$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e80f5bf-407d-36f9-986f-806a0334ee39.roa File: 3e80f5bf-407d-36f9-986f-806a0334ee39.roa (raw, json) Hash identifier: SwrW4Sh6HuSMdGxhUIqme/WPxlBc9zxBCOsYgs0zIlM= Subject key identifier: 6E:A0:E4:65:CB:1A:2F:BB:8F:6A:23:E5:99:39:24:8A:B2:8A:DF:12 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E5000666C7FB44D69D32A00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e80f5bf-407d-36f9-986f-806a0334ee39.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.156.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:00:66:6c:7f:b4:4d:69:d3:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=fb185a90-77b7-4244-99f4-86ad97332b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:fd:e9:0f:65:40:48:23:f0:3f:04:ce:a0: a0:22:c2:ec:17:55:c3:55:59:10:7d:a1:fb:20:0d: c0:fe:0e:6b:ba:e1:2d:18:e1:64:ad:f9:f4:af:82: f1:89:b2:c5:28:3c:b0:83:2e:80:08:8c:74:db:78: 2c:dc:e6:31:1b:ad:35:7e:36:33:2b:25:f3:35:ed: 87:ea:05:2d:4f:14:37:e0:35:3e:08:84:b3:e2:fd: 0c:47:c6:7c:93:b7:ba:63:ea:02:f9:2c:85:f1:8d: 7e:62:ac:c0:2b:f5:41:fd:47:0b:de:f0:e9:04:10: f5:cc:ce:94:5d:ac:e9:4d:25:9a:55:20:f2:16:de: 20:3d:b8:06:99:c4:81:2b:b2:39:1e:ff:de:84:f5: e7:6f:0c:11:2c:06:6f:0e:3c:51:62:5a:ac:39:5d: 79:84:4d:75:66:f3:52:50:cf:a4:5f:70:df:b2:78: e4:96:f4:a4:ec:7a:8a:f0:04:f3:10:e2:f8:b2:2e: 85:ca:f3:18:6f:2e:2f:43:19:f6:d8:a8:0a:02:a4: a8:21:33:20:79:68:66:38:13:4a:b8:d1:91:34:fe: 59:e5:7a:ba:a3:7a:e5:63:50:0e:01:33:0c:21:8d: 73:4b:34:c3:86:ae:93:55:d0:86:e5:0d:5c:64:c3: 27:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A0:E4:65:CB:1A:2F:BB:8F:6A:23:E5:99:39:24:8A:B2:8A:DF:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e80f5bf-407d-36f9-986f-806a0334ee39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.156.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d3:ec:5f:49:ef:0f:45:e8:69:b0:b2:62:ab:29:4a:02:61: 36:f6:09:5c:80:86:17:c7:84:5f:8c:5f:45:eb:fd:42:d1:58: da:7f:f5:7a:a5:d1:2b:ce:d0:0a:c0:cd:8b:e5:51:ea:d0:2f: 9c:d5:ee:08:07:cd:56:80:fc:86:4d:01:92:77:c5:1a:39:9b: e9:54:d0:51:74:cc:8e:40:a9:bd:f4:7e:fd:cb:a2:29:1e:b2: cc:02:d4:37:37:7d:fb:dd:b5:f6:61:a3:4b:35:a9:51:b3:1d: 5f:8e:2b:e5:5d:fe:37:32:83:4f:db:e7:94:db:0c:38:ff:c1: f8:ec:74:77:19:c4:4f:6a:a0:03:a1:63:12:99:3e:e3:05:21: 91:03:66:d8:4b:12:94:40:95:0f:63:84:31:d3:1e:4f:fb:75: b7:48:44:1e:9d:bf:c5:68:d1:e5:47:83:27:96:09:6d:a5:82: b3:e1:b1:95:b6:f8:f3:a9:9a:41:4f:08:be:92:66:38:06:7a: 4f:9d:a1:69:f7:68:94:f6:f1:22:2e:25:25:8c:71:6f:ba:ba: 86:64:c3:57:19:e9:4f:d3:aa:90:1e:e8:ce:75:a3:f0:b4:99: 23:70:ab:1c:5d:1b:65:aa:29:70:ff:d4:e0:b8:2b:2b:a4:f1: d8:f5:02:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUABmbH+0TWnTKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZmIxODVhOTAtNzdiNy00MjQ0LTk5ZjQtODZhZDk3MzMyYjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugv96Q9lQEgj8D8EzqCgIsLsF1XDVVkQfaH7 IA3A/g5ruuEtGOFkrfn0r4LxibLFKDywgy6ACIx023gs3OYxG601fjYzKyXzNe2H 6gUtTxQ34DU+CISz4v0MR8Z8k7e6Y+oC+SyF8Y1+YqzAK/VB/UcL3vDpBBD1zM6U XazpTSWaVSDyFt4gPbgGmcSBK7I5Hv/ehPXnbwwRLAZvDjxRYlqsOV15hE11ZvNS UM+kX3DfsnjklvSk7HqK8ATzEOL4si6FyvMYby4vQxn22KgKAqSoITMgeWhmOBNK uNGRNP5Z5Xq6o3rlY1AOATMMIY1zSzTDhq6TVdCG5Q1cZMMnsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6g5GXLGi+7j2oj5Zk5JIqyit8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2U4MGY1YmYtNDA3ZC0z NmY5LTk4NmYtODA2YTAzMzRlZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnT7F9J7w9F6GmwsmKrKUoCYTb2CVyAhhfHhF+MX0Xr/ULRWNp/9Xql 0SvO0ArAzYvlUerQL5zV7ggHzVaA/IZNAZJ3xRo5m+lU0FF0zI5Aqb30fv3Loike sswC1Dc3ffvdtfZho0s1qVGzHV+OK+Vd/jcyg0/b55TbDDj/wfjsdHcZxE9qoAOh YxKZPuMFIZEDZthLEpRAlQ9jhDHTHk/7dbdIRB6dv8Vo0eVHgyeWCW2lgrPhsZW2 +POpmkFPCL6SZjgGek+doWn3aJT28SIuJSWMcW+6uoZkw1cZ6U/TqpAe6M51o/C0 mSNwqxxdG2WqKXD/1OC4Kyuk8dj1At8= -----END CERTIFICATE-----Generated at Wed May 13 08:34:19 2026 by rpki-client