$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4988bdfe-ead6-3791-a1f9-4af6dbb5b462.roa File: 4988bdfe-ead6-3791-a1f9-4af6dbb5b462.roa (raw, json) Hash identifier: tn5qZ+8WqdBJb8g76eL2f5edAw056e0Y9ehocakoAL8= Subject key identifier: 55:05:99:D4:7E:0E:93:D8:E6:51:42:07:FE:A3:3E:04:99:7F:1B:F7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF54CD5E9787A907B161472 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4988bdfe-ead6-3791-a1f9-4af6dbb5b462.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 129.148.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:4c:d5:e9:78:7a:90:7b:16:14:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=a00e0cb7-9676-4baa-a710-9e8ef607992c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6b:0b:8e:fe:1e:02:ce:e6:e8:70:61:98:82: 06:af:cd:d2:05:5a:53:c6:db:f0:46:c5:84:02:3e: 9e:ea:21:53:58:6f:a4:f0:52:9e:ea:71:fb:dc:81: e7:d1:b0:43:90:31:9e:3c:e9:31:91:ad:67:54:4f: 61:00:6c:b9:75:d8:35:71:3e:e8:6f:18:48:23:9f: 60:e9:d8:80:6f:25:aa:36:27:5a:22:0c:1a:ef:75: 45:56:36:40:f9:f4:26:31:28:c1:12:e0:6e:a9:a7: 72:4c:89:4b:08:15:8a:28:f5:d4:97:8b:b6:46:4b: df:a1:25:c1:79:f1:49:e7:e3:4b:40:58:a3:2b:13: 49:3e:6c:ad:b4:6e:03:55:67:a9:af:da:4a:90:98: 39:12:14:30:0c:d5:f6:ca:2a:bc:71:f2:ef:07:4b: 4d:77:c4:82:57:be:b9:69:a0:95:d2:a1:59:e6:f2: 64:83:19:65:17:0b:45:c6:94:3f:5f:54:b4:85:b1: 5f:ca:b8:e6:13:48:e8:29:bd:64:e4:d9:7c:15:09: 49:b9:6f:7b:97:5e:19:f9:8e:e0:8a:da:9a:2d:46: 12:24:94:22:6e:90:e6:fa:dd:64:c4:2c:84:3f:ba: 3e:da:76:5e:25:30:85:c4:ee:ab:0e:45:ab:d6:78: 19:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:05:99:D4:7E:0E:93:D8:E6:51:42:07:FE:A3:3E:04:99:7F:1B:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4988bdfe-ead6-3791-a1f9-4af6dbb5b462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:59:7b:8b:7a:d7:10:95:f7:33:f7:e2:5d:50:3b:dc:0e:1b: cd:32:17:8a:42:0f:d1:09:4f:a0:22:65:2d:d0:de:3c:e8:16: 4b:d4:3c:8c:cc:ed:48:53:90:1d:de:b2:3a:7e:3a:85:26:27: 76:28:03:f0:d2:0a:3a:11:04:4b:b6:90:fd:74:99:2b:9b:93: 6f:b9:f2:25:95:c0:49:45:d6:1d:c7:7d:47:93:13:94:80:ba: 05:98:34:d6:f4:9a:05:3c:36:e9:09:08:36:c6:b0:88:cb:b5: bf:fc:c3:fd:df:37:32:83:32:12:92:89:4f:4d:7c:e5:86:69: 01:66:0d:e0:95:64:16:79:cb:af:45:5a:31:63:68:8e:68:cb: 7e:39:38:3a:11:ec:c0:c0:57:a0:d1:49:3e:26:f0:d5:18:be: af:ea:0d:5c:0e:5a:a9:61:ca:55:c4:12:f3:52:3f:00:6e:74: c6:07:83:ae:e1:47:9e:43:8b:de:c6:cd:26:c8:4f:1e:92:f3: 6d:5e:78:56:84:62:c8:a3:6c:17:13:a9:64:a2:2c:42:25:1c: fc:9e:85:18:a5:c6:26:d8:e6:68:69:7c:98:e8:c7:ed:5e:c8: 01:1a:34:88:8e:20:56:63:7c:19:ea:5c:b2:c5:5e:5a:4e:e0: a5:5b:5e:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9UzV6Xh6kHsWFHIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YTAwZTBjYjctOTY3Ni00YmFhLWE3MTAtOWU4ZWY2MDc5OTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGsLjv4eAs7m6HBhmIIGr83SBVpTxtvwRsWE Aj6e6iFTWG+k8FKe6nH73IHn0bBDkDGePOkxka1nVE9hAGy5ddg1cT7obxhII59g 6diAbyWqNidaIgwa73VFVjZA+fQmMSjBEuBuqadyTIlLCBWKKPXUl4u2RkvfoSXB efFJ5+NLQFijKxNJPmyttG4DVWepr9pKkJg5EhQwDNX2yiq8cfLvB0tNd8SCV765 aaCV0qFZ5vJkgxllFwtFxpQ/X1S0hbFfyrjmE0joKb1k5Nl8FQlJuW97l14Z+Y7g itqaLUYSJJQibpDm+t1kxCyEP7o+2nZeJTCFxO6rDkWr1ngZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUFmdR+DpPY5lFCB/6jPgSZfxv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDk4OGJkZmUtZWFkNi0z NzkxLWExZjktNGFmNmRiYjViNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBZe4t61xCV9zP34l1QO9wOG80yF4pCD9EJT6AiZS3Q3jzoFkvUPIzM 7UhTkB3esjp+OoUmJ3YoA/DSCjoRBEu2kP10mSubk2+58iWVwElF1h3HfUeTE5SA ugWYNNb0mgU8NukJCDbGsIjLtb/8w/3fNzKDMhKSiU9NfOWGaQFmDeCVZBZ5y69F WjFjaI5oy345ODoR7MDAV6DRST4m8NUYvq/qDVwOWqlhylXEEvNSPwBudMYHg67h R55Di97GzSbITx6S821eeFaEYsijbBcTqWSiLEIlHPyehRilxibY5mhpfJjox+1e yAEaNIiOIFZjfBnqXLLFXlpO4KVbXj4= -----END CERTIFICATE-----Generated at Wed May 13 08:58:30 2026 by rpki-client