$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40599033-d1ac-3fc1-a624-cd863d4737bd.roa File: 40599033-d1ac-3fc1-a624-cd863d4737bd.roa (raw, json) Hash identifier: 5WFhrc254io77X6TBd2+WHOJwJX3QRM/IDSM7PBRMGc= Subject key identifier: 39:2C:52:CB:12:24:0C:90:75:45:3C:4D:B7:E3:A4:7A:21:E4:FA:A2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D5F7FAF056EB608C8389EFE20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40599033-d1ac-3fc1-a624-cd863d4737bd.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 46558 IP address blocks: 129.213.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:af:05:6e:b6:08:c8:38:9e:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=617c90b0-63ea-4ca0-a09a-cb438d46dd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:79:cc:e0:77:22:dd:c4:b0:57:8c:e7:15: 2f:40:97:0f:35:3d:fe:62:05:18:e9:2c:25:75:3f: ed:e6:97:ae:e6:5d:93:f3:a1:57:df:14:bc:2a:b8: ad:f1:ac:37:83:ff:64:bf:9a:34:24:e8:8e:13:fe: d6:a2:f4:c7:7e:4d:9b:73:e1:78:ec:5d:6b:aa:f1: e0:e6:d5:4d:4d:c4:27:87:2c:80:cb:7a:d8:b0:55: b4:39:1d:70:46:14:4a:58:03:cd:f3:7a:8f:5d:4e: fb:5a:74:e0:45:02:c3:6b:ba:c0:b7:ad:47:e7:bd: 15:df:9b:23:5d:94:65:6d:96:f5:18:9b:9c:b5:3b: 15:05:e0:ff:8f:83:0f:2c:89:b7:be:99:54:da:cf: f6:04:6e:63:b3:84:29:7f:bf:36:86:61:a5:dd:e5: 58:e0:13:44:a4:98:03:2b:73:f8:e0:96:94:fb:10: cf:72:4d:45:28:3e:9d:ad:c3:8a:48:7c:23:32:81: 25:63:63:91:f7:6b:3f:4c:65:f1:47:5e:cc:bd:32: 4c:fa:35:4e:87:ff:59:52:98:93:6d:c5:6a:32:8b: 0b:be:79:e4:87:39:5f:8b:90:20:3d:7a:2f:43:95: b3:5b:f8:2b:2b:71:20:4a:fa:78:50:b2:5b:92:c5: 4b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2C:52:CB:12:24:0C:90:75:45:3C:4D:B7:E3:A4:7A:21:E4:FA:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40599033-d1ac-3fc1-a624-cd863d4737bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:42:f3:99:7f:e5:b4:b0:4e:84:d0:22:1f:84:44:f0:7d:32: 78:4e:66:5a:f5:1f:87:de:54:f1:96:df:e8:4d:55:80:9e:dd: ca:ff:ff:10:b4:56:c9:7c:1d:bc:16:f9:2f:8e:88:eb:5d:27: ec:e7:64:f6:f5:d0:92:e0:f2:c6:56:72:4a:cd:07:5d:f0:3a: b3:e0:b9:1a:fd:41:f7:a6:c2:7a:15:43:73:7f:78:f2:02:b2: 08:d5:e2:41:27:ea:35:70:f1:8a:ee:39:29:06:17:41:e3:38: 59:7a:a0:58:96:c9:5d:59:a7:97:81:a0:9c:1c:99:1d:5d:15: cb:49:be:f6:c2:72:47:83:99:3b:17:1f:34:6a:8b:61:ab:f9: 84:94:34:30:1f:80:d7:65:85:6a:85:4f:2f:77:89:0b:37:45: 39:83:a6:f9:a5:46:8f:86:76:47:11:dc:9d:cd:c7:60:40:ab: ff:ad:a8:f6:57:b7:28:72:35:e1:8b:9b:0f:c4:37:ff:61:6c: 08:ff:3e:61:5e:0b:f9:05:9c:5d:0f:32:a0:73:e0:8d:fb:cd: d6:5d:1a:74:27:86:f5:25:b0:f1:3a:65:0a:ab:f8:72:da:51: 69:3c:10:2c:ff:73:7c:fb:0b:c5:98:6b:82:b8:60:4f:c4:a2: cf:ba:36:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff68FbrYIyDie/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk NjE3YzkwYjAtNjNlYS00Y2EwLWEwOWEtY2I0MzhkNDZkZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE55zOB3It3EsFeM5xUvQJcPNT3+YgUY6Swl dT/t5peu5l2T86FX3xS8Krit8aw3g/9kv5o0JOiOE/7WovTHfk2bc+F47F1rqvHg 5tVNTcQnhyyAy3rYsFW0OR1wRhRKWAPN83qPXU77WnTgRQLDa7rAt61H570V35sj XZRlbZb1GJuctTsVBeD/j4MPLIm3vplU2s/2BG5js4Qpf782hmGl3eVY4BNEpJgD K3P44JaU+xDPck1FKD6drcOKSHwjMoElY2OR92s/TGXxR17MvTJM+jVOh/9ZUpiT bcVqMosLvnnkhzlfi5AgPXovQ5WzW/grK3EgSvp4ULJbksVLPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDksUssSJAyQdUU8TbfjpHoh5PqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDA1OTkwMzMtZDFhYy0z ZmMxLWE2MjQtY2Q4NjNkNDczN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgdXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZC85l/5bSwToTQIh+ERPB9MnhOZlr1H4feVPGW3+hNVYCe3cr//xC0 Vsl8HbwW+S+OiOtdJ+znZPb10JLg8sZWckrNB13wOrPguRr9QfemwnoVQ3N/ePIC sgjV4kEn6jVw8YruOSkGF0HjOFl6oFiWyV1Zp5eBoJwcmR1dFctJvvbCckeDmTsX HzRqi2Gr+YSUNDAfgNdlhWqFTy93iQs3RTmDpvmlRo+GdkcR3J3Nx2BAq/+tqPZX tyhyNeGLmw/EN/9hbAj/PmFeC/kFnF0PMqBz4I37zdZdGnQnhvUlsPE6ZQqr+HLa UWk8ECz/c3z7C8WYa4K4YE/Eos+6NtI= -----END CERTIFICATE-----Generated at Mon Apr 13 19:36:02 2026 by rpki-client