$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6afd562-0cd1-3a8c-bebe-dd3825b8b061.roa File: a6afd562-0cd1-3a8c-bebe-dd3825b8b061.roa (raw, json) Hash identifier: 3BnqXYyECmRkc+kUF62LyNTyy/Fd+A3xlSckxX9AnO0= Subject key identifier: 81:19:CD:B7:1F:11:4E:5F:77:7C:42:C4:29:A1:BC:D4:CC:B5:AD:DF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F130247A4E958EF9D48152D00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6afd562-0cd1-3a8c-bebe-dd3825b8b061.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.146.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:47:a4:e9:58:ef:9d:48:15:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=1898cfd3-53df-4cc7-96df-c376c842326f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:b9:87:09:25:ee:8e:0e:6a:45:2a:7c:e3: f1:47:f2:d5:99:cc:f3:c9:9d:12:18:7a:9b:52:af: b9:8c:62:35:5d:e4:d6:ae:de:14:20:f3:9d:55:19: e9:80:06:a8:93:98:70:63:b6:23:4c:f5:02:ea:35: ed:0f:91:2c:9b:2e:11:37:77:ab:0e:ad:8e:6b:2a: 01:3e:cf:d5:30:94:2d:2a:a5:91:21:22:b9:11:37: 6b:0d:a9:d4:9b:35:bc:7a:2c:bc:e0:36:81:15:71: d9:1b:33:6d:ec:48:88:fb:5c:01:50:8f:9f:9a:89: b0:0d:81:2b:92:0e:aa:21:ed:b8:14:8b:32:52:46: 57:1b:1a:26:b6:23:bb:01:5e:11:e3:a5:aa:6d:e5: e9:00:84:89:2b:a1:f9:ee:e5:e6:2f:2f:22:d7:aa: 21:77:25:3d:27:b1:cb:b5:85:a2:1f:16:c5:80:e2: 72:9d:37:c8:a0:fb:df:0a:23:df:d5:1e:54:42:e6: 63:35:45:ed:86:83:14:c7:f6:12:f3:da:9b:66:75: 00:2d:99:6d:ba:8f:ad:3f:c8:bd:60:63:27:6b:51: 7b:8f:6c:0b:ee:0c:38:c0:f0:d8:d7:44:45:d9:b7: 2b:65:b2:90:10:60:5e:e1:0f:54:f1:64:3b:d8:07: 92:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:19:CD:B7:1F:11:4E:5F:77:7C:42:C4:29:A1:BC:D4:CC:B5:AD:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6afd562-0cd1-3a8c-bebe-dd3825b8b061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:31:34:fe:3b:1e:1f:4a:84:53:28:d9:8a:ec:b8:7f:31:fb: 06:3c:41:82:06:15:37:2d:e1:b1:75:9f:62:8c:c4:f8:71:bf: 84:97:15:4a:78:0f:7f:6f:55:02:ef:ae:ed:da:72:c3:8e:b4: e9:01:da:9a:e3:8e:d9:39:28:9d:71:50:6a:d0:06:56:3f:64: e5:d2:b3:d2:cc:51:b9:f7:08:e1:1f:e9:c8:2c:10:d2:52:0c: d8:fb:e4:1e:bd:ed:7b:9f:63:1b:36:ec:92:bb:a3:71:8e:27: 6d:ae:05:0c:d8:33:ad:91:d8:4c:56:7f:5f:bb:28:83:67:eb: 84:9a:48:83:d4:fc:de:90:b4:52:fb:b4:63:6e:9e:99:0b:bd: e2:9d:b5:e9:a4:50:08:90:5d:c6:cd:d1:dd:0e:8e:c0:ea:c0: 7a:db:2c:cd:16:30:26:e5:a6:2a:e5:2c:11:5c:ef:98:aa:3e: 00:28:2d:bb:58:b0:7c:98:1b:27:48:cc:be:7c:55:fb:c1:9a: 6f:32:e4:a6:83:af:fb:8f:26:f1:13:c1:7d:34:9b:d5:18:54: d7:48:96:a5:8e:78:84:98:d4:1a:e5:df:5c:d6:d6:c0:aa:70: d8:02:1c:f1:0d:84:88:d7:d4:dd:3a:58:73:16:65:6a:74:62: 56:c9:bb:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkek6VjvnUgVLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MTg5OGNmZDMtNTNkZi00Y2M3LTk2ZGYtYzM3NmM4NDIzMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfe5hwkl7o4OakUqfOPxR/LVmczzyZ0SGHqb Uq+5jGI1XeTWrt4UIPOdVRnpgAaok5hwY7YjTPUC6jXtD5Esmy4RN3erDq2OayoB Ps/VMJQtKqWRISK5ETdrDanUmzW8eiy84DaBFXHZGzNt7EiI+1wBUI+fmomwDYEr kg6qIe24FIsyUkZXGxomtiO7AV4R46WqbeXpAISJK6H57uXmLy8i16ohdyU9J7HL tYWiHxbFgOJynTfIoPvfCiPf1R5UQuZjNUXthoMUx/YS89qbZnUALZltuo+tP8i9 YGMna1F7j2wL7gw4wPDY10RF2bcrZbKQEGBe4Q9U8WQ72AeSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEZzbcfEU5fd3xCxCmhvNTMta3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTZhZmQ1NjItMGNkMS0z YThjLWJlYmUtZGQzODI1YjhiMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZINMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgxNP47Hh9KhFMo2YrsuH8x+wY8QYIGFTct4bF1n2KMxPhxv4SXFUp4 D39vVQLvru3acsOOtOkB2prjjtk5KJ1xUGrQBlY/ZOXSs9LMUbn3COEf6cgsENJS DNj75B697XufYxs27JK7o3GOJ22uBQzYM62R2ExWf1+7KINn64SaSIPU/N6QtFL7 tGNunpkLveKdtemkUAiQXcbN0d0OjsDqwHrbLM0WMCblpirlLBFc75iqPgAoLbtY sHyYGydIzL58VfvBmm8y5KaDr/uPJvETwX00m9UYVNdIlqWOeISY1Brl31zW1sCq cNgCHPENhIjX1N06WHMWZWp0YlbJuw4= -----END CERTIFICATE-----Generated at Mon Sep 21 14:17:46 2026 by rpki-client