$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa File: aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa (raw, json) Hash identifier: 1hA1/z0nVQX9gEvybCORCdUdX1mINMU/D6mFTlB34CU= Subject key identifier: 11:A2:81:E0:23:2E:8B:13:22:CA:1E:9B:1F:21:4D:B9:B1:BA:E9:C5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF56FF05CCB7423BB6D8280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 129.148.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:6f:f0:5c:cb:74:23:bb:6d:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d305dafd-8c9f-471d-baf8-01f1e100c740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:a8:5b:6e:39:8c:07:0e:bc:43:c2:1b:07: fe:6a:8e:19:f7:37:2d:8f:f4:e8:46:ba:58:44:b6: c7:63:c1:a2:01:19:af:a8:05:54:4f:43:e6:ba:2c: 09:f4:69:7d:5f:0e:51:23:6c:f8:ce:ae:36:6b:09: 94:b8:ae:ab:07:bb:39:d9:4b:10:ae:97:ab:8a:75: cc:03:ba:77:30:b3:85:4a:5b:dc:f4:80:84:59:4b: 3b:e7:1e:32:e9:a0:dd:7b:90:c5:1f:7a:2b:56:6a: f3:dd:6c:f6:57:33:ef:d6:7c:8e:db:e9:58:95:10: 5a:12:12:de:ce:84:bc:40:66:db:67:d4:68:48:b0: b0:65:bf:e1:fe:f3:63:4e:79:cf:1f:a6:9a:dd:82: f9:c3:22:21:94:ba:56:87:bb:c2:28:9e:f8:04:85: 5f:17:46:c0:4c:c8:59:1b:f1:ed:fc:f8:52:e0:a1: fe:4f:8c:8a:38:01:33:6a:b6:93:5a:ba:b8:87:01: 3b:18:ca:b5:1a:05:c2:34:f4:3d:7f:b3:98:58:92: be:c0:4a:a8:6b:c6:f7:a7:46:d5:5e:55:3c:95:f0: 10:d7:95:e9:36:39:28:bc:58:c8:09:b1:36:40:21: 3f:35:3a:b1:1d:fc:c3:e0:9d:c8:09:86:48:4b:97: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A2:81:E0:23:2E:8B:13:22:CA:1E:9B:1F:21:4D:B9:B1:BA:E9:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d3:18:f7:0f:65:bb:56:0e:ee:d1:82:17:c7:59:73:47:be: a7:5e:8d:e9:ca:ce:3e:7e:6e:55:3b:4b:8a:ee:91:89:cd:b1: 47:16:43:ea:18:2f:72:b8:c7:ec:d2:48:29:ee:55:c7:be:52: 06:80:d9:23:ef:6b:8c:5e:26:75:32:7a:fe:20:23:7c:8c:25: 68:1d:5f:62:13:0b:aa:18:63:5d:19:f9:5e:94:87:30:dc:06: b0:3a:b0:bc:e2:66:c6:fa:58:ed:8f:ce:6d:11:24:1f:d7:1c: 26:db:ff:f1:76:88:42:5e:79:7c:cd:d6:e0:5d:c2:a1:af:be: a9:d7:9e:84:2a:2e:30:2a:d9:1e:a6:18:d2:3f:a8:bc:ee:1a: b0:e7:2a:35:73:06:34:37:89:48:97:a2:e7:85:d3:29:fc:73: 03:62:80:fa:5c:f6:8e:0d:a8:16:fd:ce:cc:85:ec:77:ad:e2: 86:83:29:5d:a1:1d:5e:2a:61:e6:de:a6:6e:52:16:84:3a:57: 54:fc:f7:dd:33:7b:ad:04:cd:47:27:f2:ac:76:6b:49:1d:bd: cf:71:6a:75:ae:15:91:11:af:ce:47:aa:e9:55:eb:ea:ee:54: 9e:09:89:e4:cc:34:e2:44:58:dc:ec:91:55:56:ca:3c:d5:c2: f1:c9:fe:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9W/wXMt0I7ttgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDMwNWRhZmQtOGM5Zi00NzFkLWJhZjgtMDFmMWUxMDBjNzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuamoW245jAcOvEPCGwf+ao4Z9zctj/ToRrpY RLbHY8GiARmvqAVUT0PmuiwJ9Gl9Xw5RI2z4zq42awmUuK6rB7s52UsQrperinXM A7p3MLOFSlvc9ICEWUs75x4y6aDde5DFH3orVmrz3Wz2VzPv1nyO2+lYlRBaEhLe zoS8QGbbZ9RoSLCwZb/h/vNjTnnPH6aa3YL5wyIhlLpWh7vCKJ74BIVfF0bATMhZ G/Ht/PhS4KH+T4yKOAEzaraTWrq4hwE7GMq1GgXCNPQ9f7OYWJK+wEqoa8b3p0bV XlU8lfAQ15XpNjkovFjICbE2QCE/NTqxHfzD4J3ICYZIS5chtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGigeAjLosTIsoemx8hTbmxuunFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWE5YThiNmMtYjZlZC0z N2VkLWE0OTItNjlmNmNjMGQxN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInTGPcPZbtWDu7RghfHWXNHvqdejenKzj5+blU7S4rukYnNsUcWQ+oY L3K4x+zSSCnuVce+UgaA2SPva4xeJnUyev4gI3yMJWgdX2ITC6oYY10Z+V6UhzDc BrA6sLziZsb6WO2Pzm0RJB/XHCbb//F2iEJeeXzN1uBdwqGvvqnXnoQqLjAq2R6m GNI/qLzuGrDnKjVzBjQ3iUiXoueF0yn8cwNigPpc9o4NqBb9zsyF7Het4oaDKV2h HV4qYebepm5SFoQ6V1T8990ze60EzUcn8qx2a0kdvc9xanWuFZERr85HqulV6+ru VJ4JieTMNOJEWNzskVVWyjzVwvHJ/sg= -----END CERTIFICATE-----Generated at Wed May 13 06:14:52 2026 by rpki-client