$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa File: fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa (raw, json) Hash identifier: AnbWtOXopHHFkdcnpJnJPhKbF/VLSJxIpTpPSsHOdjA= Subject key identifier: D5:6C:5F:0F:57:68:24:A0:06:8A:1D:80:C7:AC:AF:45:8A:81:8B:70 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E502C1C7A7063811A456BC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.157.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2c:1c:7a:70:63:81:1a:45:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=16579b25-11d4-4815-9a44-b27c2154db4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:8d:b6:5f:9f:e4:f2:c5:32:48:3b:0a:69: 17:3e:aa:c7:8d:fa:31:b0:2c:46:9f:0e:1d:c6:ea: cd:e9:db:a4:af:21:59:9e:50:f2:01:02:2b:93:3b: 06:32:31:21:6b:12:4d:10:c2:d5:c8:73:38:13:c2: 8a:da:c9:e2:4e:6b:74:51:c6:04:b9:24:4d:e7:ab: 89:db:b9:88:0e:43:2e:63:02:ac:49:ff:cc:0e:6f: b5:8f:c2:1c:02:d5:e7:4e:c6:33:f8:54:bb:e0:c2: b4:b5:06:9e:75:2f:88:ae:b3:bc:0f:f0:e6:fc:0b: 0b:93:c5:bb:24:b3:6e:85:e1:47:71:f1:34:25:ea: 60:34:d6:56:6a:d5:75:a1:26:4b:33:7f:1f:83:ff: bf:67:4c:fb:dc:b9:a7:f9:5f:e0:77:07:c3:2d:f4: df:38:d5:cd:df:39:65:61:9a:8e:ec:0f:ec:54:e3: 14:d7:a6:6c:d7:7a:f4:36:fc:54:e4:41:39:15:4f: 16:1d:f5:a0:70:74:62:47:5d:2e:d8:4d:1f:4d:7c: 40:e0:3c:92:a1:fa:4e:61:30:56:72:8d:18:e4:7a: d1:10:20:a7:92:17:fd:9e:ca:a4:9a:e8:40:8f:93: 61:ee:4c:2c:19:0b:3c:c2:62:fc:0e:e9:9c:08:32: 73:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6C:5F:0F:57:68:24:A0:06:8A:1D:80:C7:AC:AF:45:8A:81:8B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.157.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e1:c6:9b:f5:b2:4a:99:14:e2:a3:f0:5e:82:b6:ef:3e:00: 19:e3:e6:3f:cb:0c:cb:3a:90:1d:7c:d9:ce:4d:21:0b:6b:1b: f6:31:9d:10:f4:fc:b5:de:d6:da:76:17:28:e3:03:41:8e:e6: 0e:2a:43:1c:13:db:2a:a2:4e:b9:92:f9:eb:65:65:ae:bb:db: 19:7b:7c:e6:9d:20:3d:26:ec:b3:0e:31:52:f0:0c:dc:74:24: 87:8c:68:46:24:9b:b9:c0:69:8c:b4:7b:10:e2:8c:5f:6b:b4: a9:1a:e2:ef:51:b8:79:a7:d0:a4:7f:38:b5:2d:3d:db:5f:60: e4:83:60:47:bf:e4:f7:e1:7c:57:aa:94:85:11:28:dc:54:59: 1f:90:3f:6c:33:6b:ba:e6:35:91:a9:f4:35:ef:01:05:da:42: d6:f3:db:47:b6:25:95:63:e3:3f:10:23:be:46:d4:55:5c:5f: 3c:4c:26:fc:a1:c9:be:cd:83:2c:1e:21:e0:03:fc:9e:71:de: 19:2b:b1:36:d1:23:48:16:41:e7:54:9f:f3:89:f6:54:c2:9d: 84:da:ce:5b:7b:3d:f2:22:79:47:06:dc:b1:ac:74:6d:3a:a1: 03:d9:32:97:a2:b4:e6:d4:c7:8c:9b:7c:ab:09:24:60:cf:51: 53:cb:e6:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCwcenBjgRpFa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MTY1NzliMjUtMTFkNC00ODE1LTlhNDQtYjI3YzIxNTRkYjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgSNtl+f5PLFMkg7CmkXPqrHjfoxsCxGnw4d xurN6dukryFZnlDyAQIrkzsGMjEhaxJNEMLVyHM4E8KK2sniTmt0UcYEuSRN56uJ 27mIDkMuYwKsSf/MDm+1j8IcAtXnTsYz+FS74MK0tQaedS+IrrO8D/Dm/AsLk8W7 JLNuheFHcfE0JepgNNZWatV1oSZLM38fg/+/Z0z73Lmn+V/gdwfDLfTfONXN3zll YZqO7A/sVOMU16Zs13r0NvxU5EE5FU8WHfWgcHRiR10u2E0fTXxA4DySofpOYTBW co0Y5HrRECCnkhf9nsqkmuhAj5Nh7kwsGQs8wmL8DumcCDJziwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVsXw9XaCSgBoodgMesr0WKgYtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmQ5ZDE0NmEtOTU2NS0z MWU1LTllMGUtZDJkZTJlYmQxNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZ14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDhxpv1skqZFOKj8F6Ctu8+ABnj5j/LDMs6kB182c5NIQtrG/YxnRD0 /LXe1tp2FyjjA0GO5g4qQxwT2yqiTrmS+etlZa672xl7fOadID0m7LMOMVLwDNx0 JIeMaEYkm7nAaYy0exDijF9rtKka4u9RuHmn0KR/OLUtPdtfYOSDYEe/5PfhfFeq lIURKNxUWR+QP2wza7rmNZGp9DXvAQXaQtbz20e2JZVj4z8QI75G1FVcXzxMJvyh yb7NgyweIeAD/J5x3hkrsTbRI0gWQedUn/OJ9lTCnYTazlt7PfIieUcG3LGsdG06 oQPZMpeitObUx4ybfKsJJGDPUVPL5tE= -----END CERTIFICATE-----Generated at Wed May 13 06:24:34 2026 by rpki-client