$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa File: f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa (raw, json) Hash identifier: It9ddjvucfIcSWsJz9ojNMpbjoQWHK1LP2xFJAl9bxc= Subject key identifier: 90:20:EF:3B:D2:36:C0:A5:9B:FE:F8:CF:91:55:77:D3:C2:CC:92:18 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6AAA65A303C829E2E6057600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 129.146.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:65:a3:03:c8:29:e2:e6:05:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=abb2d2a6-771c-4054-ac1e-d2e044f0b235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:55:2a:6b:f0:da:e0:dd:fd:92:50:c1:f1:22: 71:40:68:0c:3a:47:c5:4e:f6:7c:a6:f5:32:31:77: 86:6f:7e:1a:13:a1:e8:39:e2:6a:9f:7a:ea:a4:78: 13:bd:88:80:ec:ef:b5:50:54:2b:2a:2b:0a:55:ad: dc:ee:fe:8d:ef:2a:75:45:7a:94:57:70:1a:2f:81: 40:17:7d:9b:84:39:4e:5b:00:d0:62:2f:58:e8:04: 33:e6:c4:a8:cc:52:2e:60:18:07:13:b4:dd:93:cc: f3:b0:1a:c1:7e:5c:99:12:d6:98:2d:f4:e4:f3:f7: aa:99:cc:68:b1:dd:62:86:86:19:b7:66:91:fa:f8: 68:7b:e1:50:85:a4:62:b3:65:1c:7f:ad:b1:6d:1f: da:ac:40:d8:6c:38:87:93:63:a1:f1:f4:59:e8:69: 2c:da:7f:24:5e:dc:0e:49:11:5c:b7:a6:4e:a1:59: 00:1a:75:28:1b:b9:2e:e7:bc:90:aa:f2:54:c8:37: c3:22:66:47:a5:b4:4b:9d:ad:6e:0b:3b:c5:2c:66: 70:fa:25:17:58:1f:d2:a0:9a:a7:a6:24:6c:41:b2: e6:50:6e:6a:d1:bb:40:49:0c:43:a6:28:68:39:8f: 5d:7e:53:6f:61:7b:8a:ab:22:06:c6:23:d6:e4:9c: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:20:EF:3B:D2:36:C0:A5:9B:FE:F8:CF:91:55:77:D3:C2:CC:92:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:32:8d:bb:fa:3d:c0:88:d8:87:8c:08:41:d6:48:18:4b:fa: 95:9d:f5:dd:19:7d:4f:4f:55:8f:c1:95:5f:7e:cd:f2:d7:3f: d4:e4:24:d6:b3:b1:1e:99:88:48:62:4f:e1:58:f4:88:59:41: 07:26:c6:94:a7:0d:7d:61:5c:31:c4:54:f6:d0:ca:3c:4e:31: b8:87:e6:c9:fa:83:27:5f:79:45:9c:e8:63:31:3b:f4:ae:c0: f9:f5:bd:a5:1e:cf:5f:76:45:ff:a6:2c:05:aa:08:49:c9:e9: 6a:9e:d5:fa:cc:71:50:f2:5e:e1:99:8d:b5:c2:a2:97:84:f1: d9:d9:17:57:4c:e3:8b:0d:85:55:2a:4c:9b:4b:a0:c3:c7:94: 0c:f1:f1:4e:06:2f:6d:32:be:6a:95:72:7b:18:cd:04:a6:ef: 5c:d3:82:1d:3f:86:8a:40:05:99:ae:b7:4d:c2:be:98:7a:64: d3:f9:bb:7e:2e:81:97:9b:20:e8:b6:66:94:e6:ad:36:35:d3: e0:6e:b9:da:44:f7:e0:14:38:25:d5:ec:56:5e:f6:10:ee:d6: bf:f8:56:f0:e6:c8:e8:e5:a7:34:40:e7:da:b9:03:55:81:c6: 4f:04:42:f3:e6:99:93:a3:3f:b9:64:a5:5a:2a:f8:86:31:3f: 2f:43:9f:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqmWjA8gp4uYFdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YWJiMmQyYTYtNzcxYy00MDU0LWFjMWUtZDJlMDQ0ZjBiMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFUqa/Da4N39klDB8SJxQGgMOkfFTvZ8pvUy MXeGb34aE6HoOeJqn3rqpHgTvYiA7O+1UFQrKisKVa3c7v6N7yp1RXqUV3AaL4FA F32bhDlOWwDQYi9Y6AQz5sSozFIuYBgHE7Tdk8zzsBrBflyZEtaYLfTk8/eqmcxo sd1ihoYZt2aR+vhoe+FQhaRis2Ucf62xbR/arEDYbDiHk2Oh8fRZ6Gks2n8kXtwO SRFct6ZOoVkAGnUoG7ku57yQqvJUyDfDImZHpbRLna1uCzvFLGZw+iUXWB/SoJqn piRsQbLmUG5q0btASQxDpihoOY9dflNvYXuKqyIGxiPW5JyrCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAg7zvSNsClm/74z5FVd9PCzJIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjQyZDM0OWYtNmVlNC0z NmY0LWFjNTItY2RhNDJmZTI5MWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQyjbv6PcCI2IeMCEHWSBhL+pWd9d0ZfU9PVY/BlV9+zfLXP9TkJNaz sR6ZiEhiT+FY9IhZQQcmxpSnDX1hXDHEVPbQyjxOMbiH5sn6gydfeUWc6GMxO/Su wPn1vaUez192Rf+mLAWqCEnJ6Wqe1frMcVDyXuGZjbXCopeE8dnZF1dM44sNhVUq TJtLoMPHlAzx8U4GL20yvmqVcnsYzQSm71zTgh0/hopABZmut03Cvph6ZNP5u34u gZebIOi2ZpTmrTY10+BuudpE9+AUOCXV7FZe9hDu1r/4VvDmyOjlpzRA59q5A1WB xk8EQvPmmZOjP7lkpVoq+IYxPy9Dn1w= -----END CERTIFICATE-----Generated at Mon Apr 13 14:42:06 2026 by rpki-client