEJQjtFTNEhWdU2p6Mvh1FDvcxeics5+YDcQ+bvA5fpJNsN7zl+R+m UOrj9W0Z5OlZUPlPmzbLSaMG9fmSKv/fQzsNsv+QrGNzeaQaj6V3BK+ydRmdseKF H7quyVlMoOBqt9l5A62NomvIkYgyf5/IteuUnVjEU8k0He3utuamgk9LnLNS5WLH b1SUYIRPbhdoZh8Hab+s+2BKa41DpyWfmgLdxcxaPRITv+4GywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMNWz7whB+ZpNmNYaYFiuk0s1AYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmIyM2Q2ZjItZDFjMC0z NTM2LTgyYzMtZmJmYzk3N2U3MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO6AThEtymxBTNKXWvnini8MwYEAqQgUucCzX5qAWl+wArs/YYHkssY 6taGvL4Zfn7lzsrK6uabmP13glEG53AmkAuRcNE8iFn1K+yPdtrxQgGjau59ZvV9 D2DZBdMV29f90wjMvBmaW4CHL1MCVJe8oLzRMIGpM4ZYPJsmLrwMPlIbOwxjW4Mz g/VoS1Jeos14G4eiqQy5ZZv6v2rPkoDg5xDRkCr88V6hTwpe120I+lWi010Yq0b7 1koYJR2M9/iRBOx9d10pj9/Squ8B0lfgyKEXFgH4XJCb9JZGurKbBQjp3hywxzFW hGUX4UcTocvSD+OWyOXUi56xGIfBWj8= -----END CERTIFICATE-----Generated at Wed May 13 06:52:28 2026 by rpki-client