$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68ee1f7e-77c2-382c-be5e-750448718bd9.roa File: 68ee1f7e-77c2-382c-be5e-750448718bd9.roa (raw, json) Hash identifier: JPggF3lIg6L4IC4YX39XxRpFKhV+wuQPzF2gDLVm4wY= Subject key identifier: C7:82:F4:4D:85:E4:64:ED:31:F5:A9:DC:BA:C5:CE:A9:80:B4:E5:D2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A8242765D59A7ED6B4A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68ee1f7e-77c2-382c-be5e-750448718bd9.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.154.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:82:42:76:5d:59:a7:ed:6b:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=8cf16d7e-b269-4fab-b470-27468b1c8693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:cf:d5:92:88:58:dc:26:0b:df:1d:8a:40: 52:2a:61:8e:3f:f8:b2:f0:79:2a:40:fa:31:d5:a8: 4b:49:49:71:ff:76:a0:cd:6a:45:66:b5:7a:9e:be: 33:78:80:01:f9:eb:6a:19:d0:bb:a9:f5:65:37:f7: d8:43:24:87:24:36:a0:23:0f:58:c6:30:67:44:d7: 3f:58:02:7b:b4:d3:64:ed:ff:9d:26:91:f1:3f:05: 51:0d:79:a1:19:4b:36:70:9f:6e:a2:70:bf:81:e5: 3a:a8:e3:0c:ed:f6:2a:6b:ba:3b:65:50:03:8a:46: 6b:a5:73:81:ce:b9:4e:87:f7:cf:56:69:c3:dd:db: e8:3d:49:e8:22:4f:31:84:36:2e:7d:77:c4:d5:95: 22:d6:94:98:cb:4f:71:99:54:4e:f1:7e:96:bf:46: 33:c8:c9:79:b0:13:5b:6b:85:23:ea:d2:61:f2:3c: 52:f4:c8:57:9f:fc:4d:8e:66:29:f1:e4:f7:0b:db: 22:cf:0a:6e:4a:f3:7d:79:0a:78:c8:a5:b6:ca:2d: 4e:b5:ce:73:4d:fd:b0:89:20:3e:78:41:1e:26:b1: 61:70:9d:0a:1b:57:32:76:6f:e8:78:b5:43:f7:0c: bb:63:2b:bf:df:73:87:4f:38:3b:8f:e5:ef:eb:6b: 38:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:82:F4:4D:85:E4:64:ED:31:F5:A9:DC:BA:C5:CE:A9:80:B4:E5:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68ee1f7e-77c2-382c-be5e-750448718bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.154.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3b:94:35:da:a8:5d:d3:82:f8:39:1d:ec:4d:18:93:63:77: ca:cb:5f:e5:e4:b4:ad:35:4a:a5:70:cc:b3:37:dc:47:8a:42: 46:bf:d4:cd:8b:ab:33:1d:4f:6d:a8:73:18:74:bc:65:b1:ac: 3b:0d:3d:9b:a5:b5:7f:44:04:ef:ec:a0:02:2a:aa:c0:35:98: 30:74:6a:68:20:30:26:e1:24:d7:ec:c3:73:16:3a:a6:da:f5: b5:99:7d:6b:a5:d6:14:63:37:71:19:28:e1:f9:9c:5b:46:84: dc:1b:34:a3:02:70:0b:e6:4c:eb:d7:16:23:25:3a:91:30:e6: 01:aa:2e:32:97:20:6b:78:ee:c2:d4:7c:88:5a:49:c9:35:dd: b2:5c:18:89:7c:b4:f2:1d:67:d1:3a:ba:55:eb:c5:3f:3f:a6: 93:a5:78:98:9b:b3:51:ef:39:7a:cf:4f:10:6f:bb:c7:e9:40: 4d:a1:c7:48:a3:9c:3c:6d:d5:c4:de:3d:41:f4:74:7e:49:5f: 46:d0:6d:f5:a5:26:ac:23:9c:68:a3:1c:67:1c:cf:03:ef:0c: ff:53:7e:66:1a:c9:af:2c:86:50:17:40:e8:04:4a:87:40:e2: 14:dd:89:26:af:ab:48:8a:2e:06:d4:6b:f0:6f:57:d3:b4:ad: f7:f4:a4:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moJCdl1Zp+1rSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk OGNmMTZkN2UtYjI2OS00ZmFiLWI0NzAtMjc0NjhiMWM4NjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUHP1ZKIWNwmC98dikBSKmGOP/iy8HkqQPox 1ahLSUlx/3agzWpFZrV6nr4zeIAB+etqGdC7qfVlN/fYQySHJDagIw9YxjBnRNc/ WAJ7tNNk7f+dJpHxPwVRDXmhGUs2cJ9uonC/geU6qOMM7fYqa7o7ZVADikZrpXOB zrlOh/fPVmnD3dvoPUnoIk8xhDYufXfE1ZUi1pSYy09xmVRO8X6Wv0YzyMl5sBNb a4Uj6tJh8jxS9MhXn/xNjmYp8eT3C9sizwpuSvN9eQp4yKW2yi1Otc5zTf2wiSA+ eEEeJrFhcJ0KG1cydm/oeLVD9wy7Yyu/33OHTzg7j+Xv62s4MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeC9E2F5GTtMfWp3LrFzqmAtOXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjhlZTFmN2UtNzdjMi0z ODJjLWJlNWUtNzUwNDQ4NzE4YmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk7lDXaqF3Tgvg5HexNGJNjd8rLX+XktK01SqVwzLM33EeKQka/1M2L qzMdT22ocxh0vGWxrDsNPZultX9EBO/soAIqqsA1mDB0amggMCbhJNfsw3MWOqba 9bWZfWul1hRjN3EZKOH5nFtGhNwbNKMCcAvmTOvXFiMlOpEw5gGqLjKXIGt47sLU fIhaSck13bJcGIl8tPIdZ9E6ulXrxT8/ppOleJibs1HvOXrPTxBvu8fpQE2hx0ij nDxt1cTePUH0dH5JX0bQbfWlJqwjnGijHGcczwPvDP9TfmYaya8shlAXQOgESodA 4hTdiSavq0iKLgbUa/BvV9O0rff0pHE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:19:42 2026 by rpki-client