$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa File: ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa (raw, json) Hash identifier: ExdiHbwqd//dtrJB5I2re5nnOQMcfk/zduCoRXC+aVw= Subject key identifier: C7:AA:79:48:B5:60:85:BB:0D:78:65:C4:E0:2A:10:34:6F:D4:8F:67 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF97FB75E32133C532F3A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 129.159.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:7f:b7:5e:32:13:3c:53:2f:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=4a54fe71-91b0-44f4-b4fc-301e64f91c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:77:22:52:c8:de:d1:25:94:7e:96:63:95: 67:4b:5d:04:59:b5:f1:bf:99:a1:64:fd:5a:3c:44: b7:65:09:db:78:7c:c6:5f:43:82:25:49:fb:61:8b: a6:2e:06:56:0f:e6:f7:02:37:87:a2:a7:ff:48:ac: b7:fd:de:f2:7e:d3:35:4d:43:76:6a:0f:4b:1a:98: 55:94:13:30:ac:c5:48:d5:ac:68:d5:50:6c:0a:fa: 24:5e:8b:75:bd:a8:bb:37:89:7f:78:e4:7c:24:5f: fb:b6:60:5b:62:44:b5:11:fb:f0:e7:95:ed:8f:98: 7e:d7:64:cf:fb:4f:94:a3:4e:a2:e7:61:6f:0b:a3: ff:37:9c:12:e7:80:0d:b6:2d:4f:f4:be:42:17:62: f0:88:1e:8c:c5:54:54:da:88:4e:2f:2a:6c:d5:32: 7f:f7:63:79:54:e0:ab:3e:e0:04:a4:90:c4:75:f0: 8e:67:7e:96:07:3e:07:d6:29:19:bc:33:4a:1f:6d: 81:6e:b8:1d:3c:ce:1e:ad:b9:76:3f:fc:d8:82:bc: e5:da:95:1e:3c:25:14:d6:7f:a1:07:7e:7c:e6:90: 39:ef:2f:4a:81:c4:c4:05:d4:ec:88:95:52:b5:82: c5:41:47:b6:33:67:0b:8c:63:8f:e6:d5:60:9b:38: 65:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AA:79:48:B5:60:85:BB:0D:78:65:C4:E0:2A:10:34:6F:D4:8F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d7:d1:c0:7d:49:a6:69:cc:ba:2a:74:ed:bd:2c:77:03:b0: 6b:17:55:50:15:ad:ef:cc:ee:ac:43:e9:33:59:6e:9a:e1:b7: 3c:fa:35:86:42:5a:44:d3:07:91:99:ea:f5:35:c5:01:4f:e6: 6f:b0:7f:75:8d:62:7f:32:84:a8:81:89:15:81:42:ed:16:83: fc:f0:dd:b1:3c:57:81:d9:a5:24:cd:99:fb:99:3f:0d:97:bb: 56:52:8a:47:9b:15:f9:7f:f9:f2:16:f3:81:e6:e5:09:4b:37: 4c:c2:d5:98:18:6d:8c:c9:8e:66:c2:99:c1:93:99:47:4d:6a: ee:3f:68:d8:cd:80:d7:12:6f:bd:72:f4:7e:ca:f2:58:93:8f: d7:f7:02:34:fa:27:57:f9:23:80:f1:42:6c:ba:0b:60:1b:fb: 31:0d:56:8e:bc:af:29:7a:74:0d:ab:54:04:42:9d:5c:e2:7a: e3:4a:d0:00:e5:75:06:cd:ec:18:c3:64:1b:0c:22:9d:88:a2: 27:27:7d:cd:d1:da:07:21:4c:0e:4e:bc:f4:68:f0:89:6a:94: 7d:87:98:df:81:16:58:be:ba:69:9e:b8:ac:a5:42:79:3c:cd: 02:fe:b0:28:71:2e:34:47:78:f7:eb:3a:f0:41:9e:d0:cc:46: c3:0c:a8:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+X+3XjITPFMvOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NGE1NGZlNzEtOTFiMC00NGY0LWI0ZmMtMzAxZTY0ZjkxYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXN3IlLI3tEllH6WY5VnS10EWbXxv5mhZP1a PES3ZQnbeHzGX0OCJUn7YYumLgZWD+b3AjeHoqf/SKy3/d7yftM1TUN2ag9LGphV lBMwrMVI1axo1VBsCvokXot1vai7N4l/eOR8JF/7tmBbYkS1Efvw55Xtj5h+12TP +0+Uo06i52FvC6P/N5wS54ANti1P9L5CF2LwiB6MxVRU2ohOLyps1TJ/92N5VOCr PuAEpJDEdfCOZ36WBz4H1ikZvDNKH22BbrgdPM4erbl2P/zYgrzl2pUePCUU1n+h B3585pA57y9KgcTEBdTsiJVStYLFQUe2M2cLjGOP5tVgmzhlbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeqeUi1YIW7DXhlxOAqEDRv1I9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE4M2Y5YjEtNzA2Yi0z NGFkLThhZjYtYzZmYjRhNTIyYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZ8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrX0cB9SaZpzLoqdO29LHcDsGsXVVAVre/M7qxD6TNZbprhtzz6NYZC WkTTB5GZ6vU1xQFP5m+wf3WNYn8yhKiBiRWBQu0Wg/zw3bE8V4HZpSTNmfuZPw2X u1ZSikebFfl/+fIW84Hm5QlLN0zC1ZgYbYzJjmbCmcGTmUdNau4/aNjNgNcSb71y 9H7K8liTj9f3AjT6J1f5I4DxQmy6C2Ab+zENVo68ryl6dA2rVARCnVzieuNK0ADl dQbN7BjDZBsMIp2Ioicnfc3R2gchTA5OvPRo8IlqlH2HmN+BFli+ummeuKylQnk8 zQL+sChxLjRHePfrOvBBntDMRsMMqCI= -----END CERTIFICATE-----Generated at Wed May 13 10:46:45 2026 by rpki-client