$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f184204f-2f0c-32b4-9bef-47f7ae1ba79b.roa File: f184204f-2f0c-32b4-9bef-47f7ae1ba79b.roa (raw, json) Hash identifier: G3kd1GZgQdVbMGHFTeJbH4Y6CnYH4OZtKTZ6PCnls/8= Subject key identifier: 77:A9:7D:D8:57:CC:C0:FA:54:7A:56:AF:A2:49:E0:1C:6D:EE:44:9C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F63F812F0B5E043CD003D4800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f184204f-2f0c-32b4-9bef-47f7ae1ba79b.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 31898 IP address blocks: 129.153.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:12:f0:b5:e0:43:cd:00:3d:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=386e437c-13dd-4787-8b00-3939266e8971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:ce:31:73:40:42:2f:3e:53:51:19:3f:b0: a6:a3:d3:0f:bc:85:9e:e9:dd:ac:d9:15:c3:1f:95: 9e:9f:9a:65:8e:87:e5:ee:b5:62:03:79:9c:2d:2f: 69:af:e6:cf:f1:6e:ec:cb:91:9d:d1:56:d5:4b:8b: 19:1f:a7:df:36:15:04:9f:46:37:bf:15:cc:76:47: 1a:bf:38:95:bd:29:24:7c:50:82:aa:30:57:4e:61: 0f:28:f3:26:5c:6f:17:87:05:f7:d8:89:29:d9:96: 3e:61:f5:79:cb:1f:a1:ef:29:c1:f5:18:48:70:42: 42:c1:e9:32:cb:35:e2:cb:37:76:52:9d:08:50:f8: 73:14:bf:62:a6:4e:95:18:03:08:ff:bf:71:ac:59: d1:ac:a4:ea:67:64:0e:f8:33:7a:63:c8:1a:da:66: a6:c9:b2:95:55:05:d2:c4:d7:6c:f1:f6:a9:dc:cc: 55:80:d0:62:f6:bf:9b:31:2d:5b:91:66:48:a1:07: c8:fd:ea:00:1f:19:c1:49:14:98:eb:c8:b3:27:5d: 4b:3e:94:bc:2e:ad:6b:8a:05:3c:78:38:ed:61:57: 9a:8b:6d:95:6a:30:db:99:24:08:8e:38:f9:08:45: db:d7:a2:21:f5:b0:72:3b:8d:73:36:13:a9:a7:4c: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A9:7D:D8:57:CC:C0:FA:54:7A:56:AF:A2:49:E0:1C:6D:EE:44:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f184204f-2f0c-32b4-9bef-47f7ae1ba79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:77:1c:e3:66:5b:3e:34:2f:6e:63:26:c1:2d:4c:5f:65:50: d2:26:12:74:16:4c:e1:bd:a9:17:90:40:c6:3c:93:44:13:ed: 8c:7d:55:a2:f1:bf:68:de:a7:b0:12:ec:fb:e1:d4:b1:04:2d: e1:e6:b1:24:cc:60:a1:48:d4:66:3d:d5:8e:10:66:27:4b:1a: 0f:8d:00:d1:39:98:a5:58:e7:54:f4:a0:aa:3f:ae:d8:bc:b4: 93:a2:e6:0a:57:5e:a2:68:c5:c1:75:a0:60:49:79:85:68:da: d5:d0:55:00:62:29:cd:d6:00:a8:85:5f:43:70:ae:d0:8e:ad: 66:8b:b3:99:1e:eb:a9:14:9e:53:1e:5e:d6:f3:61:2f:ca:a8: 58:5d:12:d5:25:13:79:27:fb:a2:b4:d6:26:b8:33:9c:08:3b: 6c:ae:5c:64:a8:a4:af:81:00:17:7d:9f:4a:9a:dd:85:a0:67: 7b:e6:4b:d7:9b:56:ea:9e:ad:85:9c:3d:1e:8f:07:3e:df:38: 6e:91:87:97:88:f6:9d:f0:f5:58:2a:1b:02:ee:58:ee:d0:b4: 66:1f:c7:57:a4:a1:bf:ea:9a:b8:1a:ad:fe:a6:2c:ee:54:27: 9f:c6:3b:3e:53:7c:95:68:c3:fd:89:bd:74:66:c8:2c:2a:8e: a5:3c:8e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+BLwteBDzQA9SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk Mzg2ZTQzN2MtMTNkZC00Nzg3LThiMDAtMzkzOTI2NmU4OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynbOMXNAQi8+U1EZP7Cmo9MPvIWe6d2s2RXD H5Wen5pljofl7rViA3mcLS9pr+bP8W7sy5Gd0VbVS4sZH6ffNhUEn0Y3vxXMdkca vziVvSkkfFCCqjBXTmEPKPMmXG8XhwX32Ikp2ZY+YfV5yx+h7ynB9RhIcEJCweky yzXiyzd2Up0IUPhzFL9ipk6VGAMI/79xrFnRrKTqZ2QO+DN6Y8ga2mamybKVVQXS xNds8fap3MxVgNBi9r+bMS1bkWZIoQfI/eoAHxnBSRSY68izJ11LPpS8Lq1rigU8 eDjtYVeai22VajDbmSQIjjj5CEXb16Ih9bByO41zNhOpp0wbgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHepfdhXzMD6VHpWr6JJ4Bxt7kScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjE4NDIwNGYtMmYwYy0z MmI0LTliZWYtNDdmN2FlMWJhNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKh3HONmWz40L25jJsEtTF9lUNImEnQWTOG9qReQQMY8k0QT7Yx9VaLx v2jep7AS7Pvh1LEELeHmsSTMYKFI1GY91Y4QZidLGg+NANE5mKVY51T0oKo/rti8 tJOi5gpXXqJoxcF1oGBJeYVo2tXQVQBiKc3WAKiFX0NwrtCOrWaLs5ke66kUnlMe XtbzYS/KqFhdEtUlE3kn+6K01ia4M5wIO2yuXGSopK+BABd9n0qa3YWgZ3vmS9eb VuqerYWcPR6PBz7fOG6Rh5eI9p3w9VgqGwLuWO7QtGYfx1ekob/qmrgarf6mLO5U J5/GOz5TfJVow/2JvXRmyCwqjqU8jow= -----END CERTIFICATE-----Generated at Mon Oct 12 07:12:38 2026 by rpki-client