$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa File: 76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa (raw, json) Hash identifier: vsur+chP/Jk/xkl/Y1FASyPf5H9eyzP/2EaT521ZkT4= Subject key identifier: 41:BB:7D:15:26:27:B1:21:1D:69:DC:48:3D:89:5F:03:14:71:FD:1D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F130242A1C01E4C9A0BDD0E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.146.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:42:a1:c0:1e:4c:9a:0b:dd:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=26b2e7bf-fc89-4d5a-a15e-07fa508e6389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:31:50:37:95:47:59:f3:84:37:82:b8:c8: 75:35:5b:45:94:b9:ba:57:83:87:33:3a:63:19:b4: c6:af:7b:58:d4:11:c9:65:c4:1f:16:50:ca:16:f5: 68:ad:af:3a:a1:16:38:73:51:84:b7:84:09:40:1e: 38:c7:c1:92:96:e5:cb:2e:f3:b5:31:ee:31:48:20: 55:de:28:bd:9c:15:15:4f:2d:59:2d:4a:b4:00:0e: 42:73:41:a7:cc:65:ec:6b:5d:b7:ab:cc:0c:e8:1c: 91:c3:6b:5b:6d:a3:63:65:19:83:97:c1:40:25:9d: 1e:49:76:d2:62:ed:c9:c9:6f:4a:df:69:d2:dc:1f: ba:df:15:63:3a:31:fa:da:af:8c:6a:b6:61:1d:45: 0b:33:68:ec:ea:37:3d:dd:50:05:0b:59:b7:e0:91: 7b:d9:13:0a:e4:9f:e5:d7:04:b8:f6:9d:49:fe:e0: 2b:0b:f4:88:4d:b2:06:bc:94:44:cd:2e:ae:2a:cf: 2f:57:51:27:64:69:e7:de:62:39:cb:64:af:1e:15: d6:e0:3b:43:f8:81:df:37:10:e4:8c:ec:10:bb:f1: 15:0e:eb:a1:5d:90:07:1d:8d:58:76:16:b7:72:c8: ee:82:c4:6f:9e:6b:22:98:f9:33:df:7d:4e:77:c7: 44:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BB:7D:15:26:27:B1:21:1D:69:DC:48:3D:89:5F:03:14:71:FD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9a:ee:0b:35:3b:6d:15:9e:a8:75:96:20:49:06:98:90:d6: bb:12:b9:51:fd:05:bb:fe:59:ff:51:39:e5:52:91:e0:9a:dc: 6f:3c:4e:11:fb:49:f3:ca:a5:09:b1:c1:4b:66:20:a9:7a:f0: 00:a3:2d:65:c6:95:c3:b0:ed:aa:76:81:b6:d8:70:af:26:69: 0e:b6:1f:f0:d5:41:47:d2:a9:c7:45:21:0e:13:a6:f1:2e:40: 1d:f9:e1:9c:ac:2c:14:11:c4:a8:c2:d9:cb:f6:bd:aa:9b:3f: 0b:08:27:c0:df:c3:2b:35:ae:3f:b3:55:75:85:b3:2b:a2:b9: a9:f7:4f:20:a6:b8:3c:91:03:31:61:fa:02:a2:98:97:3e:1f: 90:01:e8:df:0f:a7:01:44:14:a6:ca:c0:8c:41:1f:a5:79:47: 36:27:e0:24:a8:24:20:b6:b4:92:df:54:98:f6:2c:26:4c:fc: 58:4b:fe:d9:c5:e0:65:bd:55:d7:05:2d:6a:ac:fb:47:3c:07: 2a:1d:95:29:31:25:5c:55:eb:3c:6e:7d:47:75:df:78:7e:fc: d3:13:6a:7c:38:ad:de:b0:2b:e7:01:0a:91:f1:25:32:13:f8: 71:59:31:a8:eb:b2:5f:e3:ee:4a:ba:5b:65:4c:4c:77:83:d6: 7c:18:fb:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkKhwB5MmgvdDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MjZiMmU3YmYtZmM4OS00ZDVhLWExNWUtMDdmYTUwOGU2Mzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GgxUDeVR1nzhDeCuMh1NVtFlLm6V4OHMzpj GbTGr3tY1BHJZcQfFlDKFvVora86oRY4c1GEt4QJQB44x8GSluXLLvO1Me4xSCBV 3ii9nBUVTy1ZLUq0AA5Cc0GnzGXsa123q8wM6ByRw2tbbaNjZRmDl8FAJZ0eSXbS Yu3JyW9K32nS3B+63xVjOjH62q+MarZhHUULM2js6jc93VAFC1m34JF72RMK5J/l 1wS49p1J/uArC/SITbIGvJREzS6uKs8vV1EnZGnn3mI5y2SvHhXW4DtD+IHfNxDk jOwQu/EVDuuhXZAHHY1Ydha3csjugsRvnmsimPkz331Od8dExQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG7fRUmJ7EhHWncSD2JXwMUcf0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzZmMjk5ZDUtNjBjYy0z Mjk0LWJhNDItNGM3YzcwYzJmMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGa7gs1O20Vnqh1liBJBpiQ1rsSuVH9Bbv+Wf9ROeVSkeCa3G88ThH7 SfPKpQmxwUtmIKl68ACjLWXGlcOw7ap2gbbYcK8maQ62H/DVQUfSqcdFIQ4TpvEu QB354ZysLBQRxKjC2cv2vaqbPwsIJ8Dfwys1rj+zVXWFsyuiuan3TyCmuDyRAzFh +gKimJc+H5AB6N8PpwFEFKbKwIxBH6V5RzYn4CSoJCC2tJLfVJj2LCZM/FhL/tnF 4GW9VdcFLWqs+0c8ByodlSkxJVxV6zxufUd133h+/NMTanw4rd6wK+cBCpHxJTIT +HFZMajrsl/j7kq6W2VMTHeD1nwY+78= -----END CERTIFICATE-----Generated at Tue Sep 22 07:17:36 2026 by rpki-client