$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa File: 3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa (raw, json) Hash identifier: 179FnXkqbw014a8MaquGxGU/Qs53+C0aYdmTOfSYj7c= Subject key identifier: E3:9B:1B:3A:6D:94:7C:21:A8:CA:A4:39:6E:77:55:F9:DF:CE:45:C1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6EDA61D7A2E354F152239FA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.213.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:61:d7:a2:e3:54:f1:52:23:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=3520b21f-1c03-4cad-a8b0-0e4ca788f0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:57:5b:78:cd:e9:b6:a9:47:ba:5f:66:5f: 31:f1:dd:67:26:1f:9f:60:31:fc:3c:3d:f4:91:35: 88:fc:d1:71:16:12:84:4c:0a:db:2e:61:8c:ac:de: 04:43:63:56:ad:c1:24:6d:db:b5:71:0b:a2:b2:da: bc:6f:00:bb:b5:09:7a:04:b4:b1:95:2b:5f:e3:be: 59:93:ff:3b:ec:31:60:07:85:20:bf:86:36:bb:1e: 2a:45:6c:25:87:b0:50:76:d1:49:5d:9b:31:06:db: 25:10:59:a2:41:11:fd:1e:50:47:bf:b6:98:ae:7d: d2:c7:b9:4f:0b:70:2c:ab:34:13:ca:76:d3:bc:ee: e3:d5:e6:8c:7e:0f:a2:0d:28:73:a9:90:b1:b1:07: 92:ea:37:b5:53:9c:88:bf:19:d2:7d:30:77:ae:ac: 33:6e:85:95:1e:68:25:2c:c8:10:1b:ca:c1:c5:cf: 9b:83:26:b6:9b:71:53:ed:63:f5:d5:68:bd:4f:1c: b3:61:21:3c:20:8c:84:48:9c:b4:5d:98:a7:f5:b6: 9c:e3:e0:5c:ad:b6:db:13:c1:bd:2d:d6:5a:5e:02: a4:1c:8e:be:bb:fc:b5:e9:ae:68:f9:2d:70:09:e8: 69:32:77:6a:8b:46:76:5b:05:be:e6:eb:e9:90:0d: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9B:1B:3A:6D:94:7C:21:A8:CA:A4:39:6E:77:55:F9:DF:CE:45:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f7:30:58:d0:94:38:6b:de:1b:15:58:f1:b2:8e:97:fc:a2: 6e:aa:b5:b6:bd:ec:f5:66:80:0e:a3:7d:1e:a8:ba:2d:be:bf: 76:6a:70:51:ad:0a:be:1b:c4:ef:95:15:af:ef:47:dd:3d:cc: a3:03:cf:51:74:2f:6d:ac:56:04:89:c3:f3:40:a2:51:45:71: 47:2b:46:3e:2c:49:64:8a:b4:ca:84:8e:42:60:b3:92:81:5f: 7c:b5:df:82:a5:69:ad:ad:fc:80:05:b2:d8:14:36:75:47:a0: 5f:f6:d6:a6:ae:5b:0d:88:90:ca:6f:15:84:17:90:7c:6c:de: b5:ca:d6:78:1f:1b:c4:65:a5:0c:c6:7b:bd:b6:39:5a:6c:61: f0:b1:91:7a:5d:69:cf:6e:f8:8f:38:77:0a:62:94:9a:35:24: 94:ca:24:db:88:64:dd:6f:a0:bd:56:1c:fd:6c:1a:19:9d:d8: b4:02:ba:2c:e4:42:0e:d3:41:be:1b:f3:40:4f:c7:8f:b4:12: 56:ba:87:04:47:27:54:a3:b4:17:74:00:75:9c:e3:07:a7:13: f5:b5:2c:78:34:b0:41:28:54:74:c3:a6:65:ce:1b:c3:08:cb: b1:46:43:93:cd:d2:60:17:9d:d6:90:c0:be:b4:51:19:f1:c8: 56:bb:9a:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mHXouNU8VIjn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MzUyMGIyMWYtMWMwMy00Y2FkLWE4YjAtMGU0Y2E3ODhmMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAZXW3jN6bapR7pfZl8x8d1nJh+fYDH8PD30 kTWI/NFxFhKETArbLmGMrN4EQ2NWrcEkbdu1cQuistq8bwC7tQl6BLSxlStf475Z k/877DFgB4Ugv4Y2ux4qRWwlh7BQdtFJXZsxBtslEFmiQRH9HlBHv7aYrn3Sx7lP C3AsqzQTynbTvO7j1eaMfg+iDShzqZCxsQeS6je1U5yIvxnSfTB3rqwzboWVHmgl LMgQG8rBxc+bgya2m3FT7WP11Wi9TxyzYSE8IIyESJy0XZin9bac4+BcrbbbE8G9 LdZaXgKkHI6+u/y16a5o+S1wCehpMndqi0Z2WwW+5uvpkA2h2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOObGzptlHwhqMqkOW53VfnfzkXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2U5MWNkZmQtMzc2NS0z ZjYyLWI1ZTktMDA5NWY1OWQ1NDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgdWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn3MFjQlDhr3hsVWPGyjpf8om6qtba97PVmgA6jfR6oui2+v3ZqcFGt Cr4bxO+VFa/vR909zKMDz1F0L22sVgSJw/NAolFFcUcrRj4sSWSKtMqEjkJgs5KB X3y134Klaa2t/IAFstgUNnVHoF/21qauWw2IkMpvFYQXkHxs3rXK1ngfG8RlpQzG e722OVpsYfCxkXpdac9u+I84dwpilJo1JJTKJNuIZN1voL1WHP1sGhmd2LQCuizk Qg7TQb4b80BPx4+0Ela6hwRHJ1SjtBd0AHWc4wenE/W1LHg0sEEoVHTDpmXOG8MI y7FGQ5PN0mAXndaQwL60URnxyFa7muo= -----END CERTIFICATE-----Generated at Mon Apr 13 14:36:11 2026 by rpki-client