$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e890ee9-8168-394d-ab19-2e3e58d87eb1.roa File: 2e890ee9-8168-394d-ab19-2e3e58d87eb1.roa (raw, json) Hash identifier: AXQG1D6+d0eYOJhBuXQQQ+VLwRpG1hOZnNRXvNB7+/k= Subject key identifier: 6E:55:B7:39:D1:1C:CC:21:79:1D:29:FF:6A:2D:25:03:C0:CF:EF:CC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6AAA6123997EE499E1580740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e890ee9-8168-394d-ab19-2e3e58d87eb1.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 129.146.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:61:23:99:7e:e4:99:e1:58:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=33b8f880-c6d5-4568-9ad0-a109234769f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:60:df:b0:b3:28:57:af:13:44:83:d3:60:6d: c1:a7:b7:94:05:b1:5e:51:05:00:e2:e2:d5:85:c1: e1:cd:01:05:a2:7e:de:f8:9a:e3:d9:0a:bd:ae:d8: 26:d0:83:77:75:1e:98:f1:ff:da:da:09:eb:bb:a0: 48:9b:e2:27:09:1a:32:eb:f4:e9:c6:0d:b7:69:5e: 4c:7b:50:e8:15:f8:7a:b7:f0:96:9c:d4:67:f4:32: 1f:80:92:28:f6:2d:b7:eb:a4:aa:09:5b:09:4d:f5: 74:30:84:ba:41:aa:46:8c:75:40:d4:4e:75:3f:53: c4:00:ef:8d:b5:b2:c3:9a:f7:38:7a:d9:19:d3:3e: a1:45:05:6e:f9:73:88:88:dc:92:dd:ae:e9:a3:93: ae:e5:a2:0c:3b:ef:8a:1a:4e:76:d2:6e:f7:8e:7d: fc:04:1f:22:7d:80:11:54:c2:e3:b2:11:ff:93:83: 02:fb:fb:46:1a:10:80:0c:44:f8:ef:bf:ce:df:79: b6:86:47:0d:41:f3:cc:3d:9f:cf:24:47:92:7a:35: 99:e9:5f:3c:27:51:ef:38:a9:69:a2:40:79:5a:e5: b1:32:3f:07:e9:2c:2f:82:51:e5:03:10:08:6e:80: 29:99:a0:99:4c:5c:af:21:6f:dc:d2:76:e0:b0:d9: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:55:B7:39:D1:1C:CC:21:79:1D:29:FF:6A:2D:25:03:C0:CF:EF:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e890ee9-8168-394d-ab19-2e3e58d87eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c5:7a:4c:b9:a2:95:64:06:a6:36:6a:8e:9f:d7:ba:70:4d: fa:54:6e:27:86:b5:34:78:dc:36:86:79:bf:40:01:19:3a:d3: bf:10:61:f6:7c:32:66:9b:e7:d6:b4:11:5a:4f:8e:c4:90:fe: c9:fe:6c:5d:d3:58:e8:b5:85:1a:2b:fe:50:5f:25:c0:39:40: 18:88:1d:71:39:9c:9e:8b:b6:13:b5:ab:d3:2c:74:2e:b5:d4: 9c:dd:e5:f1:35:c1:74:06:22:46:e5:fd:7a:ab:5b:b1:46:19: 06:db:bb:15:68:a5:f9:50:ac:19:12:a5:60:b3:d6:e3:d2:70: ee:b7:ff:30:fa:0c:6f:89:95:cb:a6:eb:e3:e5:59:64:28:70: 68:4d:ca:a5:42:1b:0c:15:18:2f:32:8a:7b:4c:5c:d0:43:83: d5:56:ff:b4:eb:df:a8:37:41:d7:18:ac:cb:f4:0f:36:95:fd: 41:cd:6e:42:d1:7d:5a:53:6a:6c:03:1b:f4:e9:6c:48:13:2e: bd:0f:1a:f4:3f:7c:81:2c:29:bb:52:61:86:fd:10:d0:12:db: 4a:d3:b4:2f:c8:52:57:5f:27:2c:fc:40:b4:3b:6a:b4:a8:78: 17:16:40:b5:a4:c1:bb:16:c5:2e:5b:ab:c5:72:aa:11:8b:f3: ce:8a:b2:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqmEjmX7kmeFYB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MzNiOGY4ODAtYzZkNS00NTY4LTlhZDAtYTEwOTIzNDc2OWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWDfsLMoV68TRIPTYG3Bp7eUBbFeUQUA4uLV hcHhzQEFon7e+Jrj2Qq9rtgm0IN3dR6Y8f/a2gnru6BIm+InCRoy6/Tpxg23aV5M e1DoFfh6t/CWnNRn9DIfgJIo9i2366SqCVsJTfV0MIS6QapGjHVA1E51P1PEAO+N tbLDmvc4etkZ0z6hRQVu+XOIiNyS3a7po5Ou5aIMO++KGk520m73jn38BB8ifYAR VMLjshH/k4MC+/tGGhCADET477/O33m2hkcNQfPMPZ/PJEeSejWZ6V88J1HvOKlp okB5WuWxMj8H6SwvglHlAxAIboApmaCZTFyvIW/c0nbgsNlOqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5VtznRHMwheR0p/2otJQPAz+/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmU4OTBlZTktODE2OC0z OTRkLWFiMTktMmUzZTU4ZDg3ZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTFeky5opVkBqY2ao6f17pwTfpUbieGtTR43DaGeb9AARk6078QYfZ8 Mmab59a0EVpPjsSQ/sn+bF3TWOi1hRor/lBfJcA5QBiIHXE5nJ6LthO1q9MsdC61 1Jzd5fE1wXQGIkbl/XqrW7FGGQbbuxVopflQrBkSpWCz1uPScO63/zD6DG+Jlcum 6+PlWWQocGhNyqVCGwwVGC8yintMXNBDg9VW/7Tr36g3QdcYrMv0DzaV/UHNbkLR fVpTamwDG/TpbEgTLr0PGvQ/fIEsKbtSYYb9ENAS20rTtC/IUldfJyz8QLQ7arSo eBcWQLWkwbsWxS5bq8VyqhGL886Kskg= -----END CERTIFICATE-----Generated at Mon Apr 13 14:40:51 2026 by rpki-client