$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1c90b7be-217a-3636-bd69-f723abd9f633.roa File: 1c90b7be-217a-3636-bd69-f723abd9f633.roa (raw, json) Hash identifier: Iu280g7PJid99y5b70Uc7dvPP4xJKD0RrGx+FiCAqUg= Subject key identifier: FA:F9:EE:AA:9B:D4:9D:D7:89:77:67:7E:2C:DA:4A:BA:EE:FF:4A:AF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6EDA61A0E57D567130098640 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1c90b7be-217a-3636-bd69-f723abd9f633.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.213.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:61:a0:e5:7d:56:71:30:09:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=4df6e3e6-17ad-4d3e-b676-a4d24be9beb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:c0:67:cf:d7:83:e2:c0:8f:20:ef:ba:71: 1d:81:79:f7:1c:8f:1e:53:5f:aa:4f:7b:48:7d:5b: c6:f9:c9:ad:78:2a:db:3a:6f:28:46:58:e5:ff:5b: 72:27:ad:bb:50:6d:47:e3:33:40:17:89:9a:b3:a3: d6:2d:bb:63:78:06:f6:1c:a1:02:3d:a8:83:92:99: 80:3b:b7:9a:1d:70:2b:e8:da:53:44:9c:4e:2b:b1: d7:d5:d8:21:72:63:b2:22:c4:c1:69:8b:42:87:92: 77:4d:99:cb:7b:71:a3:f7:42:56:e2:b2:63:b8:f2: 10:0a:26:42:ca:dc:28:cf:2c:b5:3c:fd:0b:4c:ef: cd:de:f6:0a:df:8c:a2:cd:4c:dc:7a:a2:09:41:dc: 62:f0:ab:04:6c:97:f8:d4:10:f9:fd:34:34:53:75: fa:38:9d:27:ac:88:9f:4e:3f:c2:af:18:3c:d4:86: 11:02:59:29:14:0b:bc:09:9d:13:14:49:d9:2b:ed: 2f:14:9b:5a:8f:e5:f0:c4:67:df:83:a6:8f:b1:6d: 1f:cf:fb:8b:28:30:1a:54:a8:2c:c9:88:23:70:20: 53:0f:72:a7:a9:0e:10:ce:d3:33:2c:6d:6a:37:ce: b7:8f:5a:ef:2e:ec:7d:f4:f3:4f:78:4b:4c:78:04: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F9:EE:AA:9B:D4:9D:D7:89:77:67:7E:2C:DA:4A:BA:EE:FF:4A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1c90b7be-217a-3636-bd69-f723abd9f633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a2:ea:cd:f3:dc:76:81:bb:aa:9a:78:6a:e0:96:1e:02:cb: c6:4b:c9:ce:61:0a:75:88:41:b9:96:6d:25:58:3d:14:ee:09: 82:79:a5:34:d3:11:b5:8c:62:a0:1c:1c:37:04:c6:b3:e2:f6: 37:af:8c:82:75:5b:b3:e5:f1:bd:60:9a:02:4d:23:06:dc:08: 55:89:9a:31:b6:e6:fa:c5:65:c6:ea:33:7d:87:e8:01:ac:26: 7d:26:66:80:c7:bc:a8:50:00:1b:e4:5e:50:b8:40:f3:d6:0c: b9:e7:53:8f:17:1c:89:39:de:67:5d:54:a3:f4:b7:92:81:c0: 9a:2e:4a:82:3b:2b:e6:f1:9d:98:92:b9:85:24:5e:5e:70:78: c1:29:7e:af:e6:8e:63:52:51:ea:79:4b:3f:1d:36:2a:79:ba: ef:3f:22:40:a4:54:89:45:92:41:34:76:6e:11:cc:65:06:22: a3:57:ba:67:a0:de:31:b2:7f:cc:e7:bf:93:11:48:da:c5:bb: 88:09:d3:92:5f:47:80:29:42:ff:f5:ae:59:82:36:c4:0b:ff: 8c:f9:e7:b0:9c:bc:00:e3:5b:cf:81:8d:5d:f8:6f:62:27:bc: 79:fb:9a:b4:a2:1d:54:9d:b4:19:e4:3e:88:34:12:db:d9:f9: b7:40:44:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mGg5X1WcTAJhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk NGRmNmUzZTYtMTdhZC00ZDNlLWI2NzYtYTRkMjRiZTliZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHDAZ8/Xg+LAjyDvunEdgXn3HI8eU1+qT3tI fVvG+cmteCrbOm8oRljl/1tyJ627UG1H4zNAF4mas6PWLbtjeAb2HKECPaiDkpmA O7eaHXAr6NpTRJxOK7HX1dghcmOyIsTBaYtCh5J3TZnLe3Gj90JW4rJjuPIQCiZC ytwozyy1PP0LTO/N3vYK34yizUzceqIJQdxi8KsEbJf41BD5/TQ0U3X6OJ0nrIif Tj/Crxg81IYRAlkpFAu8CZ0TFEnZK+0vFJtaj+XwxGffg6aPsW0fz/uLKDAaVKgs yYgjcCBTD3KnqQ4QztMzLG1qN863j1rvLux99PNPeEtMeAR/gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr57qqb1J3XiXdnfizaSrru/0qvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWM5MGI3YmUtMjE3YS0z NjM2LWJkNjktZjcyM2FiZDlmNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgdWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+i6s3z3HaBu6qaeGrglh4Cy8ZLyc5hCnWIQbmWbSVYPRTuCYJ5pTTT EbWMYqAcHDcExrPi9jevjIJ1W7Pl8b1gmgJNIwbcCFWJmjG25vrFZcbqM32H6AGs Jn0mZoDHvKhQABvkXlC4QPPWDLnnU48XHIk53mddVKP0t5KBwJouSoI7K+bxnZiS uYUkXl5weMEpfq/mjmNSUep5Sz8dNip5uu8/IkCkVIlFkkE0dm4RzGUGIqNXumeg 3jGyf8znv5MRSNrFu4gJ05JfR4ApQv/1rlmCNsQL/4z557CcvADjW8+BjV34b2In vHn7mrSiHVSdtBnkPog0EtvZ+bdARNs= -----END CERTIFICATE-----Generated at Mon Apr 13 16:00:15 2026 by rpki-client