$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35e0af60-c44d-3961-ac1e-da349bcbedf1.roa File: 35e0af60-c44d-3961-ac1e-da349bcbedf1.roa (raw, json) Hash identifier: eHku/FCSjSqmpRerVG1jfTrZUomxQfpoS1hjI6H2+x4= Subject key identifier: DD:AF:72:29:16:14:90:92:46:25:E6:B7:02:60:12:27:AB:4D:89:15 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F13023AF389BEC447FF6CF500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35e0af60-c44d-3961-ac1e-da349bcbedf1.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.146.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:3a:f3:89:be:c4:47:ff:6c:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=ff043136-9157-4da2-bc64-d2c485b80858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:80:f0:3b:40:82:e1:7b:cf:1e:22:d3:26:17: fa:4d:7d:2b:44:e4:ea:f2:e9:c1:38:6d:18:d5:64: 72:54:65:3f:59:2e:32:95:d2:b3:19:32:39:f5:70: fd:51:4b:a1:9d:f8:3d:a8:83:44:76:d5:21:01:44: 9d:f6:3d:8c:2c:49:64:d7:3f:cd:e3:be:20:d6:6d: 97:b3:d6:fe:42:62:5f:7a:e9:26:c5:31:05:8f:5e: ad:38:66:1e:74:0d:92:8a:d7:47:1f:22:e0:59:15: e9:0f:3e:42:fa:4b:e2:ee:b2:73:77:74:05:54:97: 0c:f9:db:1d:2b:6b:b8:88:91:27:b5:64:63:4d:0d: 92:6f:10:21:8a:f3:5f:d6:bc:8b:b7:54:a3:f1:b6: e6:59:e5:69:4b:03:77:1a:84:7e:4c:93:34:c3:3b: fe:dd:16:d1:9b:5e:80:d8:dc:59:ca:cd:ab:f3:86: 40:dc:48:06:4a:9a:f1:c1:a6:0b:17:5a:08:e1:d5: 02:e5:62:c7:be:c5:e8:c5:3b:64:2b:77:93:25:80: 13:5e:d2:b7:8a:13:8b:4e:b7:71:7b:92:70:51:ec: 21:0b:69:65:89:24:0a:63:68:54:f8:45:b7:92:79: 63:30:ba:97:a2:c2:a2:d1:85:47:14:30:64:52:fd: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AF:72:29:16:14:90:92:46:25:E6:B7:02:60:12:27:AB:4D:89:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35e0af60-c44d-3961-ac1e-da349bcbedf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e8:d9:11:7e:33:28:5d:17:2d:42:2a:bc:a3:58:2f:cb:85: 23:ff:3c:0b:94:57:6b:97:66:61:2e:36:8c:8a:49:e6:fc:0f: 5f:07:8e:a4:4e:4e:ce:24:98:0a:3c:4f:c2:36:1a:9c:29:02: d8:ef:ff:3e:85:3f:f7:8c:86:16:79:eb:55:5a:e4:79:d9:65: 47:fa:89:cc:59:10:be:ab:88:c8:c9:79:2c:8c:9a:09:74:27: bf:86:e4:45:43:61:48:ed:25:1d:99:cd:ef:25:20:f4:44:51: db:a9:00:d9:30:ca:8e:bb:db:81:4e:af:12:69:dc:5c:1b:fc: 22:c2:84:d7:da:2c:32:ae:53:ab:b4:ca:7b:59:09:c0:f2:d4: fd:3b:dc:8a:24:a4:2b:58:3f:f1:d2:0e:1b:e1:a4:55:81:bd: ee:d6:6e:07:0c:1a:2e:e2:21:91:70:ba:2e:c2:68:db:d4:96: cd:6f:6b:be:f7:0d:6a:5f:5b:47:fa:1b:91:ca:9b:ad:6a:8d: 5b:4d:09:ad:92:e0:9d:ca:0a:7f:a7:03:5a:16:a2:79:24:5b: e1:73:4d:cc:98:62:eb:57:13:7a:f1:74:23:ec:d8:62:ae:c3: 4e:e5:20:59:67:b6:a0:ca:33:74:c4:5c:fc:73:9a:eb:84:29: 95:4c:01:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjrzib7ER/9s9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ZmYwNDMxMzYtOTE1Ny00ZGEyLWJjNjQtZDJjNDg1YjgwODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoDwO0CC4XvPHiLTJhf6TX0rROTq8unBOG0Y 1WRyVGU/WS4yldKzGTI59XD9UUuhnfg9qINEdtUhAUSd9j2MLElk1z/N474g1m2X s9b+QmJfeukmxTEFj16tOGYedA2SitdHHyLgWRXpDz5C+kvi7rJzd3QFVJcM+dsd K2u4iJEntWRjTQ2SbxAhivNf1ryLt1Sj8bbmWeVpSwN3GoR+TJM0wzv+3RbRm16A 2NxZys2r84ZA3EgGSprxwaYLF1oI4dUC5WLHvsXoxTtkK3eTJYATXtK3ihOLTrdx e5JwUewhC2lliSQKY2hU+EW3knljMLqXosKi0YVHFDBkUv1fvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2vcikWFJCSRiXmtwJgEierTYkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzVlMGFmNjAtYzQ0ZC0z OTYxLWFjMWUtZGEzNDliY2JlZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgZIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/o2RF+MyhdFy1CKryjWC/LhSP/PAuUV2uXZmEuNoyKSeb8D18HjqRO Ts4kmAo8T8I2GpwpAtjv/z6FP/eMhhZ561Va5HnZZUf6icxZEL6riMjJeSyMmgl0 J7+G5EVDYUjtJR2Zze8lIPREUdupANkwyo6724FOrxJp3Fwb/CLChNfaLDKuU6u0 yntZCcDy1P073IokpCtYP/HSDhvhpFWBve7WbgcMGi7iIZFwui7CaNvUls1va773 DWpfW0f6G5HKm61qjVtNCa2S4J3KCn+nA1oWonkkW+FzTcyYYutXE3rxdCPs2GKu w07lIFlntqDKM3TEXPxzmuuEKZVMAb0= -----END CERTIFICATE-----Generated at Tue Sep 22 05:28:05 2026 by rpki-client