$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa File: 28d4aa01-578d-325a-b843-3e00f23bb714.roa (raw, json) Hash identifier: M/8kIRJxe3paLFgFslgomqwpqv2kd4GpkWN3Gkvj8ug= Subject key identifier: 7E:28:09:E4:B1:EE:D7:B6:47:C1:14:14:A1:A7:03:4A:7D:5A:4B:16 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1302468D2C980B4F755CF000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.146.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:46:8d:2c:98:0b:4f:75:5c:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=d4ac1f56-b89a-4279-aafe-882efc21ac92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:ea:b2:81:dc:99:fc:8d:64:f3:83:f9:12: 82:0f:03:f9:aa:38:14:fd:0d:d8:9e:90:ea:f9:58: 1f:37:ff:45:c2:9a:45:50:69:b3:92:03:9c:79:61: 12:ea:5f:73:4c:ff:0b:7e:35:e2:d8:da:fb:9b:8e: 18:7d:55:bd:13:60:ac:dc:81:08:de:5f:91:40:dc: d5:26:ef:36:97:3c:3a:91:2b:9c:30:11:89:c4:05: db:84:0b:a8:df:bf:94:91:4b:8d:6a:81:46:a5:d6: 2e:de:96:9d:fd:dc:ac:2c:47:bd:8d:6b:e1:70:73: bc:bd:e8:10:85:4c:91:58:8f:b8:97:01:27:02:6a: fa:fe:b3:ce:d4:0e:c0:c8:fc:3b:ff:25:07:6e:be: 7f:45:b1:c2:a2:29:dd:40:fc:38:b1:0e:8b:e0:27: 92:1c:54:46:ae:47:e7:92:b5:a0:e8:5e:80:c4:60: 34:bb:59:d2:8b:85:b0:f6:b9:73:e0:6e:63:bd:8a: 82:1f:f7:84:da:ff:c8:a7:9c:ba:29:f4:9d:de:cb: 74:cb:31:2e:c8:81:c5:87:d9:36:6d:aa:13:ad:68: a1:cc:83:ee:67:42:cd:0a:b3:11:ed:45:4c:c6:43: a7:24:9c:dc:5d:1a:1b:e1:46:b2:a6:2e:af:a4:35: 33:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:28:09:E4:B1:EE:D7:B6:47:C1:14:14:A1:A7:03:4A:7D:5A:4B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c6:0d:7e:64:98:8b:0f:0f:26:04:b5:14:ab:24:fe:33:24: 94:63:59:62:90:03:37:4a:ec:1d:74:df:9e:86:91:51:cb:7d: 7c:72:2d:03:33:e8:fd:5d:fc:88:d1:05:b8:9b:02:ea:58:08: f6:79:13:e6:89:b5:26:3d:3e:ff:2b:40:aa:32:d8:ec:8a:c4: 61:8a:b6:a3:5d:49:a1:52:28:6e:dc:c1:4b:e3:3c:9a:6a:1a: 30:55:ab:cd:73:c6:fa:59:2c:99:ae:f9:2a:a4:2a:7d:ac:d0: 92:cb:d8:72:6b:9b:e0:af:e2:0d:7d:cc:e7:22:e4:ee:07:a9: 9c:78:92:5b:e2:67:8e:b6:4b:e1:10:01:4d:54:97:8d:51:4a: 3e:c2:3e:0f:63:94:81:b8:e2:ce:16:c6:fd:ab:df:49:e2:ec: 72:de:0c:a2:8b:a7:76:af:b6:54:7a:03:bc:0f:5f:26:94:a7: e6:94:dc:8c:d7:db:a0:d1:f3:22:c5:70:e4:93:00:c6:07:2c: 90:c8:47:ee:2e:21:d8:a3:e7:2d:50:fc:5a:e0:6d:e0:18:e1: da:b5:a8:58:64:a8:5c:48:99:af:b6:f3:13:3f:af:5c:20:b2: f6:45:22:cf:4d:f6:0c:1a:15:17:bd:d2:04:1f:c1:b7:79:dd: 1d:55:ae:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkaNLJgLT3Vc8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDRhYzFmNTYtYjg5YS00Mjc5LWFhZmUtODgyZWZjMjFhYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv27qsoHcmfyNZPOD+RKCDwP5qjgU/Q3YnpDq +VgfN/9FwppFUGmzkgOceWES6l9zTP8LfjXi2Nr7m44YfVW9E2Cs3IEI3l+RQNzV Ju82lzw6kSucMBGJxAXbhAuo37+UkUuNaoFGpdYu3pad/dysLEe9jWvhcHO8vegQ hUyRWI+4lwEnAmr6/rPO1A7AyPw7/yUHbr5/RbHCoindQPw4sQ6L4CeSHFRGrkfn krWg6F6AxGA0u1nSi4Ww9rlz4G5jvYqCH/eE2v/Ip5y6KfSd3st0yzEuyIHFh9k2 baoTrWihzIPuZ0LNCrMR7UVMxkOnJJzcXRob4Uaypi6vpDUzhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4oCeSx7te2R8EUFKGnA0p9WksWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjhkNGFhMDEtNTc4ZC0z MjVhLWI4NDMtM2UwMGYyM2JiNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfGDX5kmIsPDyYEtRSrJP4zJJRjWWKQAzdK7B10356GkVHLfXxyLQMz 6P1d/IjRBbibAupYCPZ5E+aJtSY9Pv8rQKoy2OyKxGGKtqNdSaFSKG7cwUvjPJpq GjBVq81zxvpZLJmu+SqkKn2s0JLL2HJrm+Cv4g19zOci5O4HqZx4klviZ462S+EQ AU1Ul41RSj7CPg9jlIG44s4Wxv2r30ni7HLeDKKLp3avtlR6A7wPXyaUp+aU3IzX 26DR8yLFcOSTAMYHLJDIR+4uIdij5y1Q/FrgbeAY4dq1qFhkqFxIma+28xM/r1wg svZFIs9N9gwaFRe90gQfwbd53R1Vru8= -----END CERTIFICATE-----Generated at Sun Sep 20 23:19:53 2026 by rpki-client