$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e663b3a-9f8c-34dd-9633-7fb1aa1262c8.roa File: 4e663b3a-9f8c-34dd-9633-7fb1aa1262c8.roa (raw, json) Hash identifier: oLCs3TKGNDMVZL8GeV+gfipPYNH3POonKYw6UGJ7PhQ= Subject key identifier: 73:B4:81:BF:2A:B4:A0:EA:58:9A:72:D7:5F:0A:07:20:91:68:D5:51 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7CC33BA23BCE749406F80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e663b3a-9f8c-34dd-9633-7fb1aa1262c8.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.157.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cc:33:ba:23:bc:e7:49:40:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=6dc6fe13-5c32-46fb-915f-dda90ac42f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ec:52:16:ae:d5:1b:e0:7a:87:7e:57:1d:82: 93:5a:6a:a6:e0:35:b1:dd:a7:ec:5c:cf:7b:e8:27: 05:d7:e3:5a:2a:e0:f3:86:3a:e9:8f:d8:10:b1:28: af:52:8b:0e:3c:c9:bd:1f:1e:32:fe:57:25:56:f0: 80:f0:34:6a:4a:44:4c:79:18:5c:fb:d7:42:61:03: 51:ec:47:2a:3b:2d:06:30:e0:22:4c:f4:f0:26:13: f5:f4:8b:31:98:e2:b2:d3:16:16:55:f4:fb:42:59: 9e:c6:73:9b:6c:b7:05:6f:b7:01:7a:75:7f:48:1b: 07:03:f1:1c:4f:24:e8:32:8c:d0:17:58:b9:61:f2: 6f:27:e3:2c:7b:ac:b1:95:c5:09:7b:c6:e9:89:f7: 7f:10:bf:b8:38:5e:a6:cc:e5:8e:71:68:50:e4:b5: 73:2b:39:63:60:f5:2a:7e:44:11:72:b6:b6:2b:ed: 3f:04:f1:8b:fe:ef:9b:c8:d3:02:ec:3a:f9:2b:89: 56:7f:16:e4:e4:58:40:0a:0c:d8:86:f8:fe:c5:a7: e5:ec:5a:20:ab:34:36:3b:3a:a5:14:13:01:da:62: f0:9b:f0:3a:d4:9f:fb:20:11:41:bc:4c:22:8c:b4: 46:0c:4c:a1:23:b5:95:21:81:d4:eb:ae:56:35:5d: 3d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B4:81:BF:2A:B4:A0:EA:58:9A:72:D7:5F:0A:07:20:91:68:D5:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e663b3a-9f8c-34dd-9633-7fb1aa1262c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.157.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:09:d3:87:c5:48:27:f0:08:9d:42:07:2f:8b:82:ed:05:e1: 29:f9:63:02:eb:36:c5:ff:6b:4c:67:68:15:41:1c:33:cb:b0: a7:87:9b:bd:a2:ca:c6:d5:f9:06:46:6e:2f:0b:de:82:fa:99: cf:af:7f:47:74:3a:0c:f6:e9:67:01:a0:63:6e:dc:ab:bc:e4: 89:aa:3c:7a:bc:71:63:da:1f:c6:27:e7:be:32:b4:72:4d:c9: 6c:73:2c:ec:cc:d6:96:ce:9f:0b:27:f4:69:b7:76:d9:63:9d: 65:f0:72:ca:dc:49:59:25:9a:87:b0:68:02:dc:db:85:f3:4c: bb:35:98:c5:fb:e4:bc:e3:b4:a7:04:92:84:5f:87:6b:ce:01: 48:7e:43:57:e4:85:06:26:4f:2a:32:52:8a:e9:f6:12:46:ab: 8e:d6:69:99:13:30:cf:e2:80:a1:8f:b8:a2:bb:93:b6:8d:00: d5:35:72:61:28:00:5d:a9:3d:94:40:91:e9:28:97:0c:f6:ba: 84:f9:16:33:9d:12:12:17:c6:10:ec:04:60:a1:e7:37:a0:04: 11:8c:65:8a:11:22:13:a3:b5:56:21:80:55:cc:75:f6:83:79: 13:1d:41:06:6a:cb:ed:a4:18:40:ac:30:cd:fc:c3:8f:87:cc: 4e:d0:4c:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98wzuiO850lAb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NmRjNmZlMTMtNWMzMi00NmZiLTkxNWYtZGRhOTBhYzQyZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+xSFq7VG+B6h35XHYKTWmqm4DWx3afsXM97 6CcF1+NaKuDzhjrpj9gQsSivUosOPMm9Hx4y/lclVvCA8DRqSkRMeRhc+9dCYQNR 7EcqOy0GMOAiTPTwJhP19IsxmOKy0xYWVfT7QlmexnObbLcFb7cBenV/SBsHA/Ec TyToMozQF1i5YfJvJ+Mse6yxlcUJe8bpifd/EL+4OF6mzOWOcWhQ5LVzKzljYPUq fkQRcra2K+0/BPGL/u+byNMC7Dr5K4lWfxbk5FhACgzYhvj+xafl7FogqzQ2Ozql FBMB2mLwm/A61J/7IBFBvEwijLRGDEyhI7WVIYHU665WNV09HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO0gb8qtKDqWJpy118KByCRaNVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGU2NjNiM2EtOWY4Yy0z NGRkLTk2MzMtN2ZiMWFhMTI2MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZ10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUJ04fFSCfwCJ1CBy+Lgu0F4Sn5YwLrNsX/a0xnaBVBHDPLsKeHm72i ysbV+QZGbi8L3oL6mc+vf0d0Ogz26WcBoGNu3Ku85ImqPHq8cWPaH8Yn574ytHJN yWxzLOzM1pbOnwsn9Gm3dtljnWXwcsrcSVklmoewaALc24XzTLs1mMX75LzjtKcE koRfh2vOAUh+Q1fkhQYmTyoyUorp9hJGq47WaZkTMM/igKGPuKK7k7aNANU1cmEo AF2pPZRAkekolwz2uoT5FjOdEhIXxhDsBGCh5zegBBGMZYoRIhOjtVYhgFXMdfaD eRMdQQZqy+2kGECsMM38w4+HzE7QTBs= -----END CERTIFICATE-----Generated at Tue Sep 22 04:16:37 2026 by rpki-client