$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/686badf9-71ff-3a50-8be9-89519dccd889.roa File: 686badf9-71ff-3a50-8be9-89519dccd889.roa (raw, json) Hash identifier: HgxNTJv6PTL2IVezoYRHRth7Mir+hI82cB8y2uajMdA= Subject key identifier: 88:45:1E:50:0A:82:E9:1C:F7:09:52:DA:E7:59:04:06:9A:AC:24:0A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D98BA9BF90F2A75AC3506F580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/686badf9-71ff-3a50-8be9-89519dccd889.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.158.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:9b:f9:0f:2a:75:ac:35:06:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=f8a02587-4963-4ae6-9272-a8b922e7d9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:1e:8f:2f:3a:c5:77:4b:ac:1f:2e:b5:e6: 92:f4:3a:7e:ce:7e:7b:13:d8:ec:fb:42:a7:15:41: b7:a2:9e:80:17:db:03:3c:b8:3c:ac:54:14:85:ee: 03:6e:8c:f1:c9:37:b8:c8:a5:6a:97:54:86:08:ce: b4:65:b8:b8:08:84:0f:db:41:7c:2f:28:89:e1:8a: 43:17:a7:2e:41:7b:b0:fb:6a:68:c8:48:45:5e:16: a9:e6:9f:29:ff:b0:74:63:df:f2:09:f9:05:88:11: 8e:a8:e5:4a:22:70:f1:a2:a2:05:8b:e7:47:ab:47: 44:59:ac:47:36:a3:5f:47:91:85:72:84:79:0e:e4: 45:42:e7:5d:3b:be:2c:71:91:9d:ea:c8:34:cb:fe: 25:f9:bf:17:71:e9:b7:f0:30:1b:31:88:9e:4c:f5: b8:a8:f2:70:21:80:98:2a:22:31:f8:f0:11:8d:7c: 1a:f5:9b:a7:1f:e7:67:9f:06:5a:e4:1d:09:dc:2c: cf:0f:af:08:a9:d3:2d:d0:ff:41:ea:e8:f9:32:cb: 61:9c:94:2f:f5:33:bf:bf:ef:29:79:b7:28:7a:5f: ef:22:cd:82:3b:54:f9:b9:79:74:98:aa:99:21:5a: 15:7b:c4:70:f7:3d:d6:f2:96:99:7d:de:33:a9:a3: 69:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:45:1E:50:0A:82:E9:1C:F7:09:52:DA:E7:59:04:06:9A:AC:24:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/686badf9-71ff-3a50-8be9-89519dccd889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.158.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:41:50:c7:3d:59:b2:53:85:3e:4a:34:de:83:fe:be:b6:b8: e4:59:bb:a1:73:c9:4d:71:c2:ce:20:67:c1:75:37:90:b0:e5: b5:7c:05:19:c5:68:39:40:e3:07:31:a6:7c:0b:ff:ca:23:31: f7:42:bf:73:bf:1f:04:3a:e6:37:72:80:35:54:4f:f0:c8:70: ca:fc:9d:f8:69:cd:31:d8:76:71:0f:db:25:3a:c9:c9:73:63: 47:dc:18:ea:42:68:0b:4f:5b:3c:e8:1a:b9:65:0f:52:b3:37: 0e:6f:5a:0f:a9:00:0c:a7:a8:a2:70:68:23:1e:1d:93:74:9a: 30:05:52:ce:37:bc:06:7f:b0:81:8b:3c:21:ca:b8:af:d2:17: b2:43:c4:75:69:9a:6c:d4:1e:76:b1:02:cb:6d:87:ae:eb:a6: 7f:c8:e1:ef:8c:f4:5b:5a:5b:c5:e3:64:34:0c:9f:fb:0c:f1: 68:d2:14:fd:a1:17:69:4e:5c:55:b6:dd:8c:3a:25:89:0b:35: 78:05:c2:58:72:dd:b6:42:16:a8:f1:7d:2b:e9:2f:73:29:cb: ba:da:13:77:7d:38:99:80:61:5e:13:e6:e8:95:e6:c8:c1:83: 12:27:54:a5:5f:a1:27:be:56:5c:03:56:51:65:94:10:28:b2: d0:0c:fe:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Yupv5Dyp1rDUG9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk ZjhhMDI1ODctNDk2My00YWU2LTkyNzItYThiOTIyZTdkOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Aejy86xXdLrB8uteaS9Dp+zn57E9js+0Kn FUG3op6AF9sDPLg8rFQUhe4DbozxyTe4yKVql1SGCM60Zbi4CIQP20F8LyiJ4YpD F6cuQXuw+2poyEhFXhap5p8p/7B0Y9/yCfkFiBGOqOVKInDxoqIFi+dHq0dEWaxH NqNfR5GFcoR5DuRFQuddO74scZGd6sg0y/4l+b8Xcem38DAbMYieTPW4qPJwIYCY KiIx+PARjXwa9ZunH+dnnwZa5B0J3CzPD68IqdMt0P9B6uj5MsthnJQv9TO/v+8p ebcoel/vIs2CO1T5uXl0mKqZIVoVe8Rw9z3W8paZfd4zqaNpNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhFHlAKgukc9wlS2udZBAaarCQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjg2YmFkZjktNzFmZi0z YTUwLThiZTktODk1MTlkY2NkODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgZ6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNBUMc9WbJThT5KNN6D/r62uORZu6FzyU1xws4gZ8F1N5Cw5bV8BRnF aDlA4wcxpnwL/8ojMfdCv3O/HwQ65jdygDVUT/DIcMr8nfhpzTHYdnEP2yU6yclz Y0fcGOpCaAtPWzzoGrllD1KzNw5vWg+pAAynqKJwaCMeHZN0mjAFUs43vAZ/sIGL PCHKuK/SF7JDxHVpmmzUHnaxAstth67rpn/I4e+M9FtaW8XjZDQMn/sM8WjSFP2h F2lOXFW23Yw6JYkLNXgFwlhy3bZCFqjxfSvpL3Mpy7raE3d9OJmAYV4T5uiV5sjB gxInVKVfoSe+VlwDVlFllBAostAM/g8= -----END CERTIFICATE-----Generated at Wed May 13 08:36:54 2026 by rpki-client