$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99434c7d-ca46-395a-b851-bd85057d30c4.roa File: 99434c7d-ca46-395a-b851-bd85057d30c4.roa (raw, json) Hash identifier: gdEm5k9UxTKfTDLqIz0nHL3CJi7QpRPRfDlg1bM/JeA= Subject key identifier: 77:13:C3:0C:6F:AA:ED:00:B4:43:81:14:7D:76:E5:DC:23:AA:BD:B2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E502B183F4DFF58ACE29010 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99434c7d-ca46-395a-b851-bd85057d30c4.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.157.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2b:18:3f:4d:ff:58:ac:e2:90:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=06aafb8f-9d57-4ec2-a234-a76e6603e2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:ba:87:e7:f5:ed:32:a8:74:a4:82:2f:ed: 2d:30:00:0e:91:a9:21:3e:55:01:41:45:79:69:4e: de:7a:d9:7a:c5:58:79:64:b1:d0:33:7c:fc:eb:f8: ea:39:16:ef:db:a8:ce:5d:1f:fb:12:df:cb:a3:b4: 24:f5:1a:25:3e:71:a0:4a:ae:c8:94:8c:30:b7:48: 04:94:22:ca:96:92:50:2d:ef:a6:86:ba:82:fc:62: 72:fc:79:a3:a4:22:b4:d2:03:01:ae:5e:1e:de:d7: 3e:9b:26:77:dc:b0:3d:e5:9c:18:db:29:80:07:f3: 92:4f:24:23:39:b3:06:1a:4f:59:21:5b:9a:c6:47: 7c:1e:62:42:5e:a3:d9:ee:c7:6e:fe:f7:6c:c8:5c: a6:f9:45:b3:43:c5:e7:79:15:5f:6f:1a:60:9b:fd: 43:c8:45:4c:e0:1a:cd:33:23:d0:99:e9:73:3a:e9: f5:0a:ae:69:22:9d:7c:b5:63:16:85:3c:5c:58:f1: 0c:39:c0:ff:85:6e:75:4e:ac:0c:05:a8:5a:17:7e: 43:e3:71:11:35:77:81:0e:b0:5b:cf:3a:91:92:bf: bb:1a:2a:ca:86:a9:c8:33:d8:60:ef:4c:ef:e8:d4: e6:81:5b:28:aa:6c:97:d7:a2:d5:d8:6b:b1:4c:ba: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:13:C3:0C:6F:AA:ED:00:B4:43:81:14:7D:76:E5:DC:23:AA:BD:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99434c7d-ca46-395a-b851-bd85057d30c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.157.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:fd:98:89:87:be:73:31:76:ad:32:0d:15:4f:22:80:75:79: 46:cf:30:e3:ce:c2:a4:23:1d:b3:25:87:db:fa:32:41:52:34: 56:97:c8:07:aa:5f:3e:57:99:d1:77:42:90:c5:b4:42:0a:eb: 3e:16:73:d8:a7:c8:1e:ae:e6:7b:44:80:0c:1c:0f:5a:af:13: da:c9:e8:f8:13:1d:1e:38:03:9e:86:3b:f2:c6:b1:ed:dc:67: cc:0d:32:3b:b8:6b:ad:84:82:4f:91:e8:cd:3c:0f:54:98:4e: 70:08:78:d5:d3:16:f5:5b:0e:eb:e8:3a:ae:3e:28:65:09:8b: 5e:79:60:a0:70:0d:52:d1:fa:99:f0:85:a7:e4:77:b4:f5:97: 7b:88:2a:b2:0c:1f:64:5d:40:51:7f:56:fc:9b:61:9b:33:76: fe:9f:c4:aa:90:fc:23:87:64:0b:12:9b:61:7f:1e:ca:56:71: 7f:2c:16:c5:96:b5:4e:f6:12:bb:3d:34:cb:50:91:9e:5d:4c: a6:e7:22:74:74:9e:85:d5:40:bf:60:ed:17:a6:fe:a0:2d:44: f2:5a:ff:b9:d9:83:d7:a9:a5:14:5e:1c:76:b0:9a:08:96:7e: ae:70:df:78:2f:3c:c9:f2:9d:a0:35:30:32:68:79:ca:86:cb: ad:ff:6b:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCsYP03/WKzikBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MDZhYWZiOGYtOWQ1Ny00ZWMyLWEyMzQtYTc2ZTY2MDNlMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDa6h+f17TKodKSCL+0tMAAOkakhPlUBQUV5 aU7eetl6xVh5ZLHQM3z86/jqORbv26jOXR/7Et/Lo7Qk9RolPnGgSq7IlIwwt0gE lCLKlpJQLe+mhrqC/GJy/HmjpCK00gMBrl4e3tc+myZ33LA95ZwY2ymAB/OSTyQj ObMGGk9ZIVuaxkd8HmJCXqPZ7sdu/vdsyFym+UWzQ8XneRVfbxpgm/1DyEVM4BrN MyPQmelzOun1Cq5pIp18tWMWhTxcWPEMOcD/hW51TqwMBahaF35D43ERNXeBDrBb zzqRkr+7GirKhqnIM9hg70zv6NTmgVsoqmyX16LV2GuxTLrYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcTwwxvqu0AtEOBFH125dwjqr2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTk0MzRjN2QtY2E0Ni0z OTVhLWI4NTEtYmQ4NTA1N2QzMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZ16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz9mImHvnMxdq0yDRVPIoB1eUbPMOPOwqQjHbMlh9v6MkFSNFaXyAeq Xz5XmdF3QpDFtEIK6z4Wc9inyB6u5ntEgAwcD1qvE9rJ6PgTHR44A56GO/LGse3c Z8wNMju4a62Egk+R6M08D1SYTnAIeNXTFvVbDuvoOq4+KGUJi155YKBwDVLR+pnw hafkd7T1l3uIKrIMH2RdQFF/VvybYZszdv6fxKqQ/COHZAsSm2F/HspWcX8sFsWW tU72Ers9NMtQkZ5dTKbnInR0noXVQL9g7Rem/qAtRPJa/7nZg9eppRReHHawmgiW fq5w33gvPMnynaA1MDJoecqGy63/a1A= -----END CERTIFICATE-----Generated at Wed May 13 10:51:16 2026 by rpki-client