$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6df81085-d209-3b75-a5fd-e0d4b7b7378e.roa File: 6df81085-d209-3b75-a5fd-e0d4b7b7378e.roa (raw, json) Hash identifier: 9Po1VgRbghR/l1Es/Y0D3P2JRdiyM8aG5M77ylHXERg= Subject key identifier: E1:2A:8A:1E:AA:E4:2C:DF:F4:0C:DE:90:09:CE:AC:AF:98:CD:21:B3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A957C76A2869AC2602800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6df81085-d209-3b75-a5fd-e0d4b7b7378e.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.146.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:95:7c:76:a2:86:9a:c2:60:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=f3dece6d-48a2-4c11-ae98-26b34a3ea3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:0c:4d:cf:05:4c:18:03:c2:e5:2b:8a:ca: c2:c2:4a:da:bb:db:a2:00:d6:d5:12:05:03:72:67: 13:38:98:43:36:8b:80:6d:22:38:06:c7:09:eb:e0: 5b:9a:33:4c:97:c0:00:93:5f:b6:52:6d:4f:fe:9b: 57:aa:0d:86:4f:aa:91:57:70:2e:2d:d4:28:b5:15: 32:52:b2:4a:f2:46:a5:56:4d:6f:1a:5a:f0:c3:3f: 66:7f:5d:72:dc:c3:e6:2f:55:24:4f:1c:0f:04:11: 1f:ba:e8:a5:21:ca:34:9b:ae:2d:1e:dc:40:d4:2f: b8:be:d6:9d:05:6f:4c:4e:72:e4:28:ac:4c:6c:32: 25:8e:f8:71:10:07:58:c3:ed:56:d3:9c:89:38:69: d3:88:4d:d1:c1:3b:c8:82:41:66:3a:09:be:5f:ab: 91:52:b5:49:f1:7a:2c:63:a9:93:27:87:d8:f8:9e: 40:f4:ef:48:8a:f6:67:74:27:f5:0b:76:f1:41:14: 9e:ff:1e:3e:5f:5f:62:6f:8e:38:2f:40:56:61:d3: 58:93:6d:52:b0:49:76:ea:a6:bd:44:01:9e:9a:97: 5f:fe:87:82:46:f8:10:ac:0e:dd:28:5a:bc:a0:e5: 30:c8:39:79:4b:38:46:2c:e3:c1:31:6d:9e:c9:fa: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2A:8A:1E:AA:E4:2C:DF:F4:0C:DE:90:09:CE:AC:AF:98:CD:21:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6df81085-d209-3b75-a5fd-e0d4b7b7378e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c3:07:7f:49:62:ee:de:a7:47:ec:90:5b:c3:d2:6d:a0:8f: f0:1d:a7:e5:31:08:c6:3b:6e:43:68:1c:71:c2:59:f0:7c:6d: 70:2b:2f:8d:14:06:c0:66:6c:1c:af:8b:71:80:6e:e3:a1:cc: 24:4d:de:a7:24:79:08:29:f5:f5:52:a3:44:48:a3:4e:d4:ab: a2:55:50:33:1d:e3:18:34:8c:13:d7:ec:87:14:99:33:62:72: bd:31:26:f5:f1:d8:3e:ec:1f:b5:13:7a:37:e8:aa:73:b5:99: cc:2b:22:67:a1:65:4c:ff:e6:61:ea:d2:5e:a6:32:f3:75:ca: 2f:be:34:81:26:cc:76:e9:a9:4f:1b:fc:f3:a3:f7:59:41:dd: 14:7a:34:c2:af:76:64:a0:e7:86:a5:9f:88:3a:15:77:29:fe: 3c:17:f4:53:4b:a4:35:dd:5a:49:c5:96:d6:8a:fb:8d:61:66: 09:de:05:7a:dc:d4:54:1d:91:d4:40:d8:00:19:54:34:ea:f4: e2:d5:61:90:c2:38:5c:a4:2c:11:53:f1:31:75:71:63:2a:77: d2:9d:62:06:8c:2a:03:f7:dc:65:dd:bb:77:8b:e6:b3:f7:bf: 4b:5e:b4:da:9f:da:37:ea:b4:0a:99:6f:31:8a:0f:8c:f5:d2: 18:03:c6:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpV8dqKGmsJgKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZjNkZWNlNmQtNDhhMi00YzExLWFlOTgtMjZiMzRhM2VhM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA0MTc8FTBgDwuUrisrCwkrau9uiANbVEgUD cmcTOJhDNouAbSI4BscJ6+BbmjNMl8AAk1+2Um1P/ptXqg2GT6qRV3AuLdQotRUy UrJK8kalVk1vGlrwwz9mf11y3MPmL1UkTxwPBBEfuuilIco0m64tHtxA1C+4vtad BW9MTnLkKKxMbDIljvhxEAdYw+1W05yJOGnTiE3RwTvIgkFmOgm+X6uRUrVJ8Xos Y6mTJ4fY+J5A9O9IivZndCf1C3bxQRSe/x4+X19ib444L0BWYdNYk21SsEl26qa9 RAGempdf/oeCRvgQrA7dKFq8oOUwyDl5SzhGLOPBMW2eyfrJuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEqih6q5Czf9AzekAnOrK+YzSGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmRmODEwODUtZDIwOS0z Yjc1LWE1ZmQtZTBkNGI3YjczNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7DB39JYu7ep0fskFvD0m2gj/Adp+UxCMY7bkNoHHHCWfB8bXArL40U BsBmbByvi3GAbuOhzCRN3qckeQgp9fVSo0RIo07Uq6JVUDMd4xg0jBPX7IcUmTNi cr0xJvXx2D7sH7UTejfoqnO1mcwrImehZUz/5mHq0l6mMvN1yi++NIEmzHbpqU8b /POj91lB3RR6NMKvdmSg54aln4g6FXcp/jwX9FNLpDXdWknFltaK+41hZgneBXrc 1FQdkdRA2AAZVDTq9OLVYZDCOFykLBFT8TF1cWMqd9KdYgaMKgP33GXdu3eL5rP3 v0tetNqf2jfqtAqZbzGKD4z10hgDxjo= -----END CERTIFICATE-----Generated at Wed May 13 05:06:38 2026 by rpki-client