$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/666a5fa8-2935-3725-93ec-7da096b6c2c9.roa File: 666a5fa8-2935-3725-93ec-7da096b6c2c9.roa (raw, json) Hash identifier: RGVLXGZEV11M2S5x1KXm5kTTsEV3ezmiOOinkSGfv18= Subject key identifier: 46:34:69:0F:78:56:EB:3D:E5:91:C7:EF:B5:3F:B5:C2:58:8B:7E:B0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CF7D34F36A5607B74E400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/666a5fa8-2935-3725-93ec-7da096b6c2c9.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.151.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f7:d3:4f:36:a5:60:7b:74:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=cbb115b3-a293-459e-a9aa-d49b4fd7f3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:49:a2:8f:09:0c:07:65:71:1f:5f:b7:c0: b0:25:ab:49:b2:be:bf:b0:8e:de:5d:98:03:51:42: 7a:ec:84:ec:7f:67:bc:3b:bf:1c:f8:8e:0b:36:95: 7c:1d:40:75:5c:84:03:27:f1:26:32:19:db:5e:32: 9e:76:1b:20:f2:53:ee:17:0b:9c:f6:16:77:f7:fe: 85:da:55:2f:89:b9:4b:b7:50:b8:fc:fb:86:3c:12: 22:9a:a7:ec:5b:27:eb:91:11:fb:6f:c5:e7:79:0b: c5:d2:6f:9c:bf:5e:b5:45:4f:d3:83:52:ec:6a:58: b3:0f:2d:90:ba:61:7b:e2:12:75:e4:c4:55:87:8b: c0:a2:d3:6a:7a:81:6e:99:ca:b4:61:5c:12:82:b0: 56:e9:9d:c5:03:10:aa:3e:98:22:b6:f5:de:d8:af: fc:b1:87:e9:08:52:b6:2b:a9:53:52:1c:05:82:dc: a9:60:3b:a1:52:92:70:17:16:0e:49:27:fe:f1:9c: ea:0d:0f:d1:44:8f:70:1b:5e:a1:94:59:05:62:58: 56:e5:ed:41:3d:fc:f7:c2:67:b2:31:27:79:c3:06: d4:2b:06:18:a9:18:82:d0:46:4a:c1:08:ca:f7:d5: 8f:10:8e:8c:e0:84:83:64:c3:3e:94:58:8c:07:51: 46:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:34:69:0F:78:56:EB:3D:E5:91:C7:EF:B5:3F:B5:C2:58:8B:7E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/666a5fa8-2935-3725-93ec-7da096b6c2c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.151.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:94:55:e4:ec:a1:0a:27:d5:ca:77:62:aa:57:45:4b:06:41: b2:2d:a7:e2:08:4f:bd:bf:02:ef:c3:35:94:69:05:1f:28:73: f1:62:7e:6d:18:6c:26:64:4d:56:1c:6b:27:bc:0f:9b:37:2d: e2:89:fb:41:80:73:7a:db:27:06:7e:1c:77:dd:3d:de:dd:b5: a8:74:6b:f8:3a:94:c5:0c:04:e0:07:9d:8c:d8:0f:19:6e:e5: ce:f4:a3:4f:d2:00:fc:62:94:0d:35:27:72:0f:0f:37:ec:e7: cc:57:76:e6:1c:ec:ee:f5:e8:23:bb:53:8f:5e:85:cc:83:3f: 97:eb:74:4e:42:5e:cb:ca:97:49:fe:0b:3b:76:34:13:07:f4: f7:1a:65:5e:ee:40:ea:f5:9a:8c:fe:20:84:36:7e:63:4b:ee: 3a:92:9f:53:c5:ad:49:22:4c:d4:d2:a4:79:f2:4c:52:2b:53: 28:ab:f2:22:d8:88:14:77:ea:58:45:05:d7:3c:2d:f7:7b:ad: 38:df:0f:66:e3:0c:08:ed:98:ff:a6:d3:e3:42:8a:7c:6c:8a: a2:e7:da:0b:89:29:e9:1c:4a:85:47:dd:0a:84:4e:4c:28:b3: 57:6c:e6:ef:58:f3:a2:66:04:6b:9e:09:9e:96:30:36:12:20: 84:40:95:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPfTTzalYHt05AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk Y2JiMTE1YjMtYTI5My00NTllLWE5YWEtZDQ5YjRmZDdmM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjptJoo8JDAdlcR9ft8CwJatJsr6/sI7eXZgD UUJ67ITsf2e8O78c+I4LNpV8HUB1XIQDJ/EmMhnbXjKedhsg8lPuFwuc9hZ39/6F 2lUviblLt1C4/PuGPBIimqfsWyfrkRH7b8XneQvF0m+cv161RU/Tg1LsalizDy2Q umF74hJ15MRVh4vAotNqeoFumcq0YVwSgrBW6Z3FAxCqPpgitvXe2K/8sYfpCFK2 K6lTUhwFgtypYDuhUpJwFxYOSSf+8ZzqDQ/RRI9wG16hlFkFYlhW5e1BPfz3wmey MSd5wwbUKwYYqRiC0EZKwQjK99WPEI6M4ISDZMM+lFiMB1FGTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY0aQ94Vus95ZHH77U/tcJYi36wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjY2YTVmYTgtMjkzNS0z NzI1LTkzZWMtN2RhMDk2YjZjMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuUVeTsoQon1cp3YqpXRUsGQbItp+IIT72/Au/DNZRpBR8oc/Fifm0Y bCZkTVYcaye8D5s3LeKJ+0GAc3rbJwZ+HHfdPd7dtah0a/g6lMUMBOAHnYzYDxlu 5c70o0/SAPxilA01J3IPDzfs58xXduYc7O716CO7U49ehcyDP5frdE5CXsvKl0n+ Czt2NBMH9PcaZV7uQOr1moz+IIQ2fmNL7jqSn1PFrUkiTNTSpHnyTFIrUyir8iLY iBR36lhFBdc8Lfd7rTjfD2bjDAjtmP+m0+NCinxsiqLn2guJKekcSoVH3QqETkwo s1ds5u9Y86JmBGueCZ6WMDYSIIRAlQc= -----END CERTIFICATE-----Generated at Tue Sep 22 06:27:54 2026 by rpki-client