$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3849f735-42e5-3876-8aee-af094c92edbc.roa File: 3849f735-42e5-3876-8aee-af094c92edbc.roa (raw, json) Hash identifier: NX67SNPB7q7Asfbxcb4Q0wwvPrVczZYh2rEWf/M4s0k= Subject key identifier: 11:34:31:7C:52:1C:62:93:60:0D:6F:4D:D2:87:CF:84:59:95:1F:1F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB3A659AA6EDEE0E4E6B33D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3849f735-42e5-3876-8aee-af094c92edbc.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 31898 IP address blocks: 129.159.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:59:aa:6e:de:e0:e4:e6:b3:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=c25e602d-894b-496c-8671-e9fbe94f77d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9f:0a:37:05:e9:7f:e2:4a:19:c0:8e:ab:1a: 91:8b:f0:f1:25:ab:b7:e7:53:d7:39:d5:77:4a:07: 52:18:30:73:49:f7:91:36:2a:ec:6e:f5:09:a9:99: 18:cb:b8:57:b0:63:0f:af:28:2b:b2:c8:44:70:d1: 42:b9:25:76:ac:0b:91:0b:7a:5d:57:c5:76:bb:b5: 08:9d:42:f2:ef:de:34:ab:82:63:b9:0b:ee:ac:02: 76:1f:92:7c:be:5f:53:b2:92:76:5a:ba:87:c3:b0: 60:fe:48:d9:e9:bf:31:a3:5c:1b:1d:df:c7:f8:97: d3:75:03:d2:ed:8f:6d:ce:61:ac:bf:67:c7:50:7e: 30:2b:49:40:0a:4b:2b:c6:de:e6:4f:fc:1c:b2:05: b7:4d:1d:4a:9d:95:60:c3:2a:62:92:19:48:64:6a: f2:e8:f8:8f:e8:e5:2a:9f:fd:bf:2e:bf:0c:2e:aa: 7d:99:96:01:4b:91:6e:90:c2:f2:81:80:2a:7c:67: 4d:ca:b9:77:c5:55:a1:c8:1e:e2:1d:3c:5a:5d:1a: e5:f3:32:90:0e:41:80:85:d7:78:ba:e9:ee:41:d8: 97:c1:38:f9:e9:b4:eb:dd:f8:74:28:43:00:ea:d2: 4a:07:b9:44:56:71:f7:bf:86:25:d0:0c:26:9f:8c: a5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:34:31:7C:52:1C:62:93:60:0D:6F:4D:D2:87:CF:84:59:95:1F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3849f735-42e5-3876-8aee-af094c92edbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5a:09:b8:be:49:d6:b7:c3:ab:af:23:ea:52:b7:71:05:8c: 10:26:f0:2d:a8:dd:13:7b:86:e9:cc:50:cf:1a:3f:1a:4d:55: d0:f0:55:95:6e:44:2c:5e:c0:af:df:3e:f0:a5:74:ae:7e:17: 9d:e1:0c:bb:45:40:94:90:d7:c1:a1:99:8b:1f:5d:2e:e6:1e: ed:49:9e:28:b8:17:3c:29:a5:89:53:91:43:53:65:cc:82:08: 31:4e:b6:3d:bb:cb:45:af:95:6c:2d:01:54:87:15:22:17:3c: c0:a0:cf:78:11:6e:5f:f5:f0:23:97:46:61:8f:98:4a:da:d3: b9:64:30:66:27:20:c7:41:81:c0:29:12:2e:7e:09:68:7d:7d: 86:53:7f:e6:d2:6d:1e:66:f3:a4:07:14:8d:63:b9:0e:52:9f: 47:40:63:f6:de:1c:0a:79:d4:25:d6:d5:a9:dc:84:a3:9f:0f: db:07:88:e5:99:a3:72:6b:5f:44:37:0e:3c:6c:9a:21:b2:7e: c3:5f:12:a9:39:9c:f3:d5:99:d2:85:22:75:e7:8d:bd:ee:9c: d9:44:cd:7f:c6:c1:bb:c7:39:08:68:04:23:a9:2e:d7:4e:2e: 6b:ed:86:da:9b:57:aa:be:40:b8:a0:6f:b3:cf:42:22:7c:16: 16:ce:21:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zplmqbt7g5OazPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk YzI1ZTYwMmQtODk0Yi00OTZjLTg2NzEtZTlmYmU5NGY3N2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl58KNwXpf+JKGcCOqxqRi/DxJau351PXOdV3 SgdSGDBzSfeRNirsbvUJqZkYy7hXsGMPrygrsshEcNFCuSV2rAuRC3pdV8V2u7UI nULy7940q4JjuQvurAJ2H5J8vl9TspJ2WrqHw7Bg/kjZ6b8xo1wbHd/H+JfTdQPS 7Y9tzmGsv2fHUH4wK0lACksrxt7mT/wcsgW3TR1KnZVgwypikhlIZGry6PiP6OUq n/2/Lr8MLqp9mZYBS5FukMLygYAqfGdNyrl3xVWhyB7iHTxaXRrl8zKQDkGAhdd4 uunuQdiXwTj56bTr3fh0KEMA6tJKB7lEVnH3v4Yl0Awmn4ylFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE0MXxSHGKTYA1vTdKHz4RZlR8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzg0OWY3MzUtNDJlNS0z ODc2LThhZWUtYWYwOTRjOTJlZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZ/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpaCbi+Sda3w6uvI+pSt3EFjBAm8C2o3RN7hunMUM8aPxpNVdDwVZVu RCxewK/fPvCldK5+F53hDLtFQJSQ18GhmYsfXS7mHu1Jnii4FzwppYlTkUNTZcyC CDFOtj27y0WvlWwtAVSHFSIXPMCgz3gRbl/18COXRmGPmEra07lkMGYnIMdBgcAp Ei5+CWh9fYZTf+bSbR5m86QHFI1juQ5Sn0dAY/beHAp51CXW1anchKOfD9sHiOWZ o3JrX0Q3DjxsmiGyfsNfEqk5nPPVmdKFInXnjb3unNlEzX/GwbvHOQhoBCOpLtdO LmvthtqbV6q+QLigb7PPQiJ8FhbOIZo= -----END CERTIFICATE-----Generated at Thu Nov 5 14:03:28 2026 by rpki-client