$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8630a30-798f-3640-a5c9-4f41b88cb5e1.roa File: d8630a30-798f-3640-a5c9-4f41b88cb5e1.roa (raw, json) Hash identifier: D7OWR98RQM8qeH0K4Swo8a0Zdq0kvqR8nuGNb8arE/c= Subject key identifier: AE:D8:F5:27:4B:55:21:5D:C0:8D:D4:44:13:5D:17:93:72:10:CF:34 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EED523F16B0F88FC2BE6BF580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8630a30-798f-3640-a5c9-4f41b88cb5e1.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 31898 IP address blocks: 129.146.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:3f:16:b0:f8:8f:c2:be:6b:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=eb3a0d5a-eabf-4492-8933-78b9635f3b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e4:9b:9d:82:18:08:f0:ec:32:97:24:3d:52: 28:9c:db:77:04:fa:b8:f9:b2:d4:49:5f:4d:d6:42: 38:8a:92:18:ee:79:a9:8a:bc:25:16:90:27:e3:40: 40:23:06:32:0b:45:08:e5:f3:b7:45:64:60:c8:e8: 34:e5:f3:3d:65:25:e3:b6:01:0b:1f:4b:d6:ed:f7: ae:55:d5:fc:82:0d:4f:27:4a:57:eb:d8:2d:11:36: d3:d2:6a:07:a4:ea:ec:e8:40:f3:3d:63:58:6f:04: 19:c5:c0:1d:14:1e:52:ca:11:99:f5:25:88:d8:b2: 7d:a5:15:2b:0e:56:5b:2c:0f:10:7d:ac:d5:44:cb: 29:f8:84:1a:ca:fd:de:83:94:3a:96:7f:56:d6:ff: 57:2e:e0:69:98:ed:19:a2:f5:6a:6d:65:74:b0:d4: 56:f1:3d:b0:dc:88:02:d7:17:f6:7b:46:74:85:88: eb:b7:c8:f2:81:5c:3f:58:ad:70:e3:bf:68:80:44: 29:7d:4e:c2:23:1d:15:75:0e:ff:a0:1c:ce:f0:8f: e3:1b:c8:00:d3:d2:bd:68:bd:5c:23:19:7a:cc:6c: 20:d3:c7:0d:19:27:dd:b7:e9:39:f7:e1:23:d4:fe: 07:fc:04:23:54:77:4b:8a:ed:1c:fb:c4:65:55:37: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D8:F5:27:4B:55:21:5D:C0:8D:D4:44:13:5D:17:93:72:10:CF:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8630a30-798f-3640-a5c9-4f41b88cb5e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ea:12:4d:7c:f7:cb:7d:7a:1b:81:07:71:9f:26:84:bf:a9: 69:1b:a9:9e:93:8f:18:4c:94:38:6a:6d:ab:16:02:08:33:fe: b3:30:72:96:49:af:b5:50:96:44:8c:e1:43:88:c9:1d:ba:97: 2c:d0:86:05:c1:70:60:ec:bb:eb:f5:d2:7d:b1:ec:08:39:be: f2:d8:2a:ef:15:8d:0b:63:1e:fc:d3:b4:c5:a7:55:1d:0d:c7: 0c:5e:6d:6b:d7:02:25:15:fd:c4:a5:89:79:a0:35:fa:66:12: 60:0e:e5:25:ce:5c:33:1b:0e:c4:76:29:a1:6a:ab:be:4a:b3: 83:fd:c2:8a:d6:90:14:d3:e5:40:f5:b3:15:b5:ce:36:b3:7e: f7:62:a5:e9:ad:00:2f:d7:b2:9b:52:c9:29:01:84:21:22:cc: 33:0b:c3:ed:18:b7:0f:8c:3c:ff:df:86:5e:ce:c2:ab:12:77: 8b:b2:18:3d:85:f4:cb:af:76:aa:bd:59:13:f9:04:96:69:ff: 6d:43:68:a0:7d:12:c2:69:02:66:ce:44:69:01:21:e8:b6:83: c8:18:3a:35:3b:8b:ad:41:34:db:37:23:50:9e:cd:29:d6:df: 1d:de:cb:95:3a:53:97:a3:20:7f:d9:91:96:0f:04:61:7c:13: e2:4f:e6:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUj8WsPiPwr5r9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZWIzYTBkNWEtZWFiZi00NDkyLTg5MzMtNzhiOTYzNWYzYjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOSbnYIYCPDsMpckPVIonNt3BPq4+bLUSV9N 1kI4ipIY7nmpirwlFpAn40BAIwYyC0UI5fO3RWRgyOg05fM9ZSXjtgELH0vW7feu VdX8gg1PJ0pX69gtETbT0moHpOrs6EDzPWNYbwQZxcAdFB5SyhGZ9SWI2LJ9pRUr DlZbLA8QfazVRMsp+IQayv3eg5Q6ln9W1v9XLuBpmO0ZovVqbWV0sNRW8T2w3IgC 1xf2e0Z0hYjrt8jygVw/WK1w479ogEQpfU7CIx0VdQ7/oBzO8I/jG8gA09K9aL1c Ixl6zGwg08cNGSfdt+k59+Ej1P4H/AQjVHdLiu0c+8RlVTfJXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7Y9SdLVSFdwI3URBNdF5NyEM80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDg2MzBhMzAtNzk4Zi0z NjQwLWE1YzktNGY0MWI4OGNiNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELqEk1898t9ehuBB3GfJoS/qWkbqZ6TjxhMlDhqbasWAggz/rMwcpZJ r7VQlkSM4UOIyR26lyzQhgXBcGDsu+v10n2x7Ag5vvLYKu8VjQtjHvzTtMWnVR0N xwxebWvXAiUV/cSliXmgNfpmEmAO5SXOXDMbDsR2KaFqq75Ks4P9worWkBTT5UD1 sxW1zjazfvdipemtAC/XsptSySkBhCEizDMLw+0Ytw+MPP/fhl7OwqsSd4uyGD2F 9Muvdqq9WRP5BJZp/21DaKB9EsJpAmbORGkBIei2g8gYOjU7i61BNNs3I1CezSnW 3x3ey5U6U5ejIH/ZkZYPBGF8E+JP5iQ= -----END CERTIFICATE-----Generated at Thu Aug 27 07:57:58 2026 by rpki-client