$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f695cec2-2571-3660-bc42-99e3e6fd1e4d.roa File: f695cec2-2571-3660-bc42-99e3e6fd1e4d.roa (raw, json) Hash identifier: 9JmGJ+6Tse5FAh2dx58xeg7+TKKuuaJ4jLHimjTGJQU= Subject key identifier: A5:73:8D:08:EF:6C:6E:42:FE:4A:62:6E:0A:21:A8:33:59:42:39:FE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EED51FE44FE8C5AF3BB150B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f695cec2-2571-3660-bc42-99e3e6fd1e4d.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 31898 IP address blocks: 129.146.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:fe:44:fe:8c:5a:f3:bb:15:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=25ab678e-d1aa-4789-8c65-6b75f25584e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fb:d7:0c:0d:a1:fd:68:88:65:40:d3:c6:15: 55:20:ae:73:f9:86:ef:cd:ce:31:f6:ab:2c:c7:a7: fb:f0:db:cd:19:03:de:9e:c8:cb:2b:69:fc:7f:da: 06:eb:af:b6:e3:64:65:ac:6e:e2:20:bd:c9:09:e6: 6f:58:5f:26:a8:d5:19:2a:7f:b9:bb:e1:4b:49:76: d4:5e:7c:a2:41:56:bf:e0:6a:1c:93:93:0b:27:be: 7e:2a:09:c9:f5:e2:c9:ba:d1:ce:5e:b4:f8:96:62: 01:00:ee:e9:d5:08:58:4a:60:69:5d:c9:ac:8f:5c: 89:df:ef:67:22:94:aa:20:d5:b2:c5:da:22:d4:48: 74:06:8b:14:87:0f:35:c8:0d:fe:5d:c8:63:77:4b: 5e:d7:dd:68:8b:33:29:db:0e:d2:73:1e:cd:24:e9: 2c:b3:df:2c:b2:02:e5:5c:70:20:0f:21:03:d1:b0: 61:71:a1:ff:03:9e:77:47:30:f4:4b:f7:ec:7a:72: bd:f1:1d:b7:d1:fd:9e:07:ab:da:3c:87:ae:81:74: 49:31:1c:4e:25:8c:ed:b5:77:79:54:62:b3:f6:a3: f7:f1:d4:46:41:d1:7c:b3:1c:d6:d6:db:0c:6d:96: dd:5a:cd:6c:64:88:cf:0b:37:d4:a0:f7:0b:5e:23: e6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:73:8D:08:EF:6C:6E:42:FE:4A:62:6E:0A:21:A8:33:59:42:39:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f695cec2-2571-3660-bc42-99e3e6fd1e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:70:de:2f:a1:20:fd:24:6f:aa:ff:c2:e3:20:3e:fd:87:a5: 56:c7:6c:5b:06:42:d2:c1:5c:f9:8f:2c:bd:70:02:3e:ca:1a: 9e:cd:a9:19:aa:f1:60:2c:52:13:50:81:c3:3c:08:a8:0e:a3: b0:d3:50:28:9c:36:1b:cf:a2:7c:55:78:9b:7b:9d:a7:02:c1: 02:9d:74:2b:ca:37:9e:ca:33:a6:9b:ab:96:00:ae:35:0e:f8: 52:73:eb:bf:3d:5f:ef:e9:31:9d:fd:ae:44:f4:fa:62:36:9d: 91:03:f1:4c:21:84:6c:01:ee:22:86:73:89:be:9a:a8:f4:cf: 99:c6:1d:bc:f5:4d:12:b5:df:0d:d8:7d:0f:ed:c3:38:fe:a2: 39:56:90:a5:a3:2d:ce:6c:cb:20:bf:cf:e6:c3:bc:15:6a:96: 26:cb:40:f0:c2:90:7e:a6:4e:87:f3:47:91:29:fd:25:0d:23: b1:81:9b:d2:e3:eb:b9:33:22:fe:c5:68:3f:13:cc:b0:5e:e6: f0:9a:bd:aa:a4:75:25:33:86:16:6b:97:df:c0:8f:70:c4:41: 9f:c8:49:b9:86:93:b4:f1:8e:4b:22:e2:89:f2:36:dc:06:6e: 5e:06:96:b8:da:77:96:4e:c2:5c:27:51:ef:77:b5:d0:97:d3: 79:a2:61:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUf5E/oxa87sVC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MjVhYjY3OGUtZDFhYS00Nzg5LThjNjUtNmI3NWYyNTU4NGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/vXDA2h/WiIZUDTxhVVIK5z+Ybvzc4x9qss x6f78NvNGQPensjLK2n8f9oG66+242RlrG7iIL3JCeZvWF8mqNUZKn+5u+FLSXbU XnyiQVa/4Gock5MLJ75+KgnJ9eLJutHOXrT4lmIBAO7p1QhYSmBpXcmsj1yJ3+9n IpSqINWyxdoi1Eh0BosUhw81yA3+Xchjd0te191oizMp2w7Scx7NJOkss98ssgLl XHAgDyED0bBhcaH/A553RzD0S/fsenK98R230f2eB6vaPIeugXRJMRxOJYzttXd5 VGKz9qP38dRGQdF8sxzW1tsMbZbdWs1sZIjPCzfUoPcLXiPmfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVzjQjvbG5C/kpibgohqDNZQjn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjY5NWNlYzItMjU3MS0z NjYwLWJjNDItOTllM2U2ZmQxZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVw3i+hIP0kb6r/wuMgPv2HpVbHbFsGQtLBXPmPLL1wAj7KGp7NqRmq 8WAsUhNQgcM8CKgOo7DTUCicNhvPonxVeJt7nacCwQKddCvKN57KM6abq5YArjUO +FJz6789X+/pMZ39rkT0+mI2nZED8UwhhGwB7iKGc4m+mqj0z5nGHbz1TRK13w3Y fQ/twzj+ojlWkKWjLc5syyC/z+bDvBVqlibLQPDCkH6mTofzR5Ep/SUNI7GBm9Lj 67kzIv7FaD8TzLBe5vCavaqkdSUzhhZrl9/Aj3DEQZ/ISbmGk7Txjksi4onyNtwG bl4Glrjad5ZOwlwnUe93tdCX03miYZ8= -----END CERTIFICATE-----Generated at Thu Aug 27 08:47:35 2026 by rpki-client