$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be2708d-f96f-31e9-b570-30cc2b48e949.roa File: 2be2708d-f96f-31e9-b570-30cc2b48e949.roa (raw, json) Hash identifier: PGkMQnJ8BJWSMxGsekHq5Rqfh4Meqw6kI2SeDZzqfyM= Subject key identifier: 28:B4:32:87:F6:48:45:E3:4C:37:D5:E2:E6:1F:2B:B4:E9:00:EC:1F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F225D060A402EAACD6D12F980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be2708d-f96f-31e9-b570-30cc2b48e949.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 129.145.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:06:0a:40:2e:aa:cd:6d:12:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=7441a0c3-b6d0-4fc8-94a8-a7fb2ee6ac39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:39:d3:81:37:18:7f:e8:04:9a:54:58:c9: 33:55:17:7d:89:06:f0:c8:b6:b0:60:97:14:a3:f1: 29:81:53:21:0c:00:2a:f3:31:a8:71:1d:b9:b9:b8: e7:b1:24:6f:57:26:27:42:fb:76:6a:c8:94:ce:d7: b8:8d:db:9e:9d:00:9c:48:70:9d:d9:66:42:83:11: f1:52:44:ee:57:c0:ae:59:b3:61:ae:c9:1e:dd:ec: 6a:19:29:9c:f7:ad:9e:6a:cd:c1:76:6d:b4:8f:fa: da:35:1b:01:2d:58:80:f9:6f:eb:74:98:1b:f1:6f: 8a:b9:d9:27:3b:3e:cb:d0:0d:96:fe:eb:e6:e3:bf: eb:b8:34:14:9c:84:79:49:10:46:f2:19:5c:a6:fe: 7f:3f:be:ff:4f:86:6f:98:a1:47:ad:98:c6:2a:a1: 87:ed:1c:34:3c:cd:43:d8:da:18:a5:2f:59:fb:f7: 12:6a:92:81:56:0b:36:64:6f:6d:a8:3c:7a:43:d4: b8:03:9b:d7:6c:df:f9:c5:7a:63:ae:ce:78:54:b6: e5:3a:84:00:81:a5:88:fc:b1:6c:4c:0f:0d:af:e5: 25:91:c7:a5:9f:55:bb:bd:d5:8b:f1:df:90:e7:04: 39:d8:cb:2e:f7:85:4e:04:7e:55:57:c6:80:6a:74: 85:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:32:87:F6:48:45:E3:4C:37:D5:E2:E6:1F:2B:B4:E9:00:EC:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be2708d-f96f-31e9-b570-30cc2b48e949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ea:cf:46:45:e4:34:78:eb:7c:e3:c5:69:ca:f4:dd:19:1b: 59:bc:05:0f:2a:36:67:ef:7f:2e:73:2c:25:77:45:66:85:38: 22:fd:9c:a8:4e:63:c3:15:3a:3c:83:ac:64:67:8b:3e:29:5a: 1d:96:f3:98:66:d2:40:cf:32:0b:e0:90:93:61:e9:da:bf:cf: 94:17:db:a6:f1:7a:63:c1:5b:86:29:68:f0:f9:44:e3:5f:aa: fc:73:6e:ed:4a:ae:30:02:59:33:77:49:4e:66:43:67:b2:6f: 63:9a:ff:8d:bf:b9:2b:f8:f4:71:8e:67:4e:93:a4:57:2d:c5: c0:95:3b:ec:f2:ae:3d:70:c1:30:91:36:70:19:49:b7:6f:14: 8e:8c:b5:e5:12:af:6a:07:cf:94:4a:54:d1:e6:e9:f8:3c:da: d3:0c:56:e4:c2:f7:64:55:20:4b:93:bf:c5:21:b4:38:bf:9b: ec:75:da:3d:b4:0c:f1:12:bd:4a:c5:7c:d4:16:83:47:3c:27: 61:2a:e0:13:ac:91:f8:22:26:fa:22:6d:de:16:45:cd:d9:85: 37:a5:a7:9c:72:be:f3:92:9e:12:3b:47:c6:07:a9:1f:0f:0e: 02:29:18:c7:55:9b:09:c2:58:b6:39:1c:86:27:84:ff:a6:ca: e6:79:a6:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQYKQC6qzW0S+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NzQ0MWEwYzMtYjZkMC00ZmM4LTk0YTgtYTdmYjJlZTZhYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoE504E3GH/oBJpUWMkzVRd9iQbwyLawYJcU o/EpgVMhDAAq8zGocR25ubjnsSRvVyYnQvt2asiUzte4jduenQCcSHCd2WZCgxHx UkTuV8CuWbNhrske3exqGSmc962eas3Bdm20j/raNRsBLViA+W/rdJgb8W+Kudkn Oz7L0A2W/uvm47/ruDQUnIR5SRBG8hlcpv5/P77/T4ZvmKFHrZjGKqGH7Rw0PM1D 2NoYpS9Z+/cSapKBVgs2ZG9tqDx6Q9S4A5vXbN/5xXpjrs54VLblOoQAgaWI/LFs TA8Nr+Ulkceln1W7vdWL8d+Q5wQ52Msu94VOBH5VV8aAanSFFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi0Mof2SEXjTDfV4uYfK7TpAOwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmJlMjcwOGQtZjk2Zi0z MWU5LWI1NzAtMzBjYzJiNDhlOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPqz0ZF5DR463zjxWnK9N0ZG1m8BQ8qNmfvfy5zLCV3RWaFOCL9nKhO Y8MVOjyDrGRniz4pWh2W85hm0kDPMgvgkJNh6dq/z5QX26bxemPBW4YpaPD5RONf qvxzbu1KrjACWTN3SU5mQ2eyb2Oa/42/uSv49HGOZ06TpFctxcCVO+zyrj1wwTCR NnAZSbdvFI6MteUSr2oHz5RKVNHm6fg82tMMVuTC92RVIEuTv8UhtDi/m+x12j20 DPESvUrFfNQWg0c8J2Eq4BOskfgiJvoibd4WRc3ZhTelp5xyvvOSnhI7R8YHqR8P DgIpGMdVmwnCWLY5HIYnhP+myuZ5pnc= -----END CERTIFICATE-----Generated at Mon Sep 21 19:33:30 2026 by rpki-client