$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa File: f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa (raw, json) Hash identifier: nU9eaFhBsBQlywqxnM8uSrq8QgDVdg2DDWrgRYx+zbo= Subject key identifier: F9:F6:88:FB:46:70:D9:89:00:34:57:B6:88:7E:25:41:25:21:D6:F8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EED51FF5C2E2F5B3CBDB8CF80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 31898 IP address blocks: 129.146.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:ff:5c:2e:2f:5b:3c:bd:b8:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=c67c7553-235b-40e4-a831-63f45dc31ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4d:3b:40:45:0f:55:80:60:cd:77:4b:0c:f4: 81:d7:99:50:14:25:15:b9:ba:21:6b:5b:b3:f1:4f: 1b:19:37:72:4e:ba:49:79:06:32:19:7e:ad:28:9b: ef:ec:25:65:2e:cd:2e:84:7a:80:a2:4d:4b:26:5e: 0d:82:1f:61:ae:b5:ad:67:0a:31:5f:6c:50:72:e5: 59:22:d8:01:d8:e2:38:f6:73:39:6f:0a:ff:e1:3c: bf:63:24:0d:99:a9:9f:f4:8f:8e:12:b2:f7:8f:e2: fd:4e:1f:f4:85:74:64:a2:63:97:b6:4b:85:26:25: 20:32:f3:e1:2a:6f:42:ef:91:52:e7:51:87:d7:84: 7f:6c:65:37:5d:de:3d:43:7a:89:0c:0d:a6:b9:8f: d2:e6:62:b3:41:84:40:e0:f2:18:e2:3d:c6:6b:1e: 2f:e7:dc:4b:71:5c:18:9e:62:4f:d1:ba:cd:06:7b: e1:de:b5:bd:19:c9:82:34:49:ed:79:53:2d:ba:ce: c1:53:51:bf:66:38:cd:bb:82:78:d1:be:25:55:9b: ec:d0:39:7c:6d:f5:f4:6a:d1:4b:9c:df:94:8a:7b: be:c9:88:fb:1e:15:f4:13:5a:e8:76:0d:7e:89:56: b2:40:4a:33:77:90:c1:0a:f6:cb:49:a7:29:9c:14: f8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F6:88:FB:46:70:D9:89:00:34:57:B6:88:7E:25:41:25:21:D6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:55:5f:b2:cd:86:0c:cb:59:0c:af:9d:35:0b:b6:26:4b:ef: 4b:d4:77:0e:31:fc:17:dd:02:21:e9:04:24:1a:db:a1:69:97: 98:24:fa:ea:f8:54:f4:6a:dd:3f:a0:e5:c0:fa:31:91:ea:67: ab:d2:e7:42:ee:2c:15:fa:46:70:74:41:9a:2d:14:57:bc:a5: 01:73:fa:36:f2:94:b4:1e:5f:c6:da:cb:52:42:c8:e8:12:5b: 3c:02:f8:68:64:f5:7d:6b:10:28:53:32:5a:47:d9:ba:be:50: e1:70:75:60:8c:f5:61:a9:4e:e3:a8:af:36:72:1e:d6:05:c8: 43:09:df:00:79:05:cb:3f:e6:f0:06:30:6a:14:6e:53:4f:39: 6e:1c:72:f1:e1:a5:17:ee:fd:f2:d9:95:3d:6b:8e:6e:1b:9a: ff:e8:d1:01:47:2f:9b:3d:61:0f:22:a7:60:4f:01:f4:c1:a4: a4:70:88:aa:ab:69:b7:ca:fc:37:7d:07:0a:70:94:70:21:da: 5a:a9:39:a9:13:fc:98:a8:fc:bd:19:d2:0d:1b:2a:07:0b:74: ac:50:2b:db:55:88:b0:00:1c:ac:13:1b:bb:b8:2f:d8:54:4b: 46:c7:d6:8c:94:c0:1e:1a:5f:b1:dd:de:f0:1e:28:b1:09:96: 71:57:1f:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUf9cLi9bPL24z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YzY3Yzc1NTMtMjM1Yi00MGU0LWE4MzEtNjNmNDVkYzMxZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl007QEUPVYBgzXdLDPSB15lQFCUVuboha1uz 8U8bGTdyTrpJeQYyGX6tKJvv7CVlLs0uhHqAok1LJl4Ngh9hrrWtZwoxX2xQcuVZ ItgB2OI49nM5bwr/4Ty/YyQNmamf9I+OErL3j+L9Th/0hXRkomOXtkuFJiUgMvPh Km9C75FS51GH14R/bGU3Xd49Q3qJDA2muY/S5mKzQYRA4PIY4j3Gax4v59xLcVwY nmJP0brNBnvh3rW9GcmCNEnteVMtus7BU1G/ZjjNu4J40b4lVZvs0Dl8bfX0atFL nN+Uinu+yYj7HhX0E1rodg1+iVayQEozd5DBCvbLSacpnBT4cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn2iPtGcNmJADRXtoh+JUElIdb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjQyZDM0OWYtNmVlNC0z NmY0LWFjNTItY2RhNDJmZTI5MWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpVX7LNhgzLWQyvnTULtiZL70vUdw4x/BfdAiHpBCQa26Fpl5gk+ur4 VPRq3T+g5cD6MZHqZ6vS50LuLBX6RnB0QZotFFe8pQFz+jbylLQeX8bay1JCyOgS WzwC+Ghk9X1rEChTMlpH2bq+UOFwdWCM9WGpTuOorzZyHtYFyEMJ3wB5Bcs/5vAG MGoUblNPOW4ccvHhpRfu/fLZlT1rjm4bmv/o0QFHL5s9YQ8ip2BPAfTBpKRwiKqr abfK/Dd9BwpwlHAh2lqpOakT/Jio/L0Z0g0bKgcLdKxQK9tViLAAHKwTG7u4L9hU S0bH1oyUwB4aX7Hd3vAeKLEJlnFXHyY= -----END CERTIFICATE-----Generated at Thu Aug 27 07:10:41 2026 by rpki-client