$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa File: 19928233-6d2f-37ae-9fb3-1f6627892861.roa (raw, json) Hash identifier: 3+ADLsXMfxMfj9arlVkGWRy/7bvj/eBmlAnvloc5EEA= Subject key identifier: 36:D7:B4:73:1B:AC:0B:75:02:48:5D:14:54:7E:34:D1:A8:91:37:B5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F549D59FC93F84B1A1F899400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 129.91.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:59:fc:93:f8:4b:1a:1f:89:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=0558f658-e768-4895-9c93-8d459a23541c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:11:58:3b:1f:29:fc:41:66:be:9c:1f:55: 59:07:38:50:f6:2d:ea:39:4c:3e:76:b1:69:27:ed: 83:04:31:4d:c6:6d:c4:8c:92:22:0c:39:64:66:63: 48:c3:d8:c9:0d:9a:9e:eb:57:9a:3f:fe:cc:71:a3: c3:19:02:67:99:fe:a5:1d:b5:31:a8:a5:53:0f:22: 5f:6a:cb:65:38:5f:6f:5e:14:9b:71:95:81:d3:50: 0d:47:a0:5b:13:77:d8:f3:25:42:63:d0:30:b8:67: 89:aa:25:f5:73:36:26:b7:00:70:88:0a:e9:5d:d1: a4:c5:fa:db:88:29:66:7a:a5:bb:e5:85:ef:cd:a9: 95:d4:aa:a8:39:51:e8:89:dc:00:48:3c:a6:bc:d3: 05:26:af:08:4b:90:bc:d7:94:60:b9:5a:2d:fb:73: 17:25:3b:dd:75:8e:a1:c4:9b:d0:99:db:86:0e:0c: e6:1a:6e:5c:35:01:db:04:ed:6d:5a:15:67:34:a4: d4:bd:6a:b8:e1:62:f5:1e:6a:25:99:04:c1:71:e0: 9a:5d:c8:72:3c:1e:02:7c:8b:52:b3:a5:07:c5:ee: 03:69:9d:80:8c:c0:b4:e5:2d:1b:20:b6:39:20:18: 0c:c0:20:6d:33:86:75:bb:34:92:42:51:6d:a7:cb: 5c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D7:B4:73:1B:AC:0B:75:02:48:5D:14:54:7E:34:D1:A8:91:37:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.91.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:84:d9:ce:f1:15:d5:3a:58:c8:c8:2a:77:7e:12:9e:1e:62: fa:33:2e:81:f1:d5:40:52:ea:ad:f1:43:54:87:63:69:2f:60: 17:cf:08:6a:9c:88:63:dd:07:9a:36:7a:ec:e4:8b:2a:40:be: c7:12:52:30:c4:3b:d1:44:23:d5:49:61:2a:a7:21:51:f8:d5: 6b:1f:fc:3a:3a:97:21:36:62:4b:76:9a:8b:1a:42:59:f0:0f: 46:35:a4:5a:84:e2:1c:a0:5c:38:52:74:31:5e:c7:44:3e:9e: 48:be:c6:d8:9b:f3:66:02:fa:03:4a:3a:41:f6:08:ca:f3:cf: b2:57:02:bb:95:5a:70:bd:d3:7e:dc:20:3e:c8:cc:b9:29:18: a2:d3:32:8c:3c:29:0c:51:ae:cb:7b:f1:82:4e:88:5b:3b:1c: 10:bf:50:7a:ee:c7:9a:bc:36:33:20:9e:bd:c3:d8:4b:e0:76: d3:22:28:1a:b1:fa:4e:40:3b:61:4a:9b:0e:73:01:8a:c3:06: fb:7c:64:57:98:49:97:4d:e5:61:c6:73:90:f8:e6:1c:f6:aa: 33:e1:d6:71:e0:e4:2b:c4:d4:b6:2c:8c:dc:d5:bf:84:a7:5a: f2:c1:9d:52:71:d5:f8:f7:b7:56:8b:38:e7:13:db:3b:73:77: 49:29:9a:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVn8k/hLGh+JlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MDU1OGY2NTgtZTc2OC00ODk1LTljOTMtOGQ0NTlhMjM1NDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZARWDsfKfxBZr6cH1VZBzhQ9i3qOUw+drFp J+2DBDFNxm3EjJIiDDlkZmNIw9jJDZqe61eaP/7McaPDGQJnmf6lHbUxqKVTDyJf astlOF9vXhSbcZWB01ANR6BbE3fY8yVCY9AwuGeJqiX1czYmtwBwiArpXdGkxfrb iClmeqW75YXvzamV1KqoOVHoidwASDymvNMFJq8IS5C815RguVot+3MXJTvddY6h xJvQmduGDgzmGm5cNQHbBO1tWhVnNKTUvWq44WL1HmolmQTBceCaXchyPB4CfItS s6UHxe4DaZ2AjMC05S0bILY5IBgMwCBtM4Z1uzSSQlFtp8tcIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbXtHMbrAt1AkhdFFR+NNGokTe1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTk5MjgyMzMtNmQyZi0z N2FlLTlmYjMtMWY2NjI3ODkyODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgVsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWE2c7xFdU6WMjIKnd+Ep4eYvozLoHx1UBS6q3xQ1SHY2kvYBfPCGqc iGPdB5o2euzkiypAvscSUjDEO9FEI9VJYSqnIVH41Wsf/Do6lyE2Ykt2mosaQlnw D0Y1pFqE4hygXDhSdDFex0Q+nki+xtib82YC+gNKOkH2CMrzz7JXAruVWnC9037c ID7IzLkpGKLTMow8KQxRrst78YJOiFs7HBC/UHrux5q8NjMgnr3D2EvgdtMiKBqx +k5AO2FKmw5zAYrDBvt8ZFeYSZdN5WHGc5D45hz2qjPh1nHg5CvE1LYsjNzVv4Sn WvLBnVJx1fj3t1aLOOcT2ztzd0kpmrc= -----END CERTIFICATE-----Generated at Mon Oct 12 23:53:30 2026 by rpki-client