$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abda09be-fab4-32da-9fec-a75f89cd4903.roa File: abda09be-fab4-32da-9fec-a75f89cd4903.roa (raw, json) Hash identifier: lm5lkdio8/aH4uq7sCKPvaLJvN1z+ebpRwAweeAqb9g= Subject key identifier: 64:B1:2E:5A:18:5E:30:A3:BE:6B:32:95:E6:DA:12:54:70:95:9A:9F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D98BAA131E9B350B9E2156680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abda09be-fab4-32da-9fec-a75f89cd4903.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.152.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a1:31:e9:b3:50:b9:e2:15:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=c222284e-5ab0-43cb-aee3-9aaa524d2a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0e:c8:37:a2:d5:d0:db:6d:67:cc:a9:f8:27: 48:e9:8c:f2:0e:16:a5:99:74:b0:31:64:8b:9a:aa: 76:bd:77:e4:3c:05:85:a6:37:e2:22:ca:91:be:6c: cd:e0:0a:f9:c5:70:ed:ca:9a:10:59:9e:e7:c1:65: 2c:2f:4f:5e:ae:b6:a5:21:08:98:3f:a8:3d:20:83: 06:6b:9c:fd:5e:aa:02:22:e2:7c:33:40:8e:a7:46: 4f:2a:57:62:4a:a6:cb:e2:26:8f:15:40:73:58:23: d2:d4:75:ca:b6:e7:8e:a7:46:e7:e7:71:bd:87:9d: a4:f8:10:c2:0a:e7:f0:e7:5e:5e:0b:73:19:44:1b: 7a:28:96:46:b4:53:fc:07:ba:19:9d:3f:c3:57:22: 7b:d5:15:8d:32:8a:b3:1d:52:e1:3e:71:99:10:3a: 7b:4e:76:c6:22:81:3f:e5:8d:5b:81:4b:7d:7f:6d: 85:ec:43:6d:2f:6d:98:bd:39:40:3d:29:35:cb:7b: 9d:14:5c:d4:04:55:e5:97:36:f1:91:4c:aa:eb:24: 93:7f:3e:00:2c:d9:a2:fb:05:b9:2c:b2:22:ae:5b: d0:82:fb:a0:8a:1d:de:ef:08:02:01:cc:16:a0:9d: 34:01:c0:ce:9e:47:b9:e6:b6:c5:a5:9e:0d:6f:ca: 03:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B1:2E:5A:18:5E:30:A3:BE:6B:32:95:E6:DA:12:54:70:95:9A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abda09be-fab4-32da-9fec-a75f89cd4903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.152.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:2c:75:0b:ca:29:64:3b:42:5d:22:aa:cf:8f:96:6d:7e:11: 8d:2c:a2:03:84:7c:ed:87:d4:6e:bb:4f:d9:db:fe:e3:76:61: 5b:41:8b:e3:29:f7:35:a3:32:ee:45:c5:90:72:32:37:99:1f: d3:0b:30:51:69:d8:00:45:63:64:71:4d:85:6b:ed:3e:b1:6e: 33:ab:65:68:1f:c2:13:e2:06:85:f0:3a:b9:8a:eb:d1:86:a5: e3:2e:9b:39:62:dd:30:86:61:e4:0b:61:6f:b9:b3:ed:bf:44: c5:bd:a8:da:d0:0b:e7:35:72:11:35:9a:2e:b9:cb:1b:6d:a9: 54:cc:f4:6b:cd:c5:4e:94:a2:e1:93:e3:b5:fe:b5:22:39:df: a3:67:e0:49:fa:3d:c2:23:ec:c9:6a:a1:ce:79:f8:18:17:b7: dc:b8:e1:b0:70:b3:89:6a:6a:59:ae:72:cf:cb:7a:60:42:42: ab:fa:7b:c2:80:72:0e:5b:9c:da:19:a7:28:6c:f8:ce:c6:cf: c6:fa:1a:ac:c7:08:88:d0:f0:57:ed:a0:99:67:03:4d:ea:b6: ee:75:1b:9c:d0:e5:03:eb:fb:2b:65:63:4f:ad:23:5a:ba:c0: a9:77:d7:d9:ff:d8:b1:74:78:5e:d3:df:d5:b1:43:a0:22:49: 21:cb:a6:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqEx6bNQueIVZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk YzIyMjI4NGUtNWFiMC00M2NiLWFlZTMtOWFhYTUyNGQyYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA7IN6LV0NttZ8yp+CdI6YzyDhalmXSwMWSL mqp2vXfkPAWFpjfiIsqRvmzN4Ar5xXDtypoQWZ7nwWUsL09erralIQiYP6g9IIMG a5z9XqoCIuJ8M0COp0ZPKldiSqbL4iaPFUBzWCPS1HXKtueOp0bn53G9h52k+BDC Cufw515eC3MZRBt6KJZGtFP8B7oZnT/DVyJ71RWNMoqzHVLhPnGZEDp7TnbGIoE/ 5Y1bgUt9f22F7ENtL22YvTlAPSk1y3udFFzUBFXllzbxkUyq6ySTfz4ALNmi+wW5 LLIirlvQgvugih3e7wgCAcwWoJ00AcDOnke55rbFpZ4Nb8oDzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSxLloYXjCjvmsylebaElRwlZqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWJkYTA5YmUtZmFiNC0z MmRhLTlmZWMtYTc1Zjg5Y2Q0OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYsdQvKKWQ7Ql0iqs+Plm1+EY0sogOEfO2H1G67T9nb/uN2YVtBi+Mp 9zWjMu5FxZByMjeZH9MLMFFp2ABFY2RxTYVr7T6xbjOrZWgfwhPiBoXwOrmK69GG peMumzli3TCGYeQLYW+5s+2/RMW9qNrQC+c1chE1mi65yxttqVTM9GvNxU6UouGT 47X+tSI536Nn4En6PcIj7Mlqoc55+BgXt9y44bBws4lqalmucs/LemBCQqv6e8KA cg5bnNoZpyhs+M7Gz8b6GqzHCIjQ8FftoJlnA03qtu51G5zQ5QPr+ytlY0+tI1q6 wKl319n/2LF0eF7T39WxQ6AiSSHLpjA= -----END CERTIFICATE-----Generated at Wed May 13 04:38:22 2026 by rpki-client