$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96137649-e977-39fe-9a12-bb593b670e9d.roa File: 96137649-e977-39fe-9a12-bb593b670e9d.roa (raw, json) Hash identifier: Zq5JZS3pdU7cOGj/paO1AhGsVsMPrc2uelFsWfyHUmY= Subject key identifier: D2:22:92:36:8F:09:F0:9A:E7:EC:4C:C6:58:4E:05:97:2A:C9:55:84 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F13024085405FB3EC317F3634 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96137649-e977-39fe-9a12-bb593b670e9d.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.148.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:40:85:40:5f:b3:ec:31:7f:36:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=7f1a402e-848d-4c14-b775-86d38b7fdf1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1a:68:ac:13:5c:0c:11:41:bd:98:51:88:b3: 52:d0:53:97:87:a6:fa:f3:18:4a:57:54:ed:ff:c8: a1:78:9c:a3:95:a5:14:d0:0a:4d:78:b8:2d:4a:05: 8f:ec:f5:b4:05:2f:a4:7f:0a:92:6d:9c:f0:37:97: 9f:3e:a1:68:b6:f1:60:c3:8c:38:0f:9b:d4:ef:78: 25:a5:90:1e:10:3b:e3:2b:5a:5b:d9:3c:31:45:35: d6:6c:8b:a0:b4:b8:09:d1:64:1c:e3:68:80:f3:03: 43:61:af:35:55:30:00:7d:1c:7e:61:39:ef:ec:5d: 8f:1e:d1:63:f5:14:d0:56:a4:87:3b:c7:08:7d:04: 04:b6:7c:e8:d1:eb:a8:ea:21:89:46:32:ea:0d:ee: 62:89:3b:21:ea:3f:36:0a:82:b7:95:bd:ee:bf:91: 6e:4c:b7:d7:35:93:c7:bd:6e:57:ad:95:98:c7:f6: 57:38:c0:38:3e:2d:2c:9a:f0:30:0d:c0:91:dc:67: 69:47:81:eb:ce:db:fd:05:47:67:03:bd:15:06:40: 13:18:33:c9:fe:cb:cc:3d:c6:d2:38:dc:0e:ff:da: 0b:50:f5:ab:92:e0:9d:27:d9:b2:e2:34:8e:ce:24: 89:49:34:82:47:cb:6e:b3:18:e9:0a:37:32:96:31: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:22:92:36:8F:09:F0:9A:E7:EC:4C:C6:58:4E:05:97:2A:C9:55:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96137649-e977-39fe-9a12-bb593b670e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:17:6f:6d:2b:d2:42:e1:bd:ba:69:1e:aa:3b:96:a6:c5:64: 41:c9:b9:62:09:71:6b:ed:f2:1a:01:d8:f1:68:c4:9f:eb:12: 05:d8:e3:ee:5e:f9:4c:b8:d8:31:76:68:3b:20:5b:d4:ca:50: 67:6f:e4:fe:04:1d:b7:c8:44:7e:46:3e:cf:ab:1c:4a:08:ac: e2:67:1b:25:80:68:77:fc:52:ad:11:2b:c7:b9:a1:db:6d:92: 65:ff:f3:fb:c5:7e:5b:58:0e:52:0f:9c:75:57:33:85:e2:95: ea:b8:c2:28:1c:59:35:15:ac:fd:5c:dd:8e:c1:f0:ae:6e:7d: 46:81:4a:8d:95:10:9a:8f:75:00:1f:92:68:ac:48:e1:f4:01: 26:3b:e2:1f:65:8c:b0:4e:a8:55:1c:a2:fe:47:1d:2f:b5:e1: d5:92:d2:6a:17:6e:d6:d3:10:ca:3e:52:b2:be:fe:e1:36:f3: ab:ae:da:08:d5:a8:bd:84:8a:d8:27:e4:82:da:a2:03:2b:24: 3e:e6:92:60:83:16:5e:4c:8c:50:cf:71:04:0e:ab:d9:e6:c5: f3:4a:b2:46:f7:8a:96:b2:57:b3:f9:bf:0e:22:37:68:af:c5: f0:5c:66:ee:20:00:1a:c8:8c:05:0e:20:5f:ab:b5:93:a9:c4: f9:33:3f:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkCFQF+z7DF/NjQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk N2YxYTQwMmUtODQ4ZC00YzE0LWI3NzUtODZkMzhiN2ZkZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hporBNcDBFBvZhRiLNS0FOXh6b68xhKV1Tt /8iheJyjlaUU0ApNeLgtSgWP7PW0BS+kfwqSbZzwN5efPqFotvFgw4w4D5vU73gl pZAeEDvjK1pb2TwxRTXWbIugtLgJ0WQc42iA8wNDYa81VTAAfRx+YTnv7F2PHtFj 9RTQVqSHO8cIfQQEtnzo0euo6iGJRjLqDe5iiTsh6j82CoK3lb3uv5FuTLfXNZPH vW5XrZWYx/ZXOMA4Pi0smvAwDcCR3GdpR4Hrztv9BUdnA70VBkATGDPJ/svMPcbS ONwO/9oLUPWrkuCdJ9my4jSOziSJSTSCR8tusxjpCjcyljHY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIikjaPCfCa5+xMxlhOBZcqyVWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTYxMzc2NDktZTk3Ny0z OWZlLTlhMTItYmI1OTNiNjcwZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUXb20r0kLhvbppHqo7lqbFZEHJuWIJcWvt8hoB2PFoxJ/rEgXY4+5e +Uy42DF2aDsgW9TKUGdv5P4EHbfIRH5GPs+rHEoIrOJnGyWAaHf8Uq0RK8e5odtt kmX/8/vFfltYDlIPnHVXM4Xileq4wigcWTUVrP1c3Y7B8K5ufUaBSo2VEJqPdQAf kmisSOH0ASY74h9ljLBOqFUcov5HHS+14dWS0moXbtbTEMo+UrK+/uE286uu2gjV qL2Eitgn5ILaogMrJD7mkmCDFl5MjFDPcQQOq9nmxfNKskb3ipayV7P5vw4iN2iv xfBcZu4gABrIjAUOIF+rtZOpxPkzP6w= -----END CERTIFICATE-----Generated at Mon Sep 21 04:18:43 2026 by rpki-client