$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a837f42b-2900-3556-8cc7-7eb2920531ab.roa File: a837f42b-2900-3556-8cc7-7eb2920531ab.roa (raw, json) Hash identifier: hKY8nypfPh+exJSSIqYTRWggcdXddRfBxnvy7g6kt5k= Subject key identifier: A3:11:EF:42:23:81:E2:88:C0:0D:29:0A:4E:63:31:D9:79:AF:DE:07 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC55204EFE1B672ADCA5880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a837f42b-2900-3556-8cc7-7eb2920531ab.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.149.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:52:04:ef:e1:b6:72:ad:ca:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=3ed8a3a5-1ae0-4998-899a-9226afcf9b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a2:eb:51:50:50:53:89:3a:4f:48:85:9e:6f: 0a:95:6e:07:e8:d6:12:3e:56:e2:30:5a:b0:f9:0e: a0:50:fa:94:38:23:5f:24:1e:96:52:5a:33:68:45: 5c:f2:a5:63:87:58:58:8d:3f:91:b2:20:91:77:1a: 87:40:bf:2b:d3:d0:88:b4:6d:51:d7:6a:5b:f0:f9: 48:a0:be:3e:05:fa:6e:ef:4d:20:8f:1c:cd:9f:40: 8d:86:f4:43:d7:80:22:6d:8c:cb:2c:36:d9:bb:27: 61:c9:19:6a:9c:87:b5:66:32:56:6b:74:bc:58:b9: df:89:a5:fa:c2:64:2f:e4:67:46:a9:ff:db:89:51: c2:27:31:98:9c:c9:07:02:22:1a:2b:db:07:04:09: ad:35:89:ec:ed:be:cc:24:54:d9:b5:b2:a9:ec:67: c9:60:67:a9:b3:30:f0:63:6b:0f:2c:ef:1d:28:65: 1b:3f:d1:64:7a:f5:df:de:85:32:b3:d4:5e:62:03: fd:cf:c7:b1:02:ea:ad:81:ee:4b:80:2a:71:37:9b: 32:9f:db:f9:0c:63:74:97:ba:d3:bc:c4:eb:02:b8: 76:bf:5f:ed:cc:ba:6a:9c:f1:14:2a:7d:98:d0:3a: 4f:52:0e:b6:29:b2:cf:1d:5b:5c:a1:fc:dd:86:f8: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:11:EF:42:23:81:E2:88:C0:0D:29:0A:4E:63:31:D9:79:AF:DE:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a837f42b-2900-3556-8cc7-7eb2920531ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:27:a8:ef:4b:82:39:93:5d:c8:0a:ea:dc:6b:2c:91:b8:2e: ce:09:42:cb:64:6c:73:e4:87:b7:35:d7:aa:d0:98:9d:8e:35: d0:08:5f:10:93:70:8c:c2:be:e1:07:18:54:d1:04:7f:62:5c: e6:6f:cd:38:25:50:cb:97:dc:27:16:83:bf:a8:64:2c:b1:65: 28:e7:4b:1d:ff:6a:14:db:dc:0a:15:e6:10:29:10:c4:9a:f2: b1:23:b7:bc:2b:d2:24:41:cf:a0:d5:e4:02:fb:ff:f9:e1:41: 6d:f5:36:18:d3:83:f8:c3:0c:f8:63:f7:99:55:67:ae:70:ea: db:22:5c:35:59:8e:c8:0b:11:07:d5:41:c4:d5:07:68:80:c0: 0a:92:b2:d5:e8:71:8a:5b:35:1e:c2:d9:4b:2e:8a:cc:c3:f3: 32:3a:8e:01:ec:11:0c:37:aa:4e:e6:83:a1:0d:9e:a5:b9:e6: 49:aa:f5:13:56:73:7b:05:f3:29:5d:d4:c9:0b:11:74:a7:ce: 4e:aa:31:7b:2c:d3:3b:f7:c0:ea:d3:7e:63:ef:54:16:46:55: 1a:72:a3:7e:53:bc:36:5f:b2:fd:aa:bf:b6:55:fe:71:b3:a3: 49:1f:a3:df:5e:91:20:6c:c9:aa:b1:a9:c4:bc:c1:37:81:1e: 35:2b:be:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVIE7+G2cq3KWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk M2VkOGEzYTUtMWFlMC00OTk4LTg5OWEtOTIyNmFmY2Y5Yjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6LrUVBQU4k6T0iFnm8KlW4H6NYSPlbiMFqw +Q6gUPqUOCNfJB6WUlozaEVc8qVjh1hYjT+RsiCRdxqHQL8r09CItG1R12pb8PlI oL4+Bfpu700gjxzNn0CNhvRD14AibYzLLDbZuydhyRlqnIe1ZjJWa3S8WLnfiaX6 wmQv5GdGqf/biVHCJzGYnMkHAiIaK9sHBAmtNYns7b7MJFTZtbKp7GfJYGepszDw Y2sPLO8dKGUbP9FkevXf3oUys9ReYgP9z8exAuqtge5LgCpxN5syn9v5DGN0l7rT vMTrArh2v1/tzLpqnPEUKn2Y0DpPUg62KbLPHVtcofzdhvgvyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMR70IjgeKIwA0pCk5jMdl5r94HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTgzN2Y0MmItMjkwMC0z NTU2LThjYzctN2ViMjkyMDUzMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0nqO9LgjmTXcgK6txrLJG4Ls4JQstkbHPkh7c116rQmJ2ONdAIXxCT cIzCvuEHGFTRBH9iXOZvzTglUMuX3CcWg7+oZCyxZSjnSx3/ahTb3AoV5hApEMSa 8rEjt7wr0iRBz6DV5AL7//nhQW31NhjTg/jDDPhj95lVZ65w6tsiXDVZjsgLEQfV QcTVB2iAwAqSstXocYpbNR7C2UsuiszD8zI6jgHsEQw3qk7mg6ENnqW55kmq9RNW c3sF8yld1MkLEXSnzk6qMXss0zv3wOrTfmPvVBZGVRpyo35TvDZfsv2qv7ZV/nGz o0kfo99ekSBsyaqxqcS8wTeBHjUrvlY= -----END CERTIFICATE-----Generated at Wed May 13 10:40:46 2026 by rpki-client