$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7133515d-3ba3-38ef-8dd7-9eb1b5381083.roa File: 7133515d-3ba3-38ef-8dd7-9eb1b5381083.roa (raw, json) Hash identifier: W5bwlJW1hVzU3TWKNtsnSjk0vFSUMBvLw+ZjeHcmruc= Subject key identifier: E5:59:F5:E2:52:6B:FB:ED:E7:20:6D:98:A7:07:E6:53:25:34:E9:95 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EF1822CF91167F9362E2D1110 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7133515d-3ba3-38ef-8dd7-9eb1b5381083.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.213.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:2c:f9:11:67:f9:36:2e:2d:11:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=284d6dec-5e9d-43a8-ba4d-ab52128d6d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5a:3c:dd:af:39:44:10:db:27:7e:2c:cd:83: 2c:a7:00:da:0c:cf:e9:b5:8a:cc:75:a0:2e:7d:48: a4:6c:53:ec:be:89:d7:7a:fb:cc:99:ad:ec:f7:16: 68:c5:a8:5a:2f:54:e7:b5:d1:16:3e:14:c1:de:a2: b0:22:25:e8:70:15:99:8b:3f:74:c6:a2:9e:c7:3b: a2:db:40:45:7f:e4:0a:e8:5f:5e:11:8f:d5:29:65: 4c:cc:37:37:f3:aa:a2:51:16:04:95:f6:3c:3b:dc: 0b:c4:9c:7d:ce:27:86:05:62:92:c6:81:0e:4e:54: 1f:22:a8:6e:d6:7b:dc:45:bf:d2:8c:16:3e:a1:47: 00:f3:a1:62:ea:1e:73:a9:71:6a:42:29:62:58:19: 7a:e7:e1:b8:46:5d:5d:39:ca:44:15:52:7e:d7:25: 21:1f:8a:73:48:e9:a6:b7:38:10:ff:58:7c:bd:a2: dd:47:fe:ef:8b:6f:a3:4f:cd:46:b9:55:b1:69:84: 86:2b:77:90:e6:06:e3:57:00:8a:cb:fd:77:d1:28: 67:34:9e:92:cb:4e:b6:15:67:e7:15:c0:1d:93:5d: d8:b0:1f:4d:ac:01:da:ed:11:3c:54:ca:35:0e:d8: fd:09:7e:f1:91:f7:ee:38:6a:b9:07:2b:64:ef:bd: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:59:F5:E2:52:6B:FB:ED:E7:20:6D:98:A7:07:E6:53:25:34:E9:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7133515d-3ba3-38ef-8dd7-9eb1b5381083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d0:bb:98:7a:e0:5a:79:09:c5:61:d1:96:bd:b3:af:25:f0: d0:da:45:dc:c3:b4:68:18:d3:d4:68:a6:a2:e1:dd:26:32:cf: 4f:be:3f:d5:a9:eb:89:62:74:ff:3b:80:6c:aa:1a:67:53:d0: 1c:94:f4:47:20:8b:ca:fc:a1:6a:ae:cf:84:42:c0:f8:68:d2: 49:03:51:0a:42:bb:12:96:3f:d6:6c:10:28:4e:54:fb:a9:4a: 12:68:72:83:1b:e5:84:98:86:61:8b:16:51:63:c7:6e:bd:3b: 10:f4:45:0d:5f:19:26:30:3d:02:38:a4:8a:fd:d5:30:a9:7c: a9:5b:d7:17:af:30:00:74:79:5a:cf:00:a1:bd:da:c0:47:12: df:7f:43:cc:37:71:49:f1:bf:87:7a:34:fa:89:75:f8:c7:b2: 70:88:89:db:b0:d7:5b:33:f2:ed:7b:bb:eb:15:af:cc:88:f4: 78:a1:37:43:a3:d7:ec:7d:de:c8:65:80:47:3d:22:55:f2:42: 04:7a:ee:ee:fe:b1:60:88:e3:cf:72:10:63:8b:21:2d:64:d5: dc:de:cd:b7:f6:3f:50:c8:34:4d:d3:37:2e:6c:d6:26:4c:0c: 9b:fe:01:cb:c3:58:27:b5:9e:88:b1:1d:ae:fa:28:43:d0:66: d6:d5:22:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgiz5EWf5Ni4tERAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk Mjg0ZDZkZWMtNWU5ZC00M2E4LWJhNGQtYWI1MjEyOGQ2ZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlo83a85RBDbJ34szYMspwDaDM/ptYrMdaAu fUikbFPsvonXevvMma3s9xZoxahaL1TntdEWPhTB3qKwIiXocBWZiz90xqKexzui 20BFf+QK6F9eEY/VKWVMzDc386qiURYElfY8O9wLxJx9zieGBWKSxoEOTlQfIqhu 1nvcRb/SjBY+oUcA86Fi6h5zqXFqQiliWBl65+G4Rl1dOcpEFVJ+1yUhH4pzSOmm tzgQ/1h8vaLdR/7vi2+jT81GuVWxaYSGK3eQ5gbjVwCKy/130ShnNJ6Sy062FWfn FcAdk13YsB9NrAHa7RE8VMo1Dtj9CX7xkffuOGq5Bytk772mlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVZ9eJSa/vt5yBtmKcH5lMlNOmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzEzMzUxNWQtM2JhMy0z OGVmLThkZDctOWViMWI1MzgxMDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgdVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHQu5h64Fp5CcVh0Za9s68l8NDaRdzDtGgY09RopqLh3SYyz0++P9Wp 64lidP87gGyqGmdT0ByU9Ecgi8r8oWquz4RCwPho0kkDUQpCuxKWP9ZsEChOVPup ShJocoMb5YSYhmGLFlFjx269OxD0RQ1fGSYwPQI4pIr91TCpfKlb1xevMAB0eVrP AKG92sBHEt9/Q8w3cUnxv4d6NPqJdfjHsnCIiduw11sz8u17u+sVr8yI9HihN0Oj 1+x93shlgEc9IlXyQgR67u7+sWCI489yEGOLIS1k1dzezbf2P1DINE3TNy5s1iZM DJv+AcvDWCe1noixHa76KEPQZtbVItE= -----END CERTIFICATE-----Generated at Thu Aug 27 07:12:43 2026 by rpki-client