$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cce90f5-ddfd-358a-9aa0-2c939d9225c0.roa File: 7cce90f5-ddfd-358a-9aa0-2c939d9225c0.roa (raw, json) Hash identifier: laEjVmApZp2kLf1h9OMKcZ1M7gqSNHuK9STiGkw/Du0= Subject key identifier: E3:44:81:8F:26:22:4E:B1:DE:C0:BB:02:23:5F:AA:5D:92:73:22:E0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A9E6E8DE8B8160D8ACD40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cce90f5-ddfd-358a-9aa0-2c939d9225c0.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 129.148.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:9e:6e:8d:e8:b8:16:0d:8a:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=f00c2926-cf5f-4b05-80d3-756089fb6f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:59:99:08:22:6d:c8:28:20:8e:9b:17:af:90: cb:da:3c:d2:05:f2:74:42:25:32:93:b0:8c:69:91: 8a:71:58:76:ac:e7:9c:4d:b8:bf:31:2d:fc:d8:36: 4d:32:b7:7f:2a:86:c3:83:b8:eb:fb:60:bf:d0:58: cc:c2:07:03:09:97:bb:04:ce:ee:ab:ac:1c:a9:de: ec:b4:04:08:3f:2a:e5:97:24:39:0a:30:38:c6:0b: 6e:8a:53:cd:b5:dd:52:e1:d4:b9:01:41:30:b6:af: 85:b1:e5:cf:ad:63:ea:55:6a:e6:44:a8:3d:93:e5: 53:ef:49:c2:2e:f8:a1:35:ef:ba:20:e3:8c:d8:da: a0:83:82:5c:90:f8:e4:9d:7a:f8:a1:6b:09:70:f1: 78:ca:5f:9f:1c:ff:31:09:d5:c5:cb:30:14:a0:85: 73:65:e5:96:c7:0d:b3:14:24:32:dd:9f:58:30:8d: 6b:53:46:12:98:36:61:93:50:af:48:14:7d:a2:d3: ab:fa:38:62:89:fd:84:63:8d:3a:da:0f:47:28:a8: 47:46:bd:63:aa:c7:2b:b8:3d:99:24:0a:1b:d8:2e: db:e6:d2:9c:1f:f5:12:3e:17:14:ac:8a:9c:d2:62: 6b:42:e5:d0:3b:e5:30:2e:91:4b:eb:0f:e1:b8:7d: b1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:44:81:8F:26:22:4E:B1:DE:C0:BB:02:23:5F:AA:5D:92:73:22:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cce90f5-ddfd-358a-9aa0-2c939d9225c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:be:ba:ef:01:4d:1f:67:d5:ca:1e:00:06:e3:9a:64:2f:9d: 29:08:5e:34:94:c6:c2:3b:2f:14:b3:aa:83:57:f2:17:73:92: f9:a8:09:48:c3:49:27:dc:45:f7:8b:eb:94:4d:75:57:8a:a1: 51:0d:4c:7e:b2:6f:91:e1:cc:c1:2f:73:27:38:8a:ad:a7:ac: 84:99:96:c2:d8:f3:2a:16:d5:27:93:db:9e:89:52:25:93:ff: 73:6c:5e:a9:15:4a:65:1e:02:68:c0:b3:ba:86:3a:b1:8c:2a: 07:0d:7a:6f:23:e1:68:ed:f3:96:3a:d4:69:fa:da:a4:d6:d4: 14:6b:63:94:68:0d:3b:e4:ce:84:2a:cd:52:43:d4:a4:62:02: 99:c2:cd:1f:a3:4e:b4:a4:a2:b1:a8:38:78:04:ca:3b:d0:4d: 16:1c:13:73:e7:74:e0:58:e6:0f:12:04:3e:b2:f9:71:74:09: 03:ef:0b:d1:c5:ab:3f:49:68:d8:44:05:f0:90:e8:0a:c7:d8: a3:75:b8:02:ac:ad:26:9a:7e:bd:2e:d2:bf:10:82:b9:23:a1: bd:1a:15:0c:8c:cc:97:24:d8:07:10:10:91:2f:df:7f:8c:5e: 35:b2:db:fe:32:3c:d9:c3:1b:91:23:29:ba:36:2a:c9:ae:a2: cd:51:c6:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mp5ujei4Fg2KzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZjAwYzI5MjYtY2Y1Zi00YjA1LTgwZDMtNzU2MDg5ZmI2ZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFmZCCJtyCggjpsXr5DL2jzSBfJ0QiUyk7CM aZGKcVh2rOecTbi/MS382DZNMrd/KobDg7jr+2C/0FjMwgcDCZe7BM7uq6wcqd7s tAQIPyrllyQ5CjA4xgtuilPNtd1S4dS5AUEwtq+FseXPrWPqVWrmRKg9k+VT70nC LvihNe+6IOOM2Nqgg4JckPjknXr4oWsJcPF4yl+fHP8xCdXFyzAUoIVzZeWWxw2z FCQy3Z9YMI1rU0YSmDZhk1CvSBR9otOr+jhiif2EY4062g9HKKhHRr1jqscruD2Z JAob2C7b5tKcH/USPhcUrIqc0mJrQuXQO+UwLpFL6w/huH2x6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONEgY8mIk6x3sC7AiNfql2ScyLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2NjZTkwZjUtZGRmZC0z NThhLTlhYTAtMmM5MzlkOTIyNWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm+uu8BTR9n1coeAAbjmmQvnSkIXjSUxsI7LxSzqoNX8hdzkvmoCUjD SSfcRfeL65RNdVeKoVENTH6yb5HhzMEvcyc4iq2nrISZlsLY8yoW1SeT256JUiWT /3NsXqkVSmUeAmjAs7qGOrGMKgcNem8j4Wjt85Y61Gn62qTW1BRrY5RoDTvkzoQq zVJD1KRiApnCzR+jTrSkorGoOHgEyjvQTRYcE3PndOBY5g8SBD6y+XF0CQPvC9HF qz9JaNhEBfCQ6ArH2KN1uAKsrSaafr0u0r8Qgrkjob0aFQyMzJck2AcQEJEv33+M XjWy2/4yPNnDG5EjKbo2Ksmuos1Rxhs= -----END CERTIFICATE-----Generated at Fri Apr 17 15:17:42 2026 by rpki-client