$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21676b13-d821-3210-afaf-f5fd2bd412bc.roa File: 21676b13-d821-3210-afaf-f5fd2bd412bc.roa (raw, json) Hash identifier: 7BskrzwpdHRl5OLruHMgKqDSj98MNkfApvyRhkA0exI= Subject key identifier: ED:1C:68:8A:FE:2D:09:C3:EE:08:83:44:4A:F8:72:AE:D0:D1:01:DF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6EDA8E87A2EC41E6BE26D080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21676b13-d821-3210-afaf-f5fd2bd412bc.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.213.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:8e:87:a2:ec:41:e6:be:26:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=2c2db338-55c6-4040-a09a-d1fef4a89aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cc:af:4e:24:a1:20:d2:92:92:79:08:49:56: e0:26:05:6a:1d:39:31:81:56:ce:ce:58:2c:00:56: 0c:0f:8f:46:75:0e:e1:6d:e5:5f:06:07:2e:a5:17: 7b:dc:dc:2e:9f:af:91:58:6a:7c:fa:5e:52:d1:6d: b4:e4:e6:64:37:24:e5:82:f3:c4:22:1c:5f:3b:d5: 09:a1:4d:f8:69:a0:69:5e:60:3c:ef:e4:21:c8:8e: a0:fc:cf:4d:c2:19:b2:74:eb:fa:a3:ff:8c:df:6a: 68:87:1c:f5:27:4e:23:90:8e:6e:f3:ca:be:6d:af: e8:90:8a:9a:af:80:bc:b9:4c:42:32:d3:52:0a:e2: 29:c1:a8:3c:1a:a5:d9:ce:65:48:08:3c:e9:e3:ea: e0:62:0c:a8:46:25:ef:bb:09:6a:2a:cc:fb:28:44: 9d:0b:64:ee:66:d8:92:24:6b:46:d0:40:1a:60:68: 3b:a8:3d:3b:12:1b:7a:06:f1:21:57:fd:74:5e:24: 0e:79:c8:47:3a:77:59:18:cb:59:a3:96:c9:79:6a: f4:4d:ec:b4:a9:8d:e3:37:85:20:50:fb:16:db:71: d7:92:78:a7:06:79:d5:74:0e:69:ea:bf:b5:ff:7e: 67:ed:40:2c:c5:02:8a:87:57:40:64:91:a6:16:60: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1C:68:8A:FE:2D:09:C3:EE:08:83:44:4A:F8:72:AE:D0:D1:01:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21676b13-d821-3210-afaf-f5fd2bd412bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:84:74:1d:18:d1:17:c5:23:06:60:4b:85:11:a4:10:51:d1: 64:e8:fa:09:c0:21:4e:af:2a:e6:46:75:af:80:fc:9f:10:70: 97:c9:b0:5b:05:fd:df:56:7a:be:91:41:1c:1a:2b:4a:d6:bd: 79:1e:29:56:75:72:d0:a9:55:30:3d:66:a2:f8:24:22:69:46: 9a:cf:0b:5f:e7:5d:4f:7d:61:ca:2d:17:fb:eb:09:e3:77:57: 72:5b:76:37:35:aa:79:81:29:25:00:1a:e6:26:a6:4e:c4:76: 44:ee:e6:23:00:42:e8:1f:65:b2:8e:be:4e:50:87:b8:0a:9c: 68:df:a8:68:e9:41:bd:bb:90:a2:e2:92:d4:26:d6:9c:0d:80: ab:d8:0b:31:8b:eb:ab:18:c9:8d:cf:a0:18:8e:d2:00:6b:e5: 5c:bd:24:99:0f:8e:0b:79:c6:ba:06:19:6b:63:03:3e:83:1e: ff:3e:f1:4b:45:92:f6:ca:31:1c:29:ab:22:ea:cb:4d:7b:55: b4:43:9e:50:c6:8f:e9:b4:4d:c8:48:cb:f8:fb:52:f8:3e:35: 61:d6:10:3c:d3:52:93:69:2f:d4:0d:95:22:06:c8:79:e5:f8: e5:e3:5e:1e:09:f0:b2:9c:58:29:7f:07:c6:eb:ad:d6:b8:85: 70:60:53:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2o6HouxB5r4m0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MmMyZGIzMzgtNTVjNi00MDQwLWEwOWEtZDFmZWY0YTg5YWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMyvTiShINKSknkISVbgJgVqHTkxgVbOzlgs AFYMD49GdQ7hbeVfBgcupRd73Nwun6+RWGp8+l5S0W205OZkNyTlgvPEIhxfO9UJ oU34aaBpXmA87+QhyI6g/M9NwhmydOv6o/+M32pohxz1J04jkI5u88q+ba/okIqa r4C8uUxCMtNSCuIpwag8GqXZzmVICDzp4+rgYgyoRiXvuwlqKsz7KESdC2TuZtiS JGtG0EAaYGg7qD07Eht6BvEhV/10XiQOechHOndZGMtZo5bJeWr0Tey0qY3jN4Ug UPsW23HXkninBnnVdA5p6r+1/35n7UAsxQKKh1dAZJGmFmD/EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0caIr+LQnD7giDREr4cq7Q0QHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjE2NzZiMTMtZDgyMS0z MjEwLWFmYWYtZjVmZDJiZDQxMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgdWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCEdB0Y0RfFIwZgS4URpBBR0WTo+gnAIU6vKuZGda+A/J8QcJfJsFsF /d9Wer6RQRwaK0rWvXkeKVZ1ctCpVTA9ZqL4JCJpRprPC1/nXU99YcotF/vrCeN3 V3Jbdjc1qnmBKSUAGuYmpk7EdkTu5iMAQugfZbKOvk5Qh7gKnGjfqGjpQb27kKLi ktQm1pwNgKvYCzGL66sYyY3PoBiO0gBr5Vy9JJkPjgt5xroGGWtjAz6DHv8+8UtF kvbKMRwpqyLqy017VbRDnlDGj+m0TchIy/j7Uvg+NWHWEDzTUpNpL9QNlSIGyHnl +OXjXh4J8LKcWCl/B8brrda4hXBgU0s= -----END CERTIFICATE-----Generated at Mon Apr 13 14:40:58 2026 by rpki-client