$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c049037e-117e-3eb5-82ce-a329762a267d.roa File: c049037e-117e-3eb5-82ce-a329762a267d.roa (raw, json) Hash identifier: OQBmyrxd/FcgL3bUTgKjW5irq6ckWB9rprIoaIfkAqs= Subject key identifier: B3:C8:39:A1:C7:48:AB:1F:B0:58:54:FF:15:78:70:91:0D:8E:BF:3E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D5F7FB207C61E83342A630E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c049037e-117e-3eb5-82ce-a329762a267d.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 46558 IP address blocks: 129.213.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:b2:07:c6:1e:83:34:2a:63:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=7f8588b1-39cb-47e2-9393-2a17a7bf2b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ad:91:8b:01:53:75:3f:23:39:bc:d3:40:69: 1b:62:ca:50:a7:c3:9d:7c:7a:30:de:2a:da:3b:ca: fc:4e:e6:58:fa:a4:4d:b5:f5:53:ec:34:aa:dd:df: 38:f1:9f:47:30:6f:49:71:7f:49:14:60:70:a9:ef: a6:7f:f2:ef:dd:11:29:86:0d:93:46:bf:31:08:81: c5:c3:02:71:fe:de:2b:58:da:5a:4e:72:a4:e9:66: d6:a8:90:5d:5a:29:da:ff:87:25:ea:fe:d3:9d:ca: c8:cf:ad:47:39:87:d0:0d:df:d3:7c:d0:96:5c:fe: 9e:f6:9d:1f:f7:e2:e3:76:54:06:ca:86:89:6d:08: 2e:a9:1c:e0:d7:c9:9d:d5:dc:7c:80:b0:35:b7:15: 50:06:7f:ac:70:ac:20:0e:b4:e3:59:33:59:bf:22: e7:d2:df:cd:ea:74:f8:97:95:d5:05:f5:ca:e9:b7: a1:89:88:73:ef:7e:02:74:0b:4a:73:ed:ee:97:fa: d3:80:af:43:49:11:56:79:3b:a8:67:9c:0b:d2:76: 04:31:ce:6c:d4:76:30:4a:90:c5:89:ed:1b:bc:de: 4b:1b:d3:f1:25:8b:fa:0c:9c:72:0c:9f:30:20:98: c1:5a:83:84:3d:a7:1c:09:b6:2a:a7:2f:9d:15:ef: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C8:39:A1:C7:48:AB:1F:B0:58:54:FF:15:78:70:91:0D:8E:BF:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c049037e-117e-3eb5-82ce-a329762a267d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:60:18:11:39:c8:0d:cd:0b:a0:37:46:4d:93:e3:d9:1e:7c: 37:a0:ed:02:f1:95:c3:a8:12:05:7a:0d:2a:9c:41:13:9e:29: f6:32:a9:9b:59:2b:39:f9:9d:cd:e1:49:48:17:11:e3:d5:01: aa:f8:e2:7b:aa:50:cd:72:e4:09:1f:df:3a:4a:f6:e2:03:af: 9d:9a:26:b8:a0:c5:94:40:65:78:7c:15:fa:b5:7c:9c:75:69: 9f:94:eb:6c:94:13:3d:0a:4e:fe:b9:c8:40:5a:bf:f9:f6:d9: 72:11:ff:09:ff:33:b8:12:34:4a:cc:ca:4d:b0:f3:ea:f0:cf: 58:c4:3f:36:4c:09:24:5d:d4:20:66:20:ad:0a:87:5d:39:02: 21:63:02:1f:e5:75:26:b5:72:4a:2d:a2:2a:0d:83:8f:c6:a2: e4:aa:32:05:a0:cf:af:f4:b1:ec:23:c5:c4:31:08:e0:ce:ff: bc:26:87:10:ef:25:e4:de:82:0f:9c:46:df:ac:c6:43:9f:33: 35:d0:64:3a:e8:f6:67:64:8f:a1:98:35:b4:a7:46:d1:72:59: 3d:48:a3:0c:6c:b8:77:e6:1d:7f:72:63:6c:f6:6d:e5:ff:86: 29:61:b5:18:e5:25:39:dc:82:64:67:44:5e:5a:a1:f0:5c:a2: f8:f5:bd:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff7IHxh6DNCpjDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk N2Y4NTg4YjEtMzljYi00N2UyLTkzOTMtMmExN2E3YmYyYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq2RiwFTdT8jObzTQGkbYspQp8OdfHow3ira O8r8TuZY+qRNtfVT7DSq3d848Z9HMG9JcX9JFGBwqe+mf/Lv3REphg2TRr8xCIHF wwJx/t4rWNpaTnKk6WbWqJBdWina/4cl6v7TncrIz61HOYfQDd/TfNCWXP6e9p0f 9+LjdlQGyoaJbQguqRzg18md1dx8gLA1txVQBn+scKwgDrTjWTNZvyLn0t/N6nT4 l5XVBfXK6behiYhz734CdAtKc+3ul/rTgK9DSRFWeTuoZ5wL0nYEMc5s1HYwSpDF ie0bvN5LG9PxJYv6DJxyDJ8wIJjBWoOEPaccCbYqpy+dFe8xrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPIOaHHSKsfsFhU/xV4cJENjr8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzA0OTAzN2UtMTE3ZS0z ZWI1LTgyY2UtYTMyOTc2MmEyNjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgdX7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdgGBE5yA3NC6A3Rk2T49kefDeg7QLxlcOoEgV6DSqcQROeKfYyqZtZ Kzn5nc3hSUgXEePVAar44nuqUM1y5Akf3zpK9uIDr52aJrigxZRAZXh8Ffq1fJx1 aZ+U62yUEz0KTv65yEBav/n22XIR/wn/M7gSNErMyk2w8+rwz1jEPzZMCSRd1CBm IK0Kh105AiFjAh/ldSa1ckotoioNg4/GouSqMgWgz6/0sewjxcQxCODO/7wmhxDv JeTegg+cRt+sxkOfMzXQZDro9mdkj6GYNbSnRtFyWT1IowxsuHfmHX9yY2z2beX/ hilhtRjlJTncgmRnRF5aofBcovj1vdA= -----END CERTIFICATE-----Generated at Mon Apr 13 19:34:16 2026 by rpki-client