$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99949ebf-598f-3d56-a4ca-cb9209a8afcb.roa File: 99949ebf-598f-3d56-a4ca-cb9209a8afcb.roa (raw, json) Hash identifier: NoDYBWSbccoKxesRz6eChEFPLyXZVWSix+N9V0uVqRA= Subject key identifier: E7:E3:34:57:D7:8B:34:50:EA:38:41:B5:BB:B7:98:39:96:4F:80:0C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B62571357A3A89F3E75C880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99949ebf-598f-3d56-a4ca-cb9209a8afcb.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.145.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:57:13:57:a3:a8:9f:3e:75:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=0ea5d8a3-093b-41d2-8a75-fd3b167cb4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3b:5d:84:c7:8c:b6:bb:01:c8:bc:03:74:47: f1:2d:4b:54:a1:84:79:5b:4e:c5:a0:dd:a0:22:c9: 03:bc:e3:a6:64:04:67:1f:eb:3f:24:eb:f7:dd:86: df:d5:31:97:9a:e7:2e:59:08:c1:5f:ea:06:a4:7c: 7b:5d:2b:dd:c4:e5:07:1a:6c:01:41:95:6f:55:a5: 60:5b:80:20:b0:95:23:f5:93:ee:e7:f6:43:34:bb: 6b:2a:3f:6f:a4:25:49:59:06:6d:df:a5:fa:51:1c: 55:26:e8:f4:1c:36:53:00:9a:5e:33:9a:bb:ed:95: 34:10:e7:ec:42:7a:c1:56:39:f7:ac:b1:a4:d2:c1: 43:b3:2c:c0:ae:c8:25:c0:65:68:d1:06:5e:2c:4d: a1:da:b0:f2:fa:b8:6c:27:0a:be:3b:c0:8c:6d:67: 70:43:6d:ab:2a:3c:79:7d:d6:da:7c:6f:3d:42:e9: ef:b7:ac:93:2f:c0:bb:65:50:c5:17:43:c7:9e:e3: 21:18:0f:12:e6:bc:7e:b8:1f:60:18:aa:10:d5:7b: 29:6e:c0:9b:b2:0f:28:0c:2b:47:47:8e:d6:97:89: 0b:26:0c:12:a7:ee:f7:fa:95:1b:d1:37:fc:58:50: 31:71:e2:62:44:0a:85:c9:6e:f0:97:0e:16:72:77: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E3:34:57:D7:8B:34:50:EA:38:41:B5:BB:B7:98:39:96:4F:80:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99949ebf-598f-3d56-a4ca-cb9209a8afcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:71:be:c2:fd:32:32:b2:cd:7c:f5:63:a1:f5:87:72:82:7f: d2:16:24:cc:65:d1:97:b6:4c:dc:ac:cc:52:5e:18:6a:03:89: a6:8d:6f:8f:c3:77:34:b9:a8:ff:1f:14:6e:da:e2:5e:fb:a2: 4a:f5:81:62:68:2b:61:3b:e5:98:73:b1:d0:72:40:2d:94:ff: b6:01:95:17:23:52:75:37:df:87:ce:57:0a:cd:23:58:b2:80: 23:90:5f:fa:a3:0e:e2:a6:f4:06:b3:24:b4:38:bc:5e:41:12: 7a:41:10:18:92:44:2f:cb:38:f2:c2:f0:5a:3f:e6:79:e2:66: 65:3d:a4:19:06:c6:50:7b:64:c7:e1:2b:2b:a9:53:74:62:85: b6:49:f3:45:91:ed:14:de:52:88:8f:cc:a4:94:06:57:4e:fe: 64:15:3d:d4:c6:c3:ab:de:88:f3:9f:01:51:71:71:df:07:ec: 7f:a2:99:31:09:3e:6d:29:3c:e3:8b:1a:3d:fb:7e:b0:7c:c5: e6:4f:04:7b:66:fa:ab:39:38:35:14:0a:1a:21:3d:fb:bf:63: f8:f1:6e:fd:52:94:ed:83:97:e0:0a:44:2e:10:3f:33:f9:86: f8:3e:6e:63:77:1d:45:6b:e0:07:14:83:1b:18:d4:16:7c:55: b9:f4:81:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlcTV6Oonz51yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MGVhNWQ4YTMtMDkzYi00MWQyLThhNzUtZmQzYjE2N2NiNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDtdhMeMtrsByLwDdEfxLUtUoYR5W07FoN2g IskDvOOmZARnH+s/JOv33Ybf1TGXmucuWQjBX+oGpHx7XSvdxOUHGmwBQZVvVaVg W4AgsJUj9ZPu5/ZDNLtrKj9vpCVJWQZt36X6URxVJuj0HDZTAJpeM5q77ZU0EOfs QnrBVjn3rLGk0sFDsyzArsglwGVo0QZeLE2h2rDy+rhsJwq+O8CMbWdwQ22rKjx5 fdbafG89Qunvt6yTL8C7ZVDFF0PHnuMhGA8S5rx+uB9gGKoQ1XspbsCbsg8oDCtH R47Wl4kLJgwSp+73+pUb0Tf8WFAxceJiRAqFyW7wlw4WcnfWCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfjNFfXizRQ6jhBtbu3mDmWT4AMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTk5NDllYmYtNTk4Zi0z ZDU2LWE0Y2EtY2I5MjA5YThhZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZxvsL9MjKyzXz1Y6H1h3KCf9IWJMxl0Ze2TNyszFJeGGoDiaaNb4/D dzS5qP8fFG7a4l77okr1gWJoK2E75ZhzsdByQC2U/7YBlRcjUnU334fOVwrNI1iy gCOQX/qjDuKm9AazJLQ4vF5BEnpBEBiSRC/LOPLC8Fo/5nniZmU9pBkGxlB7ZMfh KyupU3RihbZJ80WR7RTeUoiPzKSUBldO/mQVPdTGw6veiPOfAVFxcd8H7H+imTEJ Pm0pPOOLGj37frB8xeZPBHtm+qs5ODUUChohPfu/Y/jxbv1SlO2Dl+AKRC4QPzP5 hvg+bmN3HUVr4AcUgxsY1BZ8Vbn0gZI= -----END CERTIFICATE-----Generated at Tue Sep 22 00:53:17 2026 by rpki-client