$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa File: ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa (raw, json) Hash identifier: p2xKLftKOdt5SAG+2isubtOjc0WMmvU9ZpR9ZbLEh9s= Subject key identifier: 3C:1C:CA:80:1C:EB:1C:45:29:62:B8:E6:61:D7:0B:C0:B4:1A:73:B4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D8FEA32C0DD056F064AF380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 129.148.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:ea:32:c0:dd:05:6f:06:4a:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=9b86dce0-1663-4737-9f7c-fa8ff826d133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f3:f2:15:a7:c5:b5:f7:ff:4d:17:2a:0b:9c: d8:cd:c3:6c:79:b4:40:6d:de:ab:d3:05:35:84:06: e2:81:88:25:cb:2b:3a:42:96:e3:77:04:ae:f3:20: 2c:3e:a4:97:6e:35:81:07:ea:60:b1:19:9d:94:ab: e4:24:84:ec:ab:39:67:ff:72:6a:9f:65:f1:54:56: ef:2a:d1:5d:ed:a5:00:a7:38:d4:f3:16:81:80:fe: e0:dc:b4:65:17:09:9b:38:ab:f1:32:fc:12:4c:35: 99:0e:39:ab:ee:5c:22:e0:f5:ae:b5:39:9d:52:fb: 0c:6e:ff:6a:8c:3f:59:fc:0c:ab:ee:9b:95:99:f5: eb:de:59:5a:41:f7:bb:40:c4:ea:47:5e:c9:48:09: c9:8f:1d:32:63:34:72:d8:4a:4f:cc:7c:4d:6f:28: c0:93:89:e8:94:d7:ad:48:c4:df:c8:85:b8:c4:dc: a0:51:6a:b3:13:3c:5f:b7:53:b1:3a:5f:d8:ce:71: 47:ec:d4:d8:22:5e:88:22:d7:ac:df:13:27:da:10: 72:73:3c:8f:ed:d0:17:5a:99:ea:a1:8f:db:3c:97: ff:43:0b:8f:a5:75:2e:e8:e1:28:7b:df:fb:3e:aa: 6b:0f:6f:58:f9:3c:be:8f:9f:95:e4:e6:39:92:61: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1C:CA:80:1C:EB:1C:45:29:62:B8:E6:61:D7:0B:C0:B4:1A:73:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3c:28:a2:28:d9:45:e7:4b:26:98:a1:48:e3:d0:e5:d6:c6: df:dd:0a:7d:43:60:46:89:4f:b3:ff:6f:9b:a1:47:8b:1b:38: 0f:93:9d:a8:80:5a:d9:7c:74:30:c3:d7:5a:ea:c4:1a:f0:40: fa:d6:c3:6e:13:f6:d5:c1:65:a8:ce:d1:cb:98:54:d6:ef:b6: c5:72:6d:5c:50:5a:3f:bc:7b:c8:49:dc:24:1a:f9:65:58:6d: 64:d1:e6:c1:ca:75:d5:28:5c:f8:ab:d8:18:68:89:e9:50:1e: 64:fe:7f:02:ae:19:de:67:c9:5c:6d:7a:f9:79:ac:7b:5d:0c: 04:cf:7e:ae:29:0f:c7:a7:cd:37:24:31:aa:6a:11:fa:eb:1d: 5d:f0:68:68:fa:cf:24:48:64:d9:7a:20:f6:78:7f:ce:ba:fc: af:eb:e8:ab:de:5b:8f:d6:72:60:e3:08:0e:4c:dc:01:4d:fc: 9c:cc:d8:ad:88:c3:0e:73:22:25:a5:d4:90:97:95:9a:74:d8: 14:f3:70:9b:1e:e9:e9:a6:2a:7b:b4:85:5a:60:8b:f1:2e:44: 0f:1f:05:36:95:70:2e:7b:1d:93:93:fd:0c:56:d7:e4:6e:40: 6e:e9:c5:4f:9d:88:84:79:b0:5d:92:a6:5b:4f:ca:14:68:62: 2b:aa:df:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj+oywN0FbwZK84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk OWI4NmRjZTAtMTY2My00NzM3LTlmN2MtZmE4ZmY4MjZkMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vPyFafFtff/TRcqC5zYzcNsebRAbd6r0wU1 hAbigYglyys6QpbjdwSu8yAsPqSXbjWBB+pgsRmdlKvkJITsqzln/3Jqn2XxVFbv KtFd7aUApzjU8xaBgP7g3LRlFwmbOKvxMvwSTDWZDjmr7lwi4PWutTmdUvsMbv9q jD9Z/Ayr7puVmfXr3llaQfe7QMTqR17JSAnJjx0yYzRy2EpPzHxNbyjAk4nolNet SMTfyIW4xNygUWqzEzxft1OxOl/YznFH7NTYIl6IItes3xMn2hByczyP7dAXWpnq oY/bPJf/QwuPpXUu6OEoe9/7PqprD29Y+Ty+j5+V5OY5kmFTSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwcyoAc6xxFKWK45mHXC8C0GnO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWY3YmQzZmMtZGFhNC0z Mjg0LTg3ZTctMGNiOGE5NDJjMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc8KKIo2UXnSyaYoUjj0OXWxt/dCn1DYEaJT7P/b5uhR4sbOA+TnaiA Wtl8dDDD11rqxBrwQPrWw24T9tXBZajO0cuYVNbvtsVybVxQWj+8e8hJ3CQa+WVY bWTR5sHKddUoXPir2BhoielQHmT+fwKuGd5nyVxtevl5rHtdDATPfq4pD8enzTck MapqEfrrHV3waGj6zyRIZNl6IPZ4f866/K/r6KveW4/WcmDjCA5M3AFN/JzM2K2I ww5zIiWl1JCXlZp02BTzcJse6emmKnu0hVpgi/EuRA8fBTaVcC57HZOT/QxW1+Ru QG7pxU+diIR5sF2SpltPyhRoYiuq35M= -----END CERTIFICATE-----Generated at Wed May 13 05:02:13 2026 by rpki-client