$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a644b8f-56f7-315d-98d4-f0efaae82a84.roa File: 8a644b8f-56f7-315d-98d4-f0efaae82a84.roa (raw, json) Hash identifier: sa0e3qRPCBGYFaQzX9cioEbWbs5+t7Y6EJDulMmYbZk= Subject key identifier: 73:BF:C2:92:73:E5:9B:2C:C9:79:1E:E5:A2:77:C4:28:73:E1:26:96 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E502751ACC647CB4CA5357A Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a644b8f-56f7-315d-98d4-f0efaae82a84.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.145.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:27:51:ac:c6:47:cb:4c:a5:35:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=849a7938-cd11-4053-ab85-a559cf4adeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b4:04:43:7b:85:ce:2d:87:94:d9:7c:3c:0e: 35:4c:d0:ea:b3:4f:8d:e1:d0:49:b2:f5:5c:f8:3f: d2:2c:19:d3:73:a5:21:e6:c1:81:4e:1c:58:0b:4c: 9e:30:66:96:fa:3a:4e:7d:5f:4f:12:ed:8e:30:3d: 0b:c7:ae:04:36:9f:ad:62:fd:28:75:c2:fa:c5:6f: 66:95:19:9b:19:67:18:40:36:44:d0:2b:6c:0b:b0: 7c:97:d8:6b:c6:cc:81:af:19:eb:53:1c:d2:30:1a: 86:f5:7f:8b:bf:0e:3d:52:cd:31:1a:08:3f:00:f6: 31:1c:bb:9f:3b:4c:e2:66:e1:e0:fc:aa:e2:47:3a: 29:33:7e:af:8e:ae:65:29:83:19:d2:3d:73:d1:2f: ab:ca:7e:83:27:79:59:c4:93:8c:a2:96:8b:04:97: 68:d8:79:47:9c:75:6d:9e:ab:1d:ab:54:87:09:0f: 6f:25:17:bc:95:3f:db:f8:f4:eb:60:23:a6:85:f1: bf:a8:30:4b:5f:d9:88:24:1a:a1:96:aa:e2:f7:f3: 30:66:7c:4a:b2:22:f8:b8:bb:95:fc:87:c2:8f:fb: 34:89:f5:18:ee:32:08:b9:65:3a:10:a2:e4:e2:d5: ba:06:42:a2:3d:e0:47:65:01:3d:6c:87:c2:50:27: 60:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BF:C2:92:73:E5:9B:2C:C9:79:1E:E5:A2:77:C4:28:73:E1:26:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a644b8f-56f7-315d-98d4-f0efaae82a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:09:11:98:9e:bd:c4:08:ce:74:3b:f1:63:15:b4:cd:d8:ee: 31:94:1b:2e:f4:af:d0:27:f3:33:eb:f7:28:bb:1b:51:05:c5: 1a:73:d7:04:29:8d:3f:c8:9f:c1:ea:d1:19:21:f8:56:b5:62: e4:93:ae:f0:f8:48:38:c7:0e:0c:e8:39:52:f3:05:53:26:81: 3a:97:56:c8:22:ed:00:61:19:73:de:bc:bb:ac:ef:a4:8f:e1: 63:f2:8c:aa:64:ea:c1:e2:58:6d:49:d7:e2:9c:8f:4a:1c:90: 49:4f:19:fe:bb:a8:06:23:20:8f:a4:db:3c:46:66:81:6d:69: 47:fb:41:79:f2:17:d9:60:93:71:e9:ee:f9:d0:77:f6:22:a7: b7:d3:44:7c:c9:36:51:b9:48:26:67:43:ba:03:95:d2:d1:46: 34:8a:81:6b:ff:61:35:16:69:80:41:59:6c:c5:f0:c2:c8:04: 14:42:59:fc:18:59:0c:1b:77:d3:d6:78:8d:a8:08:11:05:9b: ed:1f:aa:c0:64:5b:c4:9f:9b:b0:d7:93:26:53:cb:f6:b5:d6: f9:50:62:b5:1b:a4:c0:ac:de:34:56:23:f1:d7:cb:d0:7f:2f: ef:bd:fa:4f:82:b0:5d:d0:18:3d:27:6b:d4:fb:82:13:4e:42: 88:a5:00:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCdRrMZHy0ylNXowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ODQ5YTc5MzgtY2QxMS00MDUzLWFiODUtYTU1OWNmNGFkZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7QEQ3uFzi2HlNl8PA41TNDqs0+N4dBJsvVc +D/SLBnTc6Uh5sGBThxYC0yeMGaW+jpOfV9PEu2OMD0Lx64ENp+tYv0odcL6xW9m lRmbGWcYQDZE0CtsC7B8l9hrxsyBrxnrUxzSMBqG9X+Lvw49Us0xGgg/APYxHLuf O0ziZuHg/KriRzopM36vjq5lKYMZ0j1z0S+ryn6DJ3lZxJOMopaLBJdo2HlHnHVt nqsdq1SHCQ9vJRe8lT/b+PTrYCOmhfG/qDBLX9mIJBqhlqri9/MwZnxKsiL4uLuV /IfCj/s0ifUY7jIIuWU6EKLk4tW6BkKiPeBHZQE9bIfCUCdgAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO/wpJz5ZssyXke5aJ3xChz4SaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGE2NDRiOGYtNTZmNy0z MTVkLTk4ZDQtZjBlZmFhZTgyYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZEyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYJEZievcQIznQ78WMVtM3Y7jGUGy70r9An8zPr9yi7G1EFxRpz1wQp jT/In8Hq0Rkh+Fa1YuSTrvD4SDjHDgzoOVLzBVMmgTqXVsgi7QBhGXPevLus76SP 4WPyjKpk6sHiWG1J1+Kcj0ockElPGf67qAYjII+k2zxGZoFtaUf7QXnyF9lgk3Hp 7vnQd/Yip7fTRHzJNlG5SCZnQ7oDldLRRjSKgWv/YTUWaYBBWWzF8MLIBBRCWfwY WQwbd9PWeI2oCBEFm+0fqsBkW8Sfm7DXkyZTy/a11vlQYrUbpMCs3jRWI/HXy9B/ L++9+k+CsF3QGD0na9T7ghNOQoilAEA= -----END CERTIFICATE-----Generated at Wed May 13 10:38:38 2026 by rpki-client