$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa File: 8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa (raw, json) Hash identifier: HOBzMYgpQ3kN9R85iGAtQCKHGEaEhZH0TomjQl2u1Yc= Subject key identifier: 95:F4:1B:ED:BF:58:F8:2E:82:11:C6:26:12:C5:DB:E7:22:8D:70:5E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A8DA7C80609D514EC1380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.146.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:8d:a7:c8:06:09:d5:14:ec:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=e74466ed-e67c-42f2-9224-5bc17b1af36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:62:c7:01:82:6d:d7:82:43:23:19:5e:64: 81:25:71:a1:8f:8d:d3:44:5d:79:3f:dc:be:c0:b6: 6a:56:50:6e:09:d6:4d:4f:6a:0d:a8:3c:77:47:2d: bf:d7:41:99:5c:67:c4:21:84:f4:40:08:64:46:1c: 43:2b:d0:c2:c4:4a:88:e0:ba:e5:b7:ac:5f:65:f0: cc:9c:b6:f0:e5:8f:9d:9c:9e:23:3d:dc:8f:82:ca: 68:f3:41:40:c2:f2:46:1e:74:b1:cb:d3:2b:5f:4b: 64:f6:12:35:3c:16:ef:67:de:a3:c3:b4:76:95:f2: 3a:72:0b:22:91:61:0d:78:fd:87:fb:8c:87:49:23: 29:bf:d7:dc:7a:8a:63:e7:7c:c0:a1:43:57:94:70: 05:ea:87:c5:b8:89:f3:23:ad:06:08:6a:05:f3:9a: ca:6f:e3:92:95:cb:d6:db:aa:4c:45:90:e6:3d:46: 98:be:0f:dd:96:ee:a1:1f:da:5d:1b:fa:d4:ca:f7: bd:fd:db:26:a0:54:c4:db:46:d0:dc:3c:60:10:c7: da:b5:bf:1f:bd:87:93:45:4b:7e:2c:5d:65:87:4a: 2e:74:90:aa:2a:84:6a:9c:ca:ee:37:b4:36:aa:e9: 25:5d:e1:e6:34:ab:92:4b:5e:db:8a:64:2f:31:88: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F4:1B:ED:BF:58:F8:2E:82:11:C6:26:12:C5:DB:E7:22:8D:70:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:0e:80:a9:96:b1:97:93:9d:28:67:61:a3:9f:20:4f:f7:6b: 53:b1:56:1f:ab:cd:71:d0:3e:eb:21:b6:51:fa:80:c7:36:43: c4:ae:a1:bb:03:80:50:c4:f7:4b:0d:13:9d:50:ab:95:ed:fa: c6:5f:35:42:e8:61:cd:20:a6:f9:f1:bb:13:c1:6d:c0:9e:23: b5:42:49:87:fc:3a:d4:c3:03:56:3a:a9:b4:7a:56:b2:bd:e4: 3d:ea:3e:1a:54:31:47:5d:d3:02:a2:48:b6:38:03:6d:99:fb: 98:28:b6:4c:80:c8:ae:68:50:02:48:45:2a:4e:04:c8:47:b9: 94:2f:ca:ac:e5:84:94:96:9a:5e:67:36:51:36:65:13:75:e3: a6:fb:d2:35:76:8f:45:b9:83:2b:4b:bb:56:5a:90:89:fb:4f: 7e:84:e2:5f:62:3d:96:24:c8:f0:ce:f4:06:94:4e:56:27:2f: 63:09:f1:a2:67:0b:ed:9f:97:59:7e:81:06:dc:25:43:42:56: fd:2c:13:28:d6:c5:3c:cc:70:76:de:b1:5e:45:d7:36:16:3d: 1c:e1:35:c6:78:d6:e9:84:c1:67:c6:f8:77:fd:23:5b:cf:30: eb:d6:44:d4:4b:13:4d:17:07:a7:30:18:1d:f1:09:ce:2f:53: 39:64:a9:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWo2nyAYJ1RTsE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZTc0NDY2ZWQtZTY3Yy00MmYyLTkyMjQtNWJjMTdiMWFmMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJJixwGCbdeCQyMZXmSBJXGhj43TRF15P9y+ wLZqVlBuCdZNT2oNqDx3Ry2/10GZXGfEIYT0QAhkRhxDK9DCxEqI4Lrlt6xfZfDM nLbw5Y+dnJ4jPdyPgspo80FAwvJGHnSxy9MrX0tk9hI1PBbvZ96jw7R2lfI6cgsi kWENeP2H+4yHSSMpv9fceopj53zAoUNXlHAF6ofFuInzI60GCGoF85rKb+OSlcvW 26pMRZDmPUaYvg/dlu6hH9pdG/rUyve9/dsmoFTE20bQ3DxgEMfatb8fvYeTRUt+ LF1lh0oudJCqKoRqnMruN7Q2quklXeHmNKuSS17bimQvMYhvMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX0G+2/WPgughHGJhLF2+cijXBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGU5ZjdkOTctODgxNS0z Y2ViLTgxZWMtZTYxM2YyYTI3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcOgKmWsZeTnShnYaOfIE/3a1OxVh+rzXHQPushtlH6gMc2Q8SuobsD gFDE90sNE51Qq5Xt+sZfNULoYc0gpvnxuxPBbcCeI7VCSYf8OtTDA1Y6qbR6VrK9 5D3qPhpUMUdd0wKiSLY4A22Z+5gotkyAyK5oUAJIRSpOBMhHuZQvyqzlhJSWml5n NlE2ZRN146b70jV2j0W5gytLu1ZakIn7T36E4l9iPZYkyPDO9AaUTlYnL2MJ8aJn C+2fl1l+gQbcJUNCVv0sEyjWxTzMcHbesV5F1zYWPRzhNcZ41umEwWfG+Hf9I1vP MOvWRNRLE00XB6cwGB3xCc4vUzlkqYM= -----END CERTIFICATE-----Generated at Wed May 13 06:09:04 2026 by rpki-client