$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40be300f-53cf-3207-a2f8-f0db5cddc9de.roa File: 40be300f-53cf-3207-a2f8-f0db5cddc9de.roa (raw, json) Hash identifier: q4SBxEzSWTAZ939e91pfT6Sft7tLQFmzG0dLFHNKUdE= Subject key identifier: 39:EE:C1:8A:D2:25:6A:F0:BD:03:05:62:56:67:94:07:91:58:66:77 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6AAA7E288B09CE91F6DE3FA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40be300f-53cf-3207-a2f8-f0db5cddc9de.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 129.213.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:7e:28:8b:09:ce:91:f6:de:3f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=c51450c5-99fe-4447-bf1b-c8bb1ae59a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ee:a2:a3:89:a0:2c:9a:97:2d:11:94:1d:1e: 93:69:77:22:7b:a9:bd:a5:a9:b6:5c:3c:1d:3c:84: 9b:4e:a8:19:a8:4b:f2:a1:36:62:c6:10:67:d2:36: 86:7b:6a:55:82:5a:0c:12:fb:06:53:e8:62:f0:c8: c1:04:cc:56:9f:b8:d5:73:37:21:67:01:b3:31:06: 50:fa:be:dd:4d:af:6e:ca:44:51:28:ad:5f:fb:64: 4c:d8:d4:85:55:28:bf:7c:77:1e:a7:1b:2e:e3:fb: 47:17:25:ac:6d:05:b6:d2:ea:87:2c:1e:95:2d:ce: b8:ab:02:4c:a6:c6:d7:d8:9c:d1:58:85:5b:7a:79: 08:26:17:10:aa:2e:54:95:5f:88:a9:6b:62:e8:f2: 2f:10:94:ee:83:87:75:6c:aa:f0:ad:f1:ea:d4:5d: e3:1b:ba:49:80:2b:71:7a:20:47:b2:3f:2d:81:64: d4:d1:b7:a8:d4:91:fd:5c:2c:54:5f:f6:11:4b:b0: 29:1e:41:cd:01:74:f1:e0:03:b1:11:fe:11:aa:99: 5e:bf:b8:0f:fd:ab:8d:12:f5:fb:d3:b6:ef:30:69: 81:a9:1a:51:6d:63:4a:eb:18:55:bb:1d:dd:27:df: 9d:af:46:ba:e1:40:e8:ec:4f:71:df:1b:5e:45:16: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EE:C1:8A:D2:25:6A:F0:BD:03:05:62:56:67:94:07:91:58:66:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40be300f-53cf-3207-a2f8-f0db5cddc9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:be:e3:d4:c0:92:3f:19:c3:d6:1a:c3:03:57:77:0b:b5:70: 2d:45:a2:4f:19:37:b6:7c:77:79:42:fd:93:5a:02:0d:e1:76: e7:bb:08:9a:4e:77:5b:ef:a2:72:29:df:9e:d4:2a:05:ef:7b: 62:69:df:6d:2b:ad:5f:15:0b:4d:1c:be:d8:db:a9:a7:e7:11: 60:7e:1b:02:3e:bf:7a:ec:18:da:cc:e8:50:4d:f2:62:11:2a: 4e:a1:4e:80:74:f3:52:fc:c6:1e:c9:db:6f:8e:8e:c9:da:19: c1:aa:49:19:57:d0:84:16:f7:07:25:68:76:5c:84:49:2d:31: 92:e1:68:66:3d:a7:09:02:74:87:4f:80:71:d6:94:7b:bd:ae: 0e:1d:da:63:e3:92:24:9e:35:cb:7a:04:22:95:56:63:26:54: 13:33:76:55:ac:50:0c:e7:f7:ab:2b:1c:bf:a3:c0:a0:fb:91: 75:2e:a7:88:f9:a0:b5:a2:cb:05:28:35:f6:65:03:38:98:94: 1f:07:b5:22:ca:b4:c8:99:ce:8b:b0:8f:93:78:ad:f0:4f:99: de:bc:04:bd:ed:eb:5f:14:ed:f7:4f:fa:d8:19:98:e5:52:01: bf:68:ba:3b:13:39:65:16:cb:f6:73:87:3b:1c:3e:04:71:ad: 1c:8c:32:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqn4oiwnOkfbeP6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YzUxNDUwYzUtOTlmZS00NDQ3LWJmMWItYzhiYjFhZTU5YTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje6io4mgLJqXLRGUHR6TaXcie6m9pam2XDwd PISbTqgZqEvyoTZixhBn0jaGe2pVgloMEvsGU+hi8MjBBMxWn7jVczchZwGzMQZQ +r7dTa9uykRRKK1f+2RM2NSFVSi/fHcepxsu4/tHFyWsbQW20uqHLB6VLc64qwJM psbX2JzRWIVbenkIJhcQqi5UlV+IqWti6PIvEJTug4d1bKrwrfHq1F3jG7pJgCtx eiBHsj8tgWTU0beo1JH9XCxUX/YRS7ApHkHNAXTx4AOxEf4Rqplev7gP/auNEvX7 07bvMGmBqRpRbWNK6xhVux3dJ9+dr0a64UDo7E9x3xteRRam+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnuwYrSJWrwvQMFYlZnlAeRWGZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDBiZTMwMGYtNTNjZi0z MjA3LWEyZjgtZjBkYjVjZGRjOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgdUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6+49TAkj8Zw9YawwNXdwu1cC1Fok8ZN7Z8d3lC/ZNaAg3hdue7CJpO d1vvonIp357UKgXve2Jp320rrV8VC00cvtjbqafnEWB+GwI+v3rsGNrM6FBN8mIR Kk6hToB081L8xh7J22+OjsnaGcGqSRlX0IQW9wclaHZchEktMZLhaGY9pwkCdIdP gHHWlHu9rg4d2mPjkiSeNct6BCKVVmMmVBMzdlWsUAzn96srHL+jwKD7kXUup4j5 oLWiywUoNfZlAziYlB8HtSLKtMiZzouwj5N4rfBPmd68BL3t618U7fdP+tgZmOVS Ab9oujsTOWUWy/ZzhzscPgRxrRyMMo4= -----END CERTIFICATE-----Generated at Mon Apr 13 14:39:23 2026 by rpki-client