$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6379d20-6f01-316b-89b3-5a589ab59002.roa File: a6379d20-6f01-316b-89b3-5a589ab59002.roa (raw, json) Hash identifier: N7rDtSTJqYp62ERQoRxvxfbcpamigl5YtTAgsmEeYow= Subject key identifier: 72:DC:2D:68:F1:90:97:41:10:0D:92:E7:1E:96:7C:20:F5:FE:B5:6D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6AAAAB327DC29394DA49F2E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6379d20-6f01-316b-89b3-5a589ab59002.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 129.146.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:ab:32:7d:c2:93:94:da:49:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=817a2133-2e5a-451e-afd2-1dd47b63b8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:99:f2:28:20:53:17:25:eb:4e:a6:f2:0c:9b: c4:6d:59:e3:e8:a5:9f:e6:7b:b6:b8:f6:8b:02:9a: e1:c4:4b:1c:cc:70:65:c1:69:ad:e1:2e:9a:32:0f: 39:30:3d:cd:93:ec:80:09:17:df:15:1c:da:3d:af: 83:e4:d3:7e:32:18:ae:9f:69:d6:3b:9b:0b:6e:87: c4:db:5e:7a:db:5c:8e:b0:f5:40:e5:f8:4d:73:13: 63:43:03:5b:18:a2:fd:c0:04:32:55:d1:a2:7a:5a: 78:02:c2:74:42:0e:97:37:a6:b2:6b:60:58:aa:23: 06:31:0a:b6:0e:8b:a3:dd:05:82:33:31:3d:63:46: 3d:61:9a:8d:6d:56:7c:f6:86:84:1c:b4:32:53:2c: 43:40:48:f9:b2:a0:2d:e9:cd:a5:cc:52:ff:eb:97: 66:7d:d3:e4:58:2f:a1:8b:d1:88:13:fc:b5:18:1f: b2:61:b7:f0:a1:e0:33:2e:ea:3f:bd:71:71:fe:91: c6:31:bf:ce:5d:e4:2d:a5:fe:d5:f5:0f:50:4f:1c: 2e:55:95:c0:d2:71:82:11:23:2a:37:73:e6:95:8e: 13:1f:14:01:29:cf:2c:f6:23:0f:83:3a:8b:70:52: a7:70:c8:7b:f8:e5:4c:46:03:30:e3:60:9b:81:88: 44:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DC:2D:68:F1:90:97:41:10:0D:92:E7:1E:96:7C:20:F5:FE:B5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6379d20-6f01-316b-89b3-5a589ab59002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:17:6e:b2:94:5f:77:5f:17:6f:f5:d8:48:c3:f7:3c:11:93: e0:9b:38:fe:cb:f4:71:cc:9f:18:11:05:1a:27:ea:ee:7d:91: ff:63:e4:34:da:06:88:e3:2b:a9:71:76:15:85:2e:4f:38:45: 07:f1:f1:00:d7:42:c5:73:cd:f6:8f:f0:14:a6:63:07:3b:e6: 1b:16:81:e9:f6:9a:14:91:f1:e4:93:73:4f:ab:36:b8:d6:18: fd:d9:49:28:e5:16:aa:4d:4d:43:63:30:6e:e7:06:c1:b6:40: 05:89:84:c4:ad:e7:ec:07:02:18:36:6d:ab:2b:8d:64:c0:20: bb:24:df:f6:7f:0b:99:f9:fc:52:bb:e3:e2:0c:2c:5d:2e:02: f4:4f:0c:58:f5:d6:7d:23:62:25:89:96:05:4e:a8:14:de:64: e4:a1:92:c9:83:57:e8:90:f7:e6:af:94:b5:e6:2b:8f:eb:f1: a2:e4:0c:2c:0b:e3:5b:86:cd:04:7a:b0:d7:d6:78:cc:dd:d5: 8d:71:5a:39:48:56:d5:d7:1c:96:4f:dd:d2:93:d2:dd:06:27: 03:22:52:0f:5e:f2:bf:46:33:83:26:e3:77:e6:b4:ee:07:5f: 6b:e0:2c:77:2b:c0:71:09:77:c6:6f:87:1a:6f:59:40:a3:78: c2:71:f9:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqsyfcKTlNpJ8uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ODE3YTIxMzMtMmU1YS00NTFlLWFmZDItMWRkNDdiNjNiOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZnyKCBTFyXrTqbyDJvEbVnj6KWf5nu2uPaL AprhxEsczHBlwWmt4S6aMg85MD3Nk+yACRffFRzaPa+D5NN+Mhiun2nWO5sLbofE 215621yOsPVA5fhNcxNjQwNbGKL9wAQyVdGielp4AsJ0Qg6XN6aya2BYqiMGMQq2 Douj3QWCMzE9Y0Y9YZqNbVZ89oaEHLQyUyxDQEj5sqAt6c2lzFL/65dmfdPkWC+h i9GIE/y1GB+yYbfwoeAzLuo/vXFx/pHGMb/OXeQtpf7V9Q9QTxwuVZXA0nGCESMq N3PmlY4THxQBKc8s9iMPgzqLcFKncMh7+OVMRgMw42CbgYhEkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLcLWjxkJdBEA2S5x6WfCD1/rVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTYzNzlkMjAtNmYwMS0z MTZiLTg5YjMtNWE1ODlhYjU5MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkXbrKUX3dfF2/12EjD9zwRk+CbOP7L9HHMnxgRBRon6u59kf9j5DTa BojjK6lxdhWFLk84RQfx8QDXQsVzzfaP8BSmYwc75hsWgen2mhSR8eSTc0+rNrjW GP3ZSSjlFqpNTUNjMG7nBsG2QAWJhMSt5+wHAhg2basrjWTAILsk3/Z/C5n5/FK7 4+IMLF0uAvRPDFj11n0jYiWJlgVOqBTeZOShksmDV+iQ9+avlLXmK4/r8aLkDCwL 41uGzQR6sNfWeMzd1Y1xWjlIVtXXHJZP3dKT0t0GJwMiUg9e8r9GM4Mm43fmtO4H X2vgLHcrwHEJd8ZvhxpvWUCjeMJx+WY= -----END CERTIFICATE-----Generated at Mon Apr 13 14:40:53 2026 by rpki-client