$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/213fbf18-c8a4-38e3-8eb7-111973d103d6.roa File: 213fbf18-c8a4-38e3-8eb7-111973d103d6.roa (raw, json) Hash identifier: uQL5B0c+ylKUdAysUCGcYefkbXI1M2MO9+ghiiMz2TU= Subject key identifier: 07:C1:63:FC:7E:31:AE:1C:E1:EC:3E:87:1D:CD:A1:50:C7:2B:8D:D9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F13023816A2CB5BF0D356C080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/213fbf18-c8a4-38e3-8eb7-111973d103d6.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.146.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:38:16:a2:cb:5b:f0:d3:56:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=9032e7bc-f213-49c2-9256-1ee7a937f929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:7a:b7:be:5b:de:41:b2:e4:27:03:2f:f5: b7:f1:d9:2a:55:17:db:5b:50:d5:43:ed:e1:46:55: 39:72:aa:01:c5:78:31:56:f8:9b:05:18:ee:27:bd: e8:b4:f9:93:97:3a:7a:b7:35:8d:5d:e6:a2:5d:92: 5d:e8:c5:f9:a6:8f:06:33:5b:01:35:fa:02:b7:b7: f0:6c:6c:28:83:5b:74:53:53:4d:21:f1:e0:35:7a: a0:18:44:ff:31:d1:eb:f3:d4:c7:02:83:f4:4a:44: a8:74:84:36:d9:01:14:a5:28:10:8d:55:f4:ef:18: 3a:27:89:65:f5:92:2e:4b:6f:d6:ce:39:87:24:87: a2:7e:53:eb:bf:8e:b1:a1:fc:f5:4d:d3:ff:c8:cb: 89:c4:9a:90:88:2c:08:d6:85:b6:80:ad:54:86:e1: 00:0a:72:44:50:22:87:02:05:8f:9e:5a:01:06:1b: 21:72:ad:bd:ea:74:38:21:25:7c:2a:77:ed:7d:e4: f9:ae:7d:01:04:7c:03:d2:44:87:3a:00:04:f9:e8: 3e:3e:16:41:e6:d5:ff:6f:fb:ef:3d:07:64:8f:24: ba:d2:e9:f2:96:c0:c8:3e:5d:65:85:02:cd:2f:f5: 52:c9:56:76:2a:8a:77:8b:60:95:53:34:4b:e1:2d: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C1:63:FC:7E:31:AE:1C:E1:EC:3E:87:1D:CD:A1:50:C7:2B:8D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/213fbf18-c8a4-38e3-8eb7-111973d103d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:39:5f:88:68:02:e2:58:85:00:fa:34:79:39:a8:d6:3d:58: 19:b2:97:35:3b:3f:78:37:4e:a5:c4:f0:76:28:27:97:df:9a: 03:03:3f:38:37:87:7b:6d:06:9a:1f:3a:8c:59:34:a3:fe:60: a2:17:e5:64:e6:db:ed:32:7c:78:3e:39:6a:72:1e:72:c9:49: 76:67:62:bf:cd:60:00:dc:1d:53:d2:5a:30:30:45:2f:a7:ed: 43:12:c9:9a:64:bf:58:aa:ec:fd:42:3d:01:13:38:d0:24:ee: 9f:81:2d:50:a3:e3:81:da:b2:21:68:51:6f:37:98:c9:dd:74: 91:6e:0a:00:c5:18:3f:b0:83:74:87:ba:f7:f8:36:5e:ed:a8: 6d:5b:29:62:7d:a1:d3:09:5f:ad:93:54:24:e4:2f:0f:07:0d: 82:8a:0d:26:c8:0b:cc:49:43:40:28:8a:7c:9b:59:c7:56:93: 53:99:b0:5e:84:f2:b4:e6:d8:5f:ce:84:0d:d0:1c:43:79:11: 83:7d:5b:7c:3b:f4:21:68:8a:d1:a1:02:89:97:86:28:7c:55: dd:62:b5:eb:17:89:f3:ff:c1:bf:e8:9b:38:86:69:0e:23:b4: be:09:d6:a0:e3:64:1e:c3:b6:f1:b9:61:b0:f7:11:23:df:3e: 90:34:aa:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjgWostb8NNWwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk OTAzMmU3YmMtZjIxMy00OWMyLTkyNTYtMWVlN2E5MzdmOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhF6t75b3kGy5CcDL/W38dkqVRfbW1DVQ+3h RlU5cqoBxXgxVvibBRjuJ73otPmTlzp6tzWNXeaiXZJd6MX5po8GM1sBNfoCt7fw bGwog1t0U1NNIfHgNXqgGET/MdHr89THAoP0SkSodIQ22QEUpSgQjVX07xg6J4ll 9ZIuS2/WzjmHJIeiflPrv46xofz1TdP/yMuJxJqQiCwI1oW2gK1UhuEACnJEUCKH AgWPnloBBhshcq296nQ4ISV8KnftfeT5rn0BBHwD0kSHOgAE+eg+PhZB5tX/b/vv PQdkjyS60unylsDIPl1lhQLNL/VSyVZ2Kop3i2CVUzRL4S2M+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfBY/x+Ma4c4ew+hx3NoVDHK43ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjEzZmJmMTgtYzhhNC0z OGUzLThlYjctMTExOTczZDEwM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABg5X4hoAuJYhQD6NHk5qNY9WBmylzU7P3g3TqXE8HYoJ5ffmgMDPzg3 h3ttBpofOoxZNKP+YKIX5WTm2+0yfHg+OWpyHnLJSXZnYr/NYADcHVPSWjAwRS+n 7UMSyZpkv1iq7P1CPQETONAk7p+BLVCj44HasiFoUW83mMnddJFuCgDFGD+wg3SH uvf4Nl7tqG1bKWJ9odMJX62TVCTkLw8HDYKKDSbIC8xJQ0AoinybWcdWk1OZsF6E 8rTm2F/OhA3QHEN5EYN9W3w79CFoitGhAomXhih8Vd1itesXifP/wb/omziGaQ4j tL4J1qDjZB7DtvG5YbD3ESPfPpA0qqo= -----END CERTIFICATE-----Generated at Mon Sep 21 14:11:26 2026 by rpki-client