$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15edd498-834c-38f4-b20d-fc8a14e023d3.roa File: 15edd498-834c-38f4-b20d-fc8a14e023d3.roa (raw, json) Hash identifier: hzl412B6JR2qo3YHd2A+gw3AGHGL5L4gqVx+gUOSrpk= Subject key identifier: E7:1F:BD:B9:2C:DF:74:05:70:24:0C:71:55:33:34:13:D7:B8:CC:FC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A759D075CCED9CBE95800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15edd498-834c-38f4-b20d-fc8a14e023d3.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.148.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:75:9d:07:5c:ce:d9:cb:e9:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=36f85ca5-2487-4d9f-b88b-75cc8b04bd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2b:9d:ef:ff:e8:51:ba:4d:e8:8a:a3:51:68: ab:d4:cf:c0:3b:79:a2:9f:ab:97:9f:cb:25:c9:d6: ef:b3:69:17:4b:c7:ec:47:76:df:da:b1:d6:56:5e: ae:38:63:5e:35:d7:f4:28:8a:00:6e:b5:0c:cb:62: a5:77:45:62:77:80:f1:45:60:7d:67:0b:26:02:04: d2:a7:8d:26:77:a8:47:eb:d6:bf:d3:02:2e:80:9e: 69:8f:d0:63:6b:d4:52:52:aa:a8:ff:1c:41:e2:6c: 88:ed:72:70:f4:d5:af:99:af:65:78:81:83:16:3a: a2:65:57:b9:70:0e:cd:cf:22:04:5b:fd:75:51:da: 8b:86:7a:58:b7:ab:02:c6:3b:de:6a:4e:44:fd:6c: 17:42:5b:e8:59:42:63:35:3e:f1:43:70:7d:08:95: 2e:23:0d:5b:78:fa:11:d4:8a:a0:44:34:96:32:f2: 23:53:eb:54:05:90:99:89:ce:dd:97:2d:6d:35:7d: 56:7b:da:03:14:8d:f9:31:ee:9d:73:d8:af:ea:cd: cb:55:51:74:e3:6d:68:a7:9d:64:85:28:13:d7:e4: 0b:7a:6f:f5:e9:ee:29:ca:07:4b:4f:c7:63:34:f2: fa:f2:8c:82:e1:a8:e3:0b:7a:f2:64:c3:94:fc:10: 99:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1F:BD:B9:2C:DF:74:05:70:24:0C:71:55:33:34:13:D7:B8:CC:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15edd498-834c-38f4-b20d-fc8a14e023d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:14:c8:d2:2c:31:ee:6f:89:24:7a:cf:a4:cb:db:17:95:19: aa:1e:8b:b1:ba:57:d8:10:ef:78:89:a5:57:76:a7:3c:c8:4d: 36:98:29:6a:5b:66:a5:84:a0:8a:bc:33:b3:04:d2:60:41:a4: f3:76:24:16:12:56:88:e6:72:b7:fa:76:78:43:16:bc:0c:f3: bf:d7:a9:97:e2:9f:c3:78:56:45:ee:0e:e1:78:7e:ec:e6:71: 78:21:52:44:e6:a7:4a:09:e9:a2:91:00:06:02:cf:29:b2:4d: d7:d5:6f:8a:77:27:d7:31:ad:95:78:59:d5:41:9f:10:fa:6a: 66:72:e8:78:88:8f:b1:3b:fb:9b:b7:bb:27:4d:fd:a4:aa:d0: 80:dd:bd:a5:ee:63:fe:67:6e:3e:73:f5:23:b5:68:f5:e4:4d: 82:68:16:ec:9b:1b:74:54:d3:5e:be:b1:4c:cc:44:30:85:1d: 96:c3:96:28:73:2d:19:e6:8a:5d:d8:16:9a:d4:47:ce:78:01: ca:10:e4:60:69:8a:af:2b:09:13:12:8b:e0:34:64:3e:0d:96: 49:81:20:97:86:83:e7:71:9b:35:89:f1:04:e5:38:0f:02:ca: 32:c1:a8:ae:a9:db:2e:41:aa:e4:38:17:13:51:35:44:15:f8: ba:69:f6:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mnWdB1zO2cvpWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MzZmODVjYTUtMjQ4Ny00ZDlmLWI4OGItNzVjYzhiMDRiZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCud7//oUbpN6IqjUWir1M/AO3min6uXn8sl ydbvs2kXS8fsR3bf2rHWVl6uOGNeNdf0KIoAbrUMy2Kld0Vid4DxRWB9ZwsmAgTS p40md6hH69a/0wIugJ5pj9Bja9RSUqqo/xxB4myI7XJw9NWvma9leIGDFjqiZVe5 cA7NzyIEW/11UdqLhnpYt6sCxjveak5E/WwXQlvoWUJjNT7xQ3B9CJUuIw1bePoR 1IqgRDSWMvIjU+tUBZCZic7dly1tNX1We9oDFI35Me6dc9iv6s3LVVF0421op51k hSgT1+QLem/16e4pygdLT8djNPL68oyC4ajjC3ryZMOU/BCZ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcfvbks33QFcCQMcVUzNBPXuMz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTVlZGQ0OTgtODM0Yy0z OGY0LWIyMGQtZmM4YTE0ZTAyM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoUyNIsMe5viSR6z6TL2xeVGaoei7G6V9gQ73iJpVd2pzzITTaYKWpb ZqWEoIq8M7ME0mBBpPN2JBYSVojmcrf6dnhDFrwM87/XqZfin8N4VkXuDuF4fuzm cXghUkTmp0oJ6aKRAAYCzymyTdfVb4p3J9cxrZV4WdVBnxD6amZy6HiIj7E7+5u3 uydN/aSq0IDdvaXuY/5nbj5z9SO1aPXkTYJoFuybG3RU016+sUzMRDCFHZbDlihz LRnmil3YFprUR854AcoQ5GBpiq8rCRMSi+A0ZD4NlkmBIJeGg+dxmzWJ8QTlOA8C yjLBqK6p2y5BquQ4FxNRNUQV+Lpp9oA= -----END CERTIFICATE-----Generated at Fri Apr 17 17:57:59 2026 by rpki-client