$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96137649-e977-39fe-9a12-bb593b670e9d.roa File: 96137649-e977-39fe-9a12-bb593b670e9d.roa (raw, json) Hash identifier: jhnxz0oSTdUhS4izlR5bT1fhkIoG7eCfqQ2H3sTts9A= Subject key identifier: 0D:7C:1C:31:32:14:8A:EE:DF:19:AF:D1:6F:6F:D1:D2:36:B5:A8:DA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A974571F01BB0A84C1460 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96137649-e977-39fe-9a12-bb593b670e9d.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.148.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:97:45:71:f0:1b:b0:a8:4c:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=20cc2dde-34b2-4eef-a30b-9594c21770c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:b9:b9:34:df:ca:13:5f:74:60:21:04:f7: 62:51:6e:fe:d9:52:93:d5:f6:82:15:07:ec:e8:9a: a1:e1:e2:53:30:5e:7e:df:ba:44:01:d6:f7:ba:ad: 32:ca:75:3a:65:60:35:59:5e:b0:85:42:0f:ec:88: 00:86:ed:dc:f5:ec:f8:ab:d1:00:79:6b:99:82:99: 8d:93:5f:d8:76:de:69:c5:05:5b:10:df:b2:8a:d6: 31:64:85:76:ee:4c:d4:8b:e5:e3:91:dc:6c:d3:25: bb:4e:16:9a:c9:30:24:3f:80:64:2c:3a:71:61:1a: 66:9f:d3:ae:ad:29:cd:67:29:42:68:19:f0:b5:21: a7:82:bb:d2:fa:34:85:20:bc:de:af:7c:69:7d:26: 7e:a4:c3:0c:85:0c:18:1c:05:8d:1a:54:01:48:9e: ff:33:31:33:f7:37:ba:4e:b6:a4:5a:97:50:2e:97: 2a:ef:65:dd:d0:83:9e:1d:c9:a2:16:a3:f4:51:d9: 9a:a2:1a:68:b3:fc:a4:bb:6f:65:58:25:6e:d8:0d: 80:b0:f6:19:18:4c:1f:15:0f:9d:b6:e3:45:c7:24: 64:c4:c5:4a:12:2e:77:69:bb:9c:be:88:ab:ea:54: a5:95:d0:78:e6:d8:de:88:b4:0d:17:fa:1d:bf:7b: 15:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7C:1C:31:32:14:8A:EE:DF:19:AF:D1:6F:6F:D1:D2:36:B5:A8:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96137649-e977-39fe-9a12-bb593b670e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f1:50:a0:ea:8c:a7:86:71:f1:38:f7:da:67:5f:39:44:c7: 9a:7d:47:8e:4c:17:78:46:d0:7c:4a:be:bb:6e:4e:d9:34:4e: 2c:64:b4:52:35:04:ae:6c:3e:4c:3c:c9:a0:bd:2b:7f:71:8c: a5:2b:c0:af:34:e7:ab:fa:18:90:60:91:a3:62:2f:49:1e:a1: 46:99:26:80:2b:c1:dc:47:9e:c5:84:d5:ee:ac:ec:7c:e0:06: 88:07:7e:9e:f5:07:39:d2:3e:37:e0:c3:6a:1b:58:6e:17:19: 82:7c:7a:b5:ec:34:a4:f0:93:3e:99:7a:bd:f6:0c:0b:4a:3a: a0:c2:f6:a5:6d:e1:8c:f9:58:ee:c7:39:9d:ef:a1:51:c8:0a: 6e:86:ba:52:b0:c2:87:8b:7b:35:f0:27:f6:b1:2c:64:d5:27: d0:4e:80:f2:e4:04:dc:77:d2:17:c6:31:0d:ad:69:29:c6:18: 92:58:ba:02:30:13:2c:44:12:17:23:e9:7e:9c:09:86:97:9b: 50:0e:e7:bb:49:20:e6:b0:f8:a4:14:48:9e:c4:0e:7e:2f:63: 77:a9:96:06:a2:75:74:0f:0b:78:f9:05:ce:7e:27:40:72:50: 22:9b:da:68:ca:1d:ae:34:8a:95:cd:5a:94:4b:e8:60:95:55: c4:1a:36:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpdFcfAbsKhMFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk MjBjYzJkZGUtMzRiMi00ZWVmLWEzMGItOTU5NGMyMTc3MGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVi5uTTfyhNfdGAhBPdiUW7+2VKT1faCFQfs 6Jqh4eJTMF5+37pEAdb3uq0yynU6ZWA1WV6whUIP7IgAhu3c9ez4q9EAeWuZgpmN k1/Ydt5pxQVbEN+yitYxZIV27kzUi+Xjkdxs0yW7ThaayTAkP4BkLDpxYRpmn9Ou rSnNZylCaBnwtSGngrvS+jSFILzer3xpfSZ+pMMMhQwYHAWNGlQBSJ7/MzEz9ze6 TrakWpdQLpcq72Xd0IOeHcmiFqP0Udmaohpos/yku29lWCVu2A2AsPYZGEwfFQ+d tuNFxyRkxMVKEi53abucvoir6lSlldB45tjeiLQNF/odv3sVBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA18HDEyFIru3xmv0W9v0dI2tajaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTYxMzc2NDktZTk3Ny0z OWZlLTlhMTItYmI1OTNiNjcwZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTxUKDqjKeGcfE499pnXzlEx5p9R45MF3hG0HxKvrtuTtk0TixktFI1 BK5sPkw8yaC9K39xjKUrwK8056v6GJBgkaNiL0keoUaZJoArwdxHnsWE1e6s7Hzg BogHfp71BznSPjfgw2obWG4XGYJ8erXsNKTwkz6Zer32DAtKOqDC9qVt4Yz5WO7H OZ3voVHICm6GulKwwoeLezXwJ/axLGTVJ9BOgPLkBNx30hfGMQ2taSnGGJJYugIw EyxEEhcj6X6cCYaXm1AO57tJIOaw+KQUSJ7EDn4vY3eplgaidXQPC3j5Bc5+J0By UCKb2mjKHa40ipXNWpRL6GCVVcQaNl8= -----END CERTIFICATE-----Generated at Wed May 13 05:00:52 2026 by rpki-client