$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ac1fe06-b036-34e5-b2dc-447340005f3b.roa File: 9ac1fe06-b036-34e5-b2dc-447340005f3b.roa (raw, json) Hash identifier: 8Wh4qEIyp6lHEK/jk/Cj18pJOCOk/iAcze9oVc/h1CI= Subject key identifier: F8:35:F6:1A:02:2D:27:B9:85:6C:11:A3:AF:05:F1:EB:0A:10:18:74 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E50114108A628EC732FBC00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ac1fe06-b036-34e5-b2dc-447340005f3b.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.145.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:11:41:08:a6:28:ec:73:2f:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=25e9d1fc-ff35-44bf-92ba-6de5bf684dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:50:2f:b6:cf:56:84:fb:db:23:20:1e:25:98: 6d:11:cf:99:d6:8e:de:da:70:12:07:16:5b:83:fd: c3:95:10:4a:a8:7d:b3:4e:80:fe:86:b7:24:72:37: 84:55:b1:73:19:24:8c:d7:24:5d:af:87:cc:ad:1a: 6e:bd:74:41:ee:cf:b2:19:68:32:8b:f9:4c:5e:7d: b1:6b:79:89:39:2a:92:eb:d0:11:a5:c6:64:2f:9b: 6d:e1:b3:f8:4d:7a:4f:3b:19:8d:9f:70:52:11:31: 32:85:13:06:55:4f:c8:9b:96:c2:17:67:f7:4b:8f: 77:e6:ab:fd:2f:2e:a1:34:d7:03:af:0e:91:36:ca: 52:54:8b:5d:44:52:55:7a:2b:bd:0a:ce:73:ec:3d: 44:6e:b9:63:5e:ce:64:09:e2:16:59:64:da:43:a0: f6:4d:17:44:01:ba:22:3c:f8:d4:da:a7:47:d3:1a: 00:23:a0:f4:cc:13:18:63:4f:6c:63:f6:1b:b7:24: 01:7f:3b:b6:9f:a3:e9:96:9b:27:76:88:47:72:02: 13:1c:95:b3:b5:85:9a:9c:2b:73:bf:41:dd:74:c0: 20:7a:ce:65:01:8f:4e:a8:b3:a7:5d:70:c5:3f:49: 8e:b1:67:90:02:94:93:3d:2c:91:ec:fc:d2:54:ae: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:35:F6:1A:02:2D:27:B9:85:6C:11:A3:AF:05:F1:EB:0A:10:18:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ac1fe06-b036-34e5-b2dc-447340005f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:98:76:d0:15:de:b2:6c:7a:8c:e1:8a:e4:60:08:db:c4:02: 7e:cb:ac:12:e2:0d:de:7b:96:04:00:16:f3:60:bd:75:c8:15: eb:7d:3c:99:e4:04:20:ea:d0:ea:b7:c5:dd:72:cb:0d:d5:ca: 8c:64:f6:10:24:e1:a6:c4:3f:cb:a1:da:50:61:fa:99:cb:b5: ad:bb:4e:9b:22:aa:24:8e:bb:8b:2e:2d:21:45:58:c6:81:d0: 5e:6f:87:29:80:d6:89:b2:ba:7b:af:f5:7c:f6:54:e6:40:f0: 80:34:22:c1:13:85:ba:81:5a:3b:00:0f:b7:32:3c:47:97:9f: af:bd:1c:34:2b:3b:14:89:b5:6b:a3:b4:4b:f9:7d:24:4e:c1: ec:43:47:5a:f9:97:a1:24:67:ea:f5:a5:28:ec:60:f9:41:32: 20:60:06:b8:9b:be:c3:6b:4d:cd:ed:7d:d7:e2:4b:5b:7b:92: bf:4a:be:9b:f1:ae:22:ab:6c:11:37:00:d7:ca:bb:88:86:4d: 3a:c2:67:10:7d:ab:8b:10:b7:4c:2e:55:14:05:2d:44:7d:cb: 05:61:1b:01:87:10:c3:69:60:b8:fa:e0:e0:c3:aa:de:ee:5b: 58:e4:42:33:25:8b:44:84:52:53:80:93:2e:45:75:af:ae:ee: 30:2a:f2:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBFBCKYo7HMvvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MjVlOWQxZmMtZmYzNS00NGJmLTkyYmEtNmRlNWJmNjg0ZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1Avts9WhPvbIyAeJZhtEc+Z1o7e2nASBxZb g/3DlRBKqH2zToD+hrckcjeEVbFzGSSM1yRdr4fMrRpuvXRB7s+yGWgyi/lMXn2x a3mJOSqS69ARpcZkL5tt4bP4TXpPOxmNn3BSETEyhRMGVU/Im5bCF2f3S4935qv9 Ly6hNNcDrw6RNspSVItdRFJVeiu9Cs5z7D1EbrljXs5kCeIWWWTaQ6D2TRdEAboi PPjU2qdH0xoAI6D0zBMYY09sY/YbtyQBfzu2n6PplpsndohHcgITHJWztYWanCtz v0HddMAges5lAY9OqLOnXXDFP0mOsWeQApSTPSyR7PzSVK7xAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg19hoCLSe5hWwRo68F8esKEBh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWFjMWZlMDYtYjAzNi0z NGU1LWIyZGMtNDQ3MzQwMDA1ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6YdtAV3rJseozhiuRgCNvEAn7LrBLiDd57lgQAFvNgvXXIFet9PJnk BCDq0Oq3xd1yyw3Vyoxk9hAk4abEP8uh2lBh+pnLta27TpsiqiSOu4suLSFFWMaB 0F5vhymA1omyunuv9Xz2VOZA8IA0IsEThbqBWjsAD7cyPEeXn6+9HDQrOxSJtWuj tEv5fSROwexDR1r5l6EkZ+r1pSjsYPlBMiBgBribvsNrTc3tfdfiS1t7kr9Kvpvx riKrbBE3ANfKu4iGTTrCZxB9q4sQt0wuVRQFLUR9ywVhGwGHEMNpYLj64ODDqt7u W1jkQjMli0SEUlOAky5Fda+u7jAq8ic= -----END CERTIFICATE-----Generated at Wed May 13 08:00:53 2026 by rpki-client