$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aabefa6b-b547-3ee5-bb31-362e8acd089a.roa File: aabefa6b-b547-3ee5-bb31-362e8acd089a.roa (raw, json) Hash identifier: +pALNQUZa65liBPE0jd5JzoWv/hFLAqCEAG5mdN7Q40= Subject key identifier: 99:78:7B:39:00:22:91:19:FC:DA:82:AB:8C:A6:E5:BC:CA:2A:F8:EC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B6254BAB8C0E639A0540600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aabefa6b-b547-3ee5-bb31-362e8acd089a.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.213.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:54:ba:b8:c0:e6:39:a0:54:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=3ddd1005-17af-4d6e-9d5e-faac6f60d35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:14:79:8d:e6:08:04:55:aa:ee:3b:6e:16: c7:e3:0a:57:4a:85:d9:15:ab:cf:93:8a:dc:e3:d4: 1a:89:88:a9:da:be:cc:c3:f4:d9:9d:be:03:fa:25: 2d:06:cd:06:d1:18:be:03:d4:b5:1c:67:a1:30:42: 29:7f:81:40:e9:b6:1d:14:02:f2:b2:3d:e6:a3:f2: 01:6f:6e:3c:be:11:cd:c1:bb:39:75:aa:dd:8f:54: 67:e8:88:f7:f1:29:1c:53:a3:9b:81:f4:fd:9e:15: 04:7f:df:e0:4e:f1:cf:85:0b:40:e3:c6:ad:75:eb: ec:60:31:c7:8f:37:33:e6:8a:53:ba:ef:c5:47:c9: 25:ab:bb:59:0f:30:60:ec:c0:76:9b:a3:88:93:1b: e0:1e:48:51:d7:f3:48:71:aa:10:ac:dd:b2:ea:db: b1:a2:1a:a1:4a:d5:8f:5c:01:f4:6d:0f:75:7c:45: 14:a0:ea:64:b0:22:40:2c:42:2a:0a:4c:df:b2:cb: 73:5e:ea:26:d2:24:6b:50:eb:42:7d:9f:bd:01:8e: 8f:7c:98:bf:8f:58:40:11:fb:89:7c:ad:b7:7a:44: 32:cd:f6:ef:8a:96:a9:a3:79:7e:bc:61:d2:96:13: 5b:9a:b5:59:24:73:24:fb:18:f3:1e:30:be:d5:ba: 0e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:78:7B:39:00:22:91:19:FC:DA:82:AB:8C:A6:E5:BC:CA:2A:F8:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aabefa6b-b547-3ee5-bb31-362e8acd089a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:9b:fc:34:1e:85:ef:bd:7a:c1:de:f2:30:e3:35:35:35:9f: e5:09:b7:b5:d8:12:d4:56:94:38:1b:dc:80:da:c4:88:e7:48: 5a:f8:56:91:c8:c5:68:d2:68:e4:01:76:f7:ea:13:dc:09:69: 79:1f:a4:7b:ac:41:8f:14:20:ce:3c:70:0f:35:60:c6:95:e8: 15:a3:5d:5a:d9:0c:9c:ba:14:04:ca:ec:4d:e2:a0:02:e6:bb: 9a:6c:eb:33:bf:82:fe:c8:af:79:38:40:57:7e:8e:48:40:5d: 9b:c1:b4:67:f9:ee:95:4b:42:77:86:ec:86:17:37:23:85:57: 29:6c:25:93:18:01:02:ff:1b:8f:1b:0c:0b:0e:af:4a:0d:f6: 7f:63:25:6d:26:3c:17:f3:43:92:80:a1:1a:30:92:3d:bf:52: cd:5a:6e:5d:b4:ed:ab:ff:7f:bb:fa:5d:63:e5:81:0f:79:73: 01:4a:49:0a:73:25:94:76:71:55:da:5d:29:55:19:c1:fa:c1: e7:f2:7e:9e:77:af:d0:af:fe:39:e5:d8:9d:88:0a:1f:05:2f: e6:bd:08:32:f0:78:3c:8b:60:18:db:d3:21:b1:28:cc:ab:7d: bb:18:4b:95:72:3e:93:08:1e:fc:8b:94:bc:57:74:90:bf:b5: c3:cc:40:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlS6uMDmOaBUBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk M2RkZDEwMDUtMTdhZi00ZDZlLTlkNWUtZmFhYzZmNjBkMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp4UeY3mCARVqu47bhbH4wpXSoXZFavPk4rc 49QaiYip2r7Mw/TZnb4D+iUtBs0G0Ri+A9S1HGehMEIpf4FA6bYdFALysj3mo/IB b248vhHNwbs5dardj1Rn6Ij38SkcU6ObgfT9nhUEf9/gTvHPhQtA48atdevsYDHH jzcz5opTuu/FR8klq7tZDzBg7MB2m6OIkxvgHkhR1/NIcaoQrN2y6tuxohqhStWP XAH0bQ91fEUUoOpksCJALEIqCkzfsstzXuom0iRrUOtCfZ+9AY6PfJi/j1hAEfuJ fK23ekQyzfbvipapo3l+vGHSlhNbmrVZJHMk+xjzHjC+1boOxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJl4ezkAIpEZ/NqCq4ym5bzKKvjsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWFiZWZhNmItYjU0Ny0z ZWU1LWJiMzEtMzYyZThhY2QwODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgdUHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+b/DQehe+9esHe8jDjNTU1n+UJt7XYEtRWlDgb3IDaxIjnSFr4VpHI xWjSaOQBdvfqE9wJaXkfpHusQY8UIM48cA81YMaV6BWjXVrZDJy6FATK7E3ioALm u5ps6zO/gv7Ir3k4QFd+jkhAXZvBtGf57pVLQneG7IYXNyOFVylsJZMYAQL/G48b DAsOr0oN9n9jJW0mPBfzQ5KAoRowkj2/Us1abl207av/f7v6XWPlgQ95cwFKSQpz JZR2cVXaXSlVGcH6wefyfp53r9Cv/jnl2J2ICh8FL+a9CDLweDyLYBjb0yGxKMyr fbsYS5VyPpMIHvyLlLxXdJC/tcPMQNM= -----END CERTIFICATE-----Generated at Tue Sep 22 08:58:00 2026 by rpki-client