$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5ab1ec4a-4037-390a-898e-2898f772527d.roa File: 5ab1ec4a-4037-390a-898e-2898f772527d.roa (raw, json) Hash identifier: gcs3nULbMKMaXUf52MwqLSUO32dFJEUzePFj02nA92I= Subject key identifier: DD:48:62:76:B1:DF:A3:01:74:89:87:02:F9:FC:7D:98:75:EB:2D:B8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EF1822DFB1D1F98E34C626600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5ab1ec4a-4037-390a-898e-2898f772527d.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.213.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:2d:fb:1d:1f:98:e3:4c:62:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=1ab6f26e-8b3c-4e29-9d79-b80ce0ff2787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:35:b1:62:06:02:15:7a:2a:4b:1e:10:eb: e9:31:67:17:91:20:bb:16:93:45:5c:e2:51:ca:90: 06:44:6e:bc:b4:50:e6:61:a3:d1:2e:4f:b8:4b:b6: bd:97:92:a8:d0:84:76:6d:31:7c:c3:b4:b9:53:03: 69:bc:ae:5e:6b:b0:8c:e4:fc:96:c2:be:0c:ae:0f: df:80:db:6f:31:65:70:9c:95:2c:55:39:0c:5e:f9: 65:30:b6:ed:d1:74:0a:17:e1:ed:6a:99:ab:a8:3a: 87:d4:1f:59:b8:2d:83:7f:30:ec:32:cf:1e:45:00: 5f:2d:9c:f5:55:86:ee:e5:49:3d:77:c1:1e:8b:ba: 32:fa:27:a4:bb:b8:e8:7e:cd:ab:e9:0d:3d:4b:8e: 73:c8:ae:3e:e4:bb:1e:03:2c:45:74:a0:e6:88:64: 8e:52:57:18:63:aa:19:ee:0d:f0:23:94:d9:6e:2e: 9b:03:07:51:9f:ae:b1:f5:26:f7:8a:27:ba:87:2f: d9:da:44:f8:4e:c4:e6:e7:82:43:46:4e:4a:3b:2c: f8:04:84:48:77:4c:c7:2f:46:ce:d5:b6:99:3f:85: 7a:59:fa:1a:10:15:76:19:d3:50:ec:40:0a:bf:eb: 5b:3a:5f:f0:0c:85:00:d6:ca:1a:92:c0:a0:71:03: d6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:48:62:76:B1:DF:A3:01:74:89:87:02:F9:FC:7D:98:75:EB:2D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5ab1ec4a-4037-390a-898e-2898f772527d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:46:14:ce:4c:fc:c1:83:c5:31:fb:43:34:4b:b1:31:14:eb: f4:b6:f2:3f:fd:bc:c2:c2:f5:81:01:33:68:83:e1:7c:f8:4d: e5:cf:f0:ed:03:b5:74:6f:64:1f:2d:ae:f6:90:fe:50:50:17: 29:71:a9:d5:dc:a7:20:d0:eb:a0:20:48:7c:58:9f:1e:6a:7e: 8b:a4:48:c9:e4:cc:39:83:15:d5:bf:92:00:6a:6c:9f:95:ba: 5e:89:83:04:a4:29:0a:a1:66:19:88:bf:3d:7c:3a:7a:5d:65: f1:11:52:7f:6f:0c:a6:ac:85:2b:85:76:18:9b:52:77:5d:6c: 54:6d:c3:df:a1:b4:5b:be:27:d3:39:bd:3e:94:c4:49:bb:81: 82:86:4b:d3:8e:cc:49:12:ba:c8:c0:01:fc:01:90:bf:ff:80: eb:14:1b:09:da:22:3f:4c:7e:14:9c:e2:6b:50:12:ab:30:df: f1:16:cc:a5:d0:ea:8b:61:5d:11:8c:99:3d:d4:41:7a:6c:3b: 45:5c:62:07:39:06:b9:a1:be:16:70:3b:98:6d:d7:6f:0f:5a: d5:c7:1e:fe:1d:b9:82:a8:1d:d2:48:9e:96:65:52:dd:84:66: ce:c3:e9:28:aa:2a:a8:98:d2:fa:a8:51:3e:34:3e:ce:42:dc: bc:3f:92:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgi37HR+Y40xiZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MWFiNmYyNmUtOGIzYy00ZTI5LTlkNzktYjgwY2UwZmYyNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvs1sWIGAhV6KkseEOvpMWcXkSC7FpNFXOJR ypAGRG68tFDmYaPRLk+4S7a9l5Ko0IR2bTF8w7S5UwNpvK5ea7CM5PyWwr4Mrg/f gNtvMWVwnJUsVTkMXvllMLbt0XQKF+HtapmrqDqH1B9ZuC2DfzDsMs8eRQBfLZz1 VYbu5Uk9d8Eei7oy+ieku7jofs2r6Q09S45zyK4+5LseAyxFdKDmiGSOUlcYY6oZ 7g3wI5TZbi6bAwdRn66x9Sb3iie6hy/Z2kT4TsTm54JDRk5KOyz4BIRId0zHL0bO 1baZP4V6WfoaEBV2GdNQ7EAKv+tbOl/wDIUA1soaksCgcQPW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1IYnax36MBdImHAvn8fZh16y24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWFiMWVjNGEtNDAzNy0z OTBhLTg5OGUtMjg5OGY3NzI1MjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgdXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtGFM5M/MGDxTH7QzRLsTEU6/S28j/9vMLC9YEBM2iD4Xz4TeXP8O0D tXRvZB8trvaQ/lBQFylxqdXcpyDQ66AgSHxYnx5qfoukSMnkzDmDFdW/kgBqbJ+V ul6JgwSkKQqhZhmIvz18OnpdZfERUn9vDKashSuFdhibUnddbFRtw9+htFu+J9M5 vT6UxEm7gYKGS9OOzEkSusjAAfwBkL//gOsUGwnaIj9MfhSc4mtQEqsw3/EWzKXQ 6othXRGMmT3UQXpsO0VcYgc5BrmhvhZwO5ht128PWtXHHv4duYKoHdJInpZlUt2E Zs7D6SiqKqiY0vqoUT40Ps5C3Lw/klk= -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:53 2026 by rpki-client