$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4988bdfe-ead6-3791-a1f9-4af6dbb5b462.roa File: 4988bdfe-ead6-3791-a1f9-4af6dbb5b462.roa (raw, json) Hash identifier: rrUlwjrV86q/JswrBK3gkF1scjgC3uhpYcbH9WNdCyQ= Subject key identifier: BF:C5:C9:FF:57:27:CF:A3:B3:77:BA:F3:7E:0A:2D:24:63:67:B3:45 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CE42CA75A3AA44B032900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4988bdfe-ead6-3791-a1f9-4af6dbb5b462.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 129.148.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e4:2c:a7:5a:3a:a4:4b:03:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=6e564b44-2f07-44fd-977a-d3d44b0f01c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ea:e5:ee:33:ac:7e:f4:34:d5:77:36:fd:85: ec:14:aa:63:71:16:38:0c:26:00:a9:a0:f7:b4:3b: 4f:21:bd:4d:04:ff:b7:5b:d1:92:5a:f9:a5:f8:13: 26:ea:0f:87:d1:34:3e:16:18:d4:a5:47:52:de:59: c7:70:6c:0a:9a:eb:15:d7:34:21:1d:a2:d1:9a:7e: 10:d5:ed:dd:ec:4e:22:ce:d7:c0:a5:52:64:ad:34: f8:02:f5:51:f2:a1:21:56:15:d1:86:27:c5:ac:a7: 4d:4f:53:38:77:92:a0:73:7b:08:d8:e0:d7:e8:2b: ef:ca:27:29:4a:7c:2a:fb:49:71:42:e5:9d:0b:6f: 38:92:4a:a9:ba:3b:83:99:54:38:f5:f7:c7:e4:b1: bb:1b:f0:06:89:37:57:ab:f7:a5:3c:26:34:3b:2e: 53:a5:a6:8a:d0:08:23:af:95:a6:0e:c0:5b:8d:32: 0c:2d:39:e1:72:4a:6e:48:97:e6:24:d6:4f:6f:2c: 1a:5b:61:91:1f:2b:10:48:fc:8c:4f:60:bc:66:0d: b6:f0:7a:64:a8:46:84:37:df:10:cd:a8:0d:7e:ca: 2b:69:5c:e3:e4:03:c2:1e:0b:c9:2d:4d:59:74:6d: 30:a9:59:60:3f:95:db:9a:89:eb:29:11:f9:66:14: 0a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C5:C9:FF:57:27:CF:A3:B3:77:BA:F3:7E:0A:2D:24:63:67:B3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4988bdfe-ead6-3791-a1f9-4af6dbb5b462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:0d:ef:7c:b5:64:e7:ad:a7:60:33:0a:1f:81:e0:a2:4d:fa: be:c4:b4:90:51:44:59:c9:92:bc:44:98:59:81:3a:33:1a:60: 15:bf:d7:18:32:a7:2e:2c:e1:57:a4:a3:b7:b6:4c:98:3f:72: 18:43:9b:68:8b:19:32:29:55:1b:70:06:f3:e3:46:80:d6:88: 84:a1:92:f0:a5:56:7f:3c:c4:a0:6b:9f:6d:2f:d8:4f:e1:fa: 2e:47:b3:bb:96:34:f4:6d:41:31:15:a7:79:62:85:c6:fd:4a: 5d:84:19:09:13:78:e8:ad:62:6c:a9:90:41:16:b3:e5:d0:d6: cb:53:78:a6:35:9e:5f:bd:51:c9:70:50:df:ba:67:fc:a5:b0: ac:d5:89:a9:49:52:a2:68:c1:5b:e4:f7:03:37:90:39:6b:2c: 63:70:b9:ca:76:35:4b:40:6a:63:6c:3a:91:0e:5d:a0:9c:a3: 33:90:ca:8d:14:51:63:7e:a0:bc:74:77:2a:ae:1e:79:fc:e7: 2e:18:9f:4c:54:39:b3:81:5b:91:af:6a:b1:59:ba:bd:d7:4c: 89:93:e8:92:e4:7c:91:48:98:e4:5a:fb:28:97:92:b2:c9:d3: 7e:22:5e:37:ed:9d:79:c6:77:2b:d7:22:94:d1:c0:51:06:48: 74:93:c2:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOQsp1o6pEsDKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NmU1NjRiNDQtMmYwNy00NGZkLTk3N2EtZDNkNDRiMGYwMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+rl7jOsfvQ01Xc2/YXsFKpjcRY4DCYAqaD3 tDtPIb1NBP+3W9GSWvml+BMm6g+H0TQ+FhjUpUdS3lnHcGwKmusV1zQhHaLRmn4Q 1e3d7E4iztfApVJkrTT4AvVR8qEhVhXRhifFrKdNT1M4d5Kgc3sI2ODX6Cvvyicp Snwq+0lxQuWdC284kkqpujuDmVQ49ffH5LG7G/AGiTdXq/elPCY0Oy5TpaaK0Agj r5WmDsBbjTIMLTnhckpuSJfmJNZPbywaW2GRHysQSPyMT2C8Zg228HpkqEaEN98Q zagNfsoraVzj5APCHgvJLU1ZdG0wqVlgP5XbmonrKRH5ZhQKAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/Fyf9XJ8+js3e6834KLSRjZ7NFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDk4OGJkZmUtZWFkNi0z NzkxLWExZjktNGFmNmRiYjViNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwN73y1ZOetp2AzCh+B4KJN+r7EtJBRRFnJkrxEmFmBOjMaYBW/1xgy py4s4Veko7e2TJg/chhDm2iLGTIpVRtwBvPjRoDWiIShkvClVn88xKBrn20v2E/h +i5Hs7uWNPRtQTEVp3lihcb9Sl2EGQkTeOitYmypkEEWs+XQ1stTeKY1nl+9Uclw UN+6Z/ylsKzVialJUqJowVvk9wM3kDlrLGNwucp2NUtAamNsOpEOXaCcozOQyo0U UWN+oLx0dyquHnn85y4Yn0xUObOBW5GvarFZur3XTImT6JLkfJFImORa+yiXkrLJ 034iXjftnXnGdyvXIpTRwFEGSHSTwuU= -----END CERTIFICATE-----Generated at Mon Sep 21 14:55:52 2026 by rpki-client