$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30611e51-d403-3da4-8335-67bfe53fc3eb.roa File: 30611e51-d403-3da4-8335-67bfe53fc3eb.roa (raw, json) Hash identifier: AlRpRdSWL0C4c5Dk/vgWGh5XbDI0fuz1r7pEq6vAV8M= Subject key identifier: 26:91:71:01:EC:71:53:0D:86:FB:6E:2D:46:4B:B0:19:03:9E:97:77 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CD418F081FF7B77C4C880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30611e51-d403-3da4-8335-67bfe53fc3eb.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.154.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d4:18:f0:81:ff:7b:77:c4:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=7e550ba7-9904-4694-96ca-eb117d8ce19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:d5:e5:dc:f3:9b:63:8a:6d:a3:f3:36:0f: 72:f4:0a:cb:3d:c4:c4:61:1b:40:5d:66:0a:6d:dd: 93:75:72:14:79:59:03:14:57:23:6b:53:64:e8:98: 65:34:92:fe:4a:00:4a:bf:c6:d9:c0:ee:5c:77:66: f3:13:07:aa:ad:ab:8f:2b:1c:b0:b7:47:a0:c2:1d: 23:fa:25:43:8d:34:a3:db:53:5c:4b:16:dc:f5:f1: f3:0c:7e:a1:ab:d7:60:1d:6b:65:f9:16:29:db:ce: 1f:08:29:25:83:a1:98:c3:68:e3:b0:6c:5f:05:35: 88:df:4c:fc:3a:4c:c4:43:d0:e9:9f:b0:78:b5:65: 6f:51:90:9d:18:09:2f:fa:c7:4b:12:e1:89:9e:ae: fb:51:eb:23:1c:14:5e:ea:47:a2:56:4d:2c:4d:dc: a1:bc:ae:ee:d9:65:96:06:c8:5b:a1:7f:3d:97:0f: a0:46:c4:ec:da:bb:0b:f4:58:c3:b7:ba:c2:27:a0: b1:cd:58:87:cd:a8:96:bc:dd:91:e3:2b:a3:f1:8f: a7:df:06:07:b8:f9:e0:13:2d:9b:71:d6:24:53:05: f2:aa:f2:6e:85:f6:93:da:e1:06:21:22:30:fb:33: 59:09:f8:f1:a3:ae:e0:6c:f5:0d:1a:ab:8e:78:61: 06:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:91:71:01:EC:71:53:0D:86:FB:6E:2D:46:4B:B0:19:03:9E:97:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30611e51-d403-3da4-8335-67bfe53fc3eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.154.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:6c:78:5d:eb:ce:20:2f:86:5c:c4:71:59:4a:04:c0:f2:3f: bd:2d:33:94:73:c5:14:ca:fc:a4:d8:f9:53:d8:5a:84:d7:2b: 1f:73:39:b1:d5:66:34:d6:15:f7:84:82:1a:b1:7d:72:af:49: c4:dd:d6:3a:af:77:31:91:8d:22:50:be:74:9c:69:50:d7:30: c7:21:a3:b9:b9:d3:5d:87:45:8a:32:fd:eb:d6:3c:f4:68:b9: 09:4b:b4:9d:2d:64:9d:7c:b3:fb:d6:57:cc:1b:d7:e5:84:e5: c4:08:53:e7:f4:ef:1c:0d:7a:1c:ac:03:21:70:6d:15:a4:fb: 9a:5d:35:30:27:72:91:a1:45:d5:a8:f3:75:06:ce:26:c5:90: b0:95:05:7b:9e:86:78:c8:d6:3b:50:42:45:4d:54:54:8a:06: 2a:13:9a:0c:8b:dc:9c:8b:0b:b0:93:ac:f2:a0:96:43:00:4c: 08:5f:9e:d0:a9:a7:0f:be:c6:3d:f0:8f:69:19:c7:c5:43:fb: 57:5f:2b:ec:49:c8:36:2e:7c:89:60:55:7c:35:f6:f2:59:dd: 81:be:7f:a5:c4:73:42:01:45:16:bc:89:a3:15:7c:9f:10:e6: 8f:ba:6d:7b:77:32:c3:c3:91:6b:1c:84:22:06:d7:29:e7:b5: 1d:52:ba:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNQY8IH/e3fEyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk N2U1NTBiYTctOTkwNC00Njk0LTk2Y2EtZWIxMTdkOGNlMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFPV5dzzm2OKbaPzNg9y9ArLPcTEYRtAXWYK bd2TdXIUeVkDFFcja1Nk6JhlNJL+SgBKv8bZwO5cd2bzEweqrauPKxywt0egwh0j +iVDjTSj21NcSxbc9fHzDH6hq9dgHWtl+RYp284fCCklg6GYw2jjsGxfBTWI30z8 OkzEQ9Dpn7B4tWVvUZCdGAkv+sdLEuGJnq77UesjHBRe6keiVk0sTdyhvK7u2WWW BshboX89lw+gRsTs2rsL9FjDt7rCJ6CxzViHzaiWvN2R4yuj8Y+n3wYHuPngEy2b cdYkUwXyqvJuhfaT2uEGISIw+zNZCfjxo67gbPUNGquOeGEG4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaRcQHscVMNhvtuLUZLsBkDnpd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzA2MTFlNTEtZDQwMy0z ZGE0LTgzMzUtNjdiZmU1M2ZjM2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlseF3rziAvhlzEcVlKBMDyP70tM5RzxRTK/KTY+VPYWoTXKx9zObHV ZjTWFfeEghqxfXKvScTd1jqvdzGRjSJQvnScaVDXMMcho7m5012HRYoy/evWPPRo uQlLtJ0tZJ18s/vWV8wb1+WE5cQIU+f07xwNehysAyFwbRWk+5pdNTAncpGhRdWo 83UGzibFkLCVBXuehnjI1jtQQkVNVFSKBioTmgyL3JyLC7CTrPKglkMATAhfntCp pw++xj3wj2kZx8VD+1dfK+xJyDYufIlgVXw19vJZ3YG+f6XEc0IBRRa8iaMVfJ8Q 5o+6bXt3MsPDkWschCIG1ynntR1SuqY= -----END CERTIFICATE-----Generated at Tue Sep 22 09:14:06 2026 by rpki-client