$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a53821b-97b1-34a5-aa79-61b2b2c6088d.roa File: 8a53821b-97b1-34a5-aa79-61b2b2c6088d.roa (raw, json) Hash identifier: D5x2J7IOtdPr9gx56FsgNvnN+9fjxin/GNi7ZPGcFwA= Subject key identifier: 42:C4:54:D7:AF:05:13:E4:C5:7B:19:97:83:06:C6:8F:08:A2:70:25 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D98BA9BC366571A522D43A780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a53821b-97b1-34a5-aa79-61b2b2c6088d.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.145.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:9b:c3:66:57:1a:52:2d:43:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=f124cc94-ee19-417f-bb91-3bb074b8328d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:12:a7:0b:3b:f9:31:a5:55:b2:ca:7b:42:eb: f5:36:0a:40:59:b2:6a:e6:a5:a1:fc:85:4d:59:0b: 1d:a1:29:8c:08:f1:83:26:04:da:9e:ff:2e:d4:90: b8:2a:a8:14:11:32:1f:79:16:89:82:49:2b:88:9c: 65:b0:59:10:51:c7:1e:88:d0:6f:f6:a6:d6:ab:bd: 63:77:a5:e1:46:f8:c8:72:cc:00:a0:8f:ce:b3:99: 7a:ea:33:ea:b4:77:7f:69:d1:30:b4:95:46:2a:76: 62:b3:5e:7e:6f:f4:14:d0:c7:bc:38:11:7e:75:5b: 65:78:11:f6:a1:2d:59:29:85:9c:b7:39:b3:fd:b6: 04:ad:85:02:ad:ea:16:01:00:8c:7d:bd:2a:80:3b: 50:d0:63:af:d4:e9:0a:67:44:b0:35:95:f9:eb:16: 23:d1:be:43:fc:64:75:b2:d2:0a:42:d1:1f:09:44: 1e:0e:e8:e6:28:c1:36:e3:8f:0e:06:d3:98:04:24: aa:c2:c5:a7:f3:b2:1c:b6:45:bf:6b:5c:22:f6:4f: 11:3e:bd:23:4a:b1:ec:72:4f:50:eb:06:f0:d8:b5: 95:bd:9b:49:db:c5:78:29:18:35:c0:86:70:93:02: fc:e6:5d:9f:18:99:88:b9:e3:b7:68:a7:9e:3f:95: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C4:54:D7:AF:05:13:E4:C5:7B:19:97:83:06:C6:8F:08:A2:70:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a53821b-97b1-34a5-aa79-61b2b2c6088d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5a:43:ee:36:39:be:31:2d:8c:1b:22:86:dd:9e:13:f9:40: dd:a8:f5:2d:3f:9b:21:dc:fa:5d:f7:cb:2c:b6:96:3c:5e:3e: 05:a3:62:46:0a:27:18:48:ec:4c:86:fc:2f:54:78:ff:82:fb: 5a:cf:d4:7e:58:a9:65:ce:d3:92:d4:eb:bf:ae:10:61:69:76: f3:78:7d:b3:be:14:b2:b5:9a:06:5c:9c:83:1a:62:4f:cc:3f: 98:eb:97:20:c8:63:c0:28:d2:45:dc:7b:62:04:3b:4c:08:e9: 69:48:b7:59:ae:cd:14:6a:d9:50:41:ea:ae:74:34:1b:c8:24: c1:04:06:6b:56:93:81:f4:b7:4c:0b:8c:b1:3f:7c:5a:36:11: d1:62:3c:bf:76:ea:4d:23:04:cb:80:fb:ac:16:52:e8:06:7f: ac:c8:bb:a0:5a:c1:04:87:4b:95:5a:6b:61:23:1c:f6:b3:f7: 9b:9e:4a:d2:d1:c5:ce:b4:9c:55:57:27:37:ce:fb:96:bf:1c: d4:fc:2c:f0:d3:3b:fb:ce:b8:3b:36:44:46:98:3b:e8:33:66: b6:d3:c0:fe:4a:58:73:20:6c:09:7a:29:83:76:8a:cc:4c:2a: 86:d8:46:c5:60:da:4e:eb:6a:58:09:b5:20:33:e0:7e:a2:68: ae:ff:89:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YupvDZlcaUi1Dp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk ZjEyNGNjOTQtZWUxOS00MTdmLWJiOTEtM2JiMDc0YjgzMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxKnCzv5MaVVssp7Quv1NgpAWbJq5qWh/IVN WQsdoSmMCPGDJgTanv8u1JC4KqgUETIfeRaJgkkriJxlsFkQUcceiNBv9qbWq71j d6XhRvjIcswAoI/Os5l66jPqtHd/adEwtJVGKnZis15+b/QU0Me8OBF+dVtleBH2 oS1ZKYWctzmz/bYErYUCreoWAQCMfb0qgDtQ0GOv1OkKZ0SwNZX56xYj0b5D/GR1 stIKQtEfCUQeDujmKME2448OBtOYBCSqwsWn87IctkW/a1wi9k8RPr0jSrHsck9Q 6wbw2LWVvZtJ28V4KRg1wIZwkwL85l2fGJmIueO3aKeeP5WzZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELEVNevBRPkxXsZl4MGxo8IonAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGE1MzgyMWItOTdiMS0z NGE1LWFhNzktNjFiMmIyYzYwODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClaQ+42Ob4xLYwbIobdnhP5QN2o9S0/myHc+l33yyy2ljxePgWjYkYK JxhI7EyG/C9UeP+C+1rP1H5YqWXO05LU67+uEGFpdvN4fbO+FLK1mgZcnIMaYk/M P5jrlyDIY8Ao0kXce2IEO0wI6WlIt1muzRRq2VBB6q50NBvIJMEEBmtWk4H0t0wL jLE/fFo2EdFiPL926k0jBMuA+6wWUugGf6zIu6BawQSHS5Vaa2EjHPaz95ueStLR xc60nFVXJzfO+5a/HNT8LPDTO/vOuDs2REaYO+gzZrbTwP5KWHMgbAl6KYN2isxM KobYRsVg2k7ralgJtSAz4H6iaK7/iZ4= -----END CERTIFICATE-----Generated at Wed May 13 06:28:48 2026 by rpki-client