$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ec53ce1-b7bf-3304-90b1-7d4378255d4f.roa File: 2ec53ce1-b7bf-3304-90b1-7d4378255d4f.roa (raw, json) Hash identifier: rzJcnqpWjMMv1NWar2Cf9fgzUVVNHbtb4/FpsX9hIsI= Subject key identifier: 1C:C8:2C:23:A4:AF:F4:86:E9:8D:CA:35:4F:4D:93:52:6C:5D:8D:D1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D86954F4C415D5D24DB974DC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ec53ce1-b7bf-3304-90b1-7d4378255d4f.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 129.149.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4f:4c:41:5d:5d:24:db:97:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=81c37a6a-ccf5-4ab8-b963-d5ee1a983658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:5a:36:01:43:30:bb:2c:e0:e5:f0:e0:0f: 00:57:30:40:a1:db:74:b6:d6:4e:3b:ea:b3:9b:46: 1b:44:93:50:67:7b:df:06:20:49:00:a3:75:f9:f7: 04:4f:92:04:98:8e:5b:db:0d:4d:b6:28:45:1e:93: 11:d7:9a:d7:49:a4:e6:fd:c3:c1:ca:2a:a1:c3:35: 4d:7c:2a:f2:18:eb:33:7f:d3:c8:24:41:e5:36:72: c5:b3:0e:6e:c8:c3:fe:85:e3:62:4e:e5:bf:11:fa: dd:5b:85:28:62:11:c8:fc:35:49:c7:21:5c:fb:92: af:85:9f:99:ed:8a:3e:e9:97:e7:3a:f8:80:4e:d0: 1c:67:ac:5d:62:ef:76:4d:e6:b8:25:8b:d9:23:c1: 82:df:35:68:80:d4:54:aa:71:82:73:fe:fe:8a:52: 3d:40:ae:cc:0a:af:5d:0a:18:e7:79:39:5b:cb:1c: 97:85:4c:3c:c0:62:b4:32:5e:d6:8c:4c:54:ce:40: ea:f8:bd:8c:1b:1c:10:bf:3e:91:22:5e:de:bd:cb: e6:53:46:0f:5c:4b:05:4b:82:f7:38:8d:8e:7c:a2: 1a:4b:06:5f:8e:53:df:ef:f2:18:c0:37:a0:03:36: ca:41:5e:ea:3d:14:c0:e7:14:26:9c:05:0c:86:c1: 83:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C8:2C:23:A4:AF:F4:86:E9:8D:CA:35:4F:4D:93:52:6C:5D:8D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ec53ce1-b7bf-3304-90b1-7d4378255d4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:6e:fe:f3:43:2c:11:29:92:c4:1a:7f:b9:1a:a3:81:a0:af: 30:9a:b8:fc:2d:09:2c:fa:56:38:cb:7a:2f:d6:1e:55:fe:75: 93:58:9d:a5:4b:dd:3f:a9:48:cf:ef:e0:01:96:3d:a5:d3:f4: 04:35:75:c5:97:5f:97:b2:17:7c:19:04:03:63:3b:e3:6e:97: 3b:f8:fd:84:20:ae:a0:47:5a:ce:83:39:35:42:fd:5c:d7:ad: 0d:f9:3c:09:57:8a:cd:ba:9f:2a:26:70:b0:db:b2:5f:42:e0: 17:be:92:be:be:d1:a5:87:1f:35:df:cf:0a:d6:e9:4a:0f:c5: 63:c5:bc:e1:49:5f:7a:9c:a1:59:37:86:9e:24:66:f7:5b:2f: b0:bf:a4:d2:19:63:5d:78:19:3b:76:8f:01:33:bf:91:db:22: 41:12:aa:eb:d1:f5:94:e7:8f:b0:14:bf:7b:94:79:8d:1c:76: 26:b6:df:7f:ca:d2:a2:45:cf:9c:ac:e8:c8:5d:f8:66:fe:66: 61:e8:24:03:58:af:d7:cc:4c:de:4d:b0:e8:9b:03:e1:62:c5: df:dd:34:25:2e:d8:e3:64:74:98:f7:29:87:9f:bd:b9:a7:2c: bc:f6:28:c2:69:38:17:a6:f7:3f:6e:37:52:98:25:0a:e8:67: 84:e8:6e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlU9MQV1dJNuXTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ODFjMzdhNmEtY2NmNS00YWI4LWI5NjMtZDVlZTFhOTgzNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAJaNgFDMLss4OXw4A8AVzBAodt0ttZOO+qz m0YbRJNQZ3vfBiBJAKN1+fcET5IEmI5b2w1NtihFHpMR15rXSaTm/cPByiqhwzVN fCryGOszf9PIJEHlNnLFsw5uyMP+heNiTuW/EfrdW4UoYhHI/DVJxyFc+5KvhZ+Z 7Yo+6ZfnOviATtAcZ6xdYu92Tea4JYvZI8GC3zVogNRUqnGCc/7+ilI9QK7MCq9d ChjneTlbyxyXhUw8wGK0Ml7WjExUzkDq+L2MGxwQvz6RIl7evcvmU0YPXEsFS4L3 OI2OfKIaSwZfjlPf7/IYwDegAzbKQV7qPRTA5xQmnAUMhsGDBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzILCOkr/SG6Y3KNU9Nk1JsXY3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmVjNTNjZTEtYjdiZi0z MzA0LTkwYjEtN2Q0Mzc4MjU1ZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhu/vNDLBEpksQaf7kao4GgrzCauPwtCSz6VjjLei/WHlX+dZNYnaVL 3T+pSM/v4AGWPaXT9AQ1dcWXX5eyF3wZBANjO+Nulzv4/YQgrqBHWs6DOTVC/VzX rQ35PAlXis26nyomcLDbsl9C4Be+kr6+0aWHHzXfzwrW6UoPxWPFvOFJX3qcoVk3 hp4kZvdbL7C/pNIZY114GTt2jwEzv5HbIkESquvR9ZTnj7AUv3uUeY0cdia233/K 0qJFz5ys6Mhd+Gb+ZmHoJANYr9fMTN5NsOibA+Fixd/dNCUu2ONkdJj3KYefvbmn LLz2KMJpOBem9z9uN1KYJQroZ4TobjE= -----END CERTIFICATE-----Generated at Sat Apr 18 01:32:10 2026 by rpki-client