$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81955f4b-78c0-3a2d-9018-f89eea6b3e18.roa File: 81955f4b-78c0-3a2d-9018-f89eea6b3e18.roa (raw, json) Hash identifier: 18H5AX6OoCjXZXjEuKUpLOTGooSbmu84nfCLvOiyrFg= Subject key identifier: CD:20:BD:B8:C6:F7:47:30:86:67:51:B9:A1:94:22:C1:90:CE:27:D1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6EDA8EAB6685DC95A55A9380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81955f4b-78c0-3a2d-9018-f89eea6b3e18.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.213.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:8e:ab:66:85:dc:95:a5:5a:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=aaadf3b9-7786-4198-a185-003462d1a4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:0f:a8:85:11:8d:50:be:3f:a7:2a:ee:d6: 66:57:b4:82:60:66:16:2c:ac:44:92:de:83:04:d0: 63:8c:28:bf:40:cd:0d:3c:48:dd:7c:94:e8:2b:be: 0b:cc:5d:cb:45:7b:85:4f:46:87:7a:64:e3:6e:c2: 53:6f:90:54:67:dd:ff:be:6b:c4:4c:bc:fa:10:6b: 53:53:d1:8b:27:69:84:58:3e:a4:f5:b2:d5:28:13: 92:d3:50:2e:5c:ee:c3:33:34:e1:5d:fb:5c:d5:cb: 40:20:22:71:7f:bb:e7:6c:69:75:38:ff:3f:e0:e7: 3e:82:4c:0f:bb:d2:33:3c:42:e6:72:5c:5a:65:d8: 33:41:20:3d:c7:d0:a8:e3:8e:1e:c1:15:47:17:46: a2:d7:85:90:0a:b9:74:dc:07:51:8d:a6:9c:c7:29: 99:fd:5b:6c:94:81:b5:89:78:1c:ca:7b:50:e1:9a: a8:3d:38:a8:29:42:db:66:5e:62:ef:5f:83:c8:f8: 48:36:ab:df:61:29:05:33:a8:a6:2d:84:df:b0:84: 69:05:9b:5f:b3:88:38:70:63:1e:53:51:c5:7f:8b: a2:65:8d:19:39:72:9a:5c:aa:85:da:78:cd:57:1e: 5c:5b:b1:05:45:8b:99:ea:88:2c:81:15:b5:90:7e: 49:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:20:BD:B8:C6:F7:47:30:86:67:51:B9:A1:94:22:C1:90:CE:27:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81955f4b-78c0-3a2d-9018-f89eea6b3e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ba:0b:6b:3a:ab:50:c3:5b:8b:7a:6c:ab:c5:43:d0:9e:15: 20:e5:5e:74:87:ac:b5:9d:97:f0:7a:be:2a:93:91:a2:01:2b: 2d:17:7c:d1:1c:a3:fa:8a:b9:20:93:4f:34:40:68:3e:69:56: 2a:2f:4d:a4:db:b1:77:ab:e0:4c:1c:06:a5:61:66:4f:2b:4a: 60:0b:8a:fb:48:07:c0:ff:78:5d:d2:92:20:ef:f9:18:f8:6e: a8:98:07:f4:3c:6c:fb:c9:7b:54:ab:11:bf:14:f2:5a:51:cd: a7:0e:d4:37:f1:cf:c7:ab:76:89:c5:2d:0e:34:fc:b8:19:e0: 03:c4:4e:77:22:bc:4f:e0:31:28:54:28:41:66:46:9a:d9:10: 9a:cf:89:a8:af:f8:01:a0:49:70:ed:23:fe:f5:e0:ac:eb:42: ab:b9:dc:a8:d6:88:c6:d5:1c:38:a6:09:04:a9:45:a3:0d:83: 47:44:c3:63:d0:6e:48:71:a8:e8:5b:00:74:b7:9c:b9:8f:db: 27:a7:4b:49:cd:4c:cf:ff:5c:0d:d4:89:2e:09:81:a8:17:b5: bb:f2:1d:12:8b:0a:1e:05:aa:88:a7:8d:14:0b:e2:e6:9b:74: ea:7d:94:ad:d4:90:25:e9:fc:f1:24:eb:21:8f:48:8e:ef:5f: 52:09:27:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2o6rZoXclaVak4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk YWFhZGYzYjktNzc4Ni00MTk4LWExODUtMDAzNDYyZDFhNGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6MPqIURjVC+P6cq7tZmV7SCYGYWLKxEkt6D BNBjjCi/QM0NPEjdfJToK74LzF3LRXuFT0aHemTjbsJTb5BUZ93/vmvETLz6EGtT U9GLJ2mEWD6k9bLVKBOS01AuXO7DMzThXftc1ctAICJxf7vnbGl1OP8/4Oc+gkwP u9IzPELmclxaZdgzQSA9x9Co444ewRVHF0ai14WQCrl03AdRjaacxymZ/VtslIG1 iXgcyntQ4ZqoPTioKULbZl5i71+DyPhINqvfYSkFM6imLYTfsIRpBZtfs4g4cGMe U1HFf4uiZY0ZOXKaXKqF2njNVx5cW7EFRYuZ6ogsgRW1kH5JewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0gvbjG90cwhmdRuaGUIsGQzifRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODE5NTVmNGItNzhjMC0z YTJkLTkwMTgtZjg5ZWVhNmIzZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgdXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW6C2s6q1DDW4t6bKvFQ9CeFSDlXnSHrLWdl/B6viqTkaIBKy0XfNEc o/qKuSCTTzRAaD5pViovTaTbsXer4EwcBqVhZk8rSmALivtIB8D/eF3SkiDv+Rj4 bqiYB/Q8bPvJe1SrEb8U8lpRzacO1Dfxz8erdonFLQ40/LgZ4APETncivE/gMShU KEFmRprZEJrPiaiv+AGgSXDtI/714KzrQqu53KjWiMbVHDimCQSpRaMNg0dEw2PQ bkhxqOhbAHS3nLmP2yenS0nNTM//XA3UiS4JgagXtbvyHRKLCh4FqoinjRQL4uab dOp9lK3UkCXp/PEk6yGPSI7vX1IJJzs= -----END CERTIFICATE-----Generated at Mon Apr 13 14:39:23 2026 by rpki-client