$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a84b6c1-b312-3e15-9d9a-52e917746f80.roa File: 6a84b6c1-b312-3e15-9d9a-52e917746f80.roa (raw, json) Hash identifier: n0J6jys7GSE6VM2x2ty2l+7Feik/FkXj4j7YaaNesJQ= Subject key identifier: 29:13:FE:27:E1:F3:D6:D9:94:0E:E2:F3:25:31:5D:5F:E5:32:60:87 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A8B0E172DBA5723A44D00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a84b6c1-b312-3e15-9d9a-52e917746f80.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.146.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:8b:0e:17:2d:ba:57:23:a4:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=34dc5da2-1e9c-4db4-8118-10231216a23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b1:d5:19:95:95:7c:85:e7:02:20:14:48:b0: 1e:38:a0:ec:12:a4:e8:8c:05:4c:66:04:1c:f3:70: ef:b4:4e:85:1e:a4:9d:eb:c9:96:11:cf:47:dd:07: 76:c0:da:2a:5f:15:51:83:9f:99:88:d7:5c:f1:9e: dc:64:12:2f:3c:4a:ab:7c:cd:c7:ee:9a:a5:37:64: 39:47:2e:21:c3:7e:af:57:1e:4d:a2:73:fe:6d:31: e2:c0:09:87:3f:e9:c9:00:5c:09:ec:f0:d2:bb:5e: cf:c0:ac:14:7b:e3:c3:77:58:9d:08:ee:bc:77:bd: a0:cf:88:df:1f:14:40:a4:27:70:ab:05:14:81:8d: b6:ba:b0:9b:33:f1:1a:3f:e4:3c:6d:65:8b:25:ef: 2f:50:9a:9c:d7:37:15:07:74:bf:0b:c1:2e:5d:aa: 6e:cb:8d:8c:cb:df:8e:11:01:57:4b:0d:ef:69:12: 2d:1b:02:37:a9:8d:88:ce:0b:58:bb:27:8f:e7:7d: 49:6c:95:70:4f:7b:20:df:42:71:06:02:fe:b7:0f: fb:2f:b2:68:e8:56:71:b4:52:ec:6b:a2:43:0a:58: 2b:b0:c1:d2:ab:69:51:f9:d3:87:45:5a:a2:93:90: 40:13:eb:78:0f:07:16:74:ae:33:b0:51:ad:5f:ad: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:13:FE:27:E1:F3:D6:D9:94:0E:E2:F3:25:31:5D:5F:E5:32:60:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a84b6c1-b312-3e15-9d9a-52e917746f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a4:58:17:d4:7c:2b:07:53:1b:e8:90:92:2d:11:83:a3:c0: 46:1a:1d:ff:60:5e:5c:61:e3:f4:8b:3b:3f:27:44:fb:4f:79: da:0c:23:4a:29:11:c7:0d:0f:ce:90:8a:ef:14:75:38:91:77: 9d:1f:91:7b:62:e9:f8:bb:1f:a8:72:13:93:f0:34:15:a5:2b: 6a:16:75:c6:b2:37:11:5f:1b:76:4c:e8:87:72:6b:cc:df:1f: c0:9d:ad:5c:00:76:05:0c:62:99:d2:64:6f:36:4f:83:bd:3d: b8:b2:c7:de:40:71:42:2a:c5:91:d5:86:7e:82:11:1e:b3:d5: 9c:d3:c0:5c:01:9e:c0:a1:8d:4e:31:14:a2:eb:db:a9:b6:2d: e6:f5:1d:86:e7:7f:aa:77:4d:6c:d4:ab:a8:fe:4b:35:e9:1b: f0:95:d3:cf:28:f4:1c:7b:d7:0c:89:bf:71:a0:2b:10:e5:3b: 9e:c7:c8:5f:d5:80:4a:cd:f0:09:f6:70:2a:41:77:09:20:6c: 4c:0d:c3:b7:da:24:08:f6:ba:fb:25:6f:44:f4:59:a6:bc:37: ae:ec:ba:24:e9:60:1b:ad:54:d6:ef:ab:08:d2:ec:ca:09:8b: be:f4:d7:01:bd:10:77:6b:df:9a:ed:52:67:40:cd:2f:93:36: d7:7e:e6:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWosOFy26VyOkTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk MzRkYzVkYTItMWU5Yy00ZGI0LTgxMTgtMTAyMzEyMTZhMjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17HVGZWVfIXnAiAUSLAeOKDsEqTojAVMZgQc 83DvtE6FHqSd68mWEc9H3Qd2wNoqXxVRg5+ZiNdc8Z7cZBIvPEqrfM3H7pqlN2Q5 Ry4hw36vVx5NonP+bTHiwAmHP+nJAFwJ7PDSu17PwKwUe+PDd1idCO68d72gz4jf HxRApCdwqwUUgY22urCbM/EaP+Q8bWWLJe8vUJqc1zcVB3S/C8EuXapuy42My9+O EQFXSw3vaRItGwI3qY2IzgtYuyeP531JbJVwT3sg30JxBgL+tw/7L7Jo6FZxtFLs a6JDClgrsMHSq2lR+dOHRVqik5BAE+t4DwcWdK4zsFGtX63OYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkT/ifh89bZlA7i8yUxXV/lMmCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmE4NGI2YzEtYjMxMi0z ZTE1LTlkOWEtNTJlOTE3NzQ2ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKkWBfUfCsHUxvokJItEYOjwEYaHf9gXlxh4/SLOz8nRPtPedoMI0op EccND86Qiu8UdTiRd50fkXti6fi7H6hyE5PwNBWlK2oWdcayNxFfG3ZM6Idya8zf H8CdrVwAdgUMYpnSZG82T4O9Pbiyx95AcUIqxZHVhn6CER6z1ZzTwFwBnsChjU4x FKLr26m2Leb1HYbnf6p3TWzUq6j+SzXpG/CV088o9Bx71wyJv3GgKxDlO57HyF/V gErN8An2cCpBdwkgbEwNw7faJAj2uvslb0T0Waa8N67suiTpYButVNbvqwjS7MoJ i7701wG9EHdr35rtUmdAzS+TNtd+5gA= -----END CERTIFICATE-----Generated at Wed May 13 08:55:20 2026 by rpki-client