$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa File: af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa (raw, json) Hash identifier: 5zyA58gMB1vdBhc4jNWZ8j2zk8UKTQ8LdDs0XnW0bHA= Subject key identifier: D1:FB:A0:51:35:D1:CE:29:35:32:C0:36:A6:1E:4E:E0:C2:6C:A7:25 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CD4BED91863A591BDB400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 192.29.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d4:be:d9:18:63:a5:91:bd:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=135ed0ab-7086-40fd-aabf-82766d2fc53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:bf:53:20:dd:0f:93:c6:71:a0:2d:e2:6a: 38:73:ff:a4:95:e1:da:db:9b:f0:e7:9f:f6:37:30: f5:5f:8f:32:52:19:87:d7:da:37:0c:30:2c:c8:94: 0b:e5:39:d7:75:be:84:b5:2c:f2:26:92:cb:2f:1a: fa:09:bb:90:6f:2e:d3:af:50:ee:5c:b7:26:f1:c0: 3b:0c:11:9a:21:d7:33:1a:6a:fe:81:a3:29:62:40: b7:36:46:ab:ae:6b:8c:12:85:85:95:cd:15:1a:99: 4f:64:ea:77:26:db:43:44:b5:09:07:bd:c5:de:20: 79:37:87:63:69:8c:08:34:84:b3:7b:99:c2:89:ba: af:72:a8:59:ab:18:cb:08:b9:f1:fd:8a:31:55:e7: a8:fc:e5:80:ef:46:a7:14:12:ad:ee:18:d0:e8:4b: 16:37:97:5d:bb:19:64:f6:87:21:4e:29:96:ae:14: e8:a6:13:87:e8:58:3e:07:5e:66:d1:50:47:43:a2: a2:89:90:33:8d:89:ce:49:65:e0:b8:e2:e1:08:f1: 7f:fc:be:f6:9e:0a:85:59:e2:98:98:93:a9:ba:7d: 73:8f:eb:f1:85:b1:95:ca:8b:e5:bb:19:f1:68:78: 1a:b1:09:f3:47:05:8c:29:a3:30:f0:85:cb:3e:66: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FB:A0:51:35:D1:CE:29:35:32:C0:36:A6:1E:4E:E0:C2:6C:A7:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:33:ae:de:ba:a7:46:08:d7:62:db:3a:76:2e:08:ae:75:fe: 3d:f8:33:ac:a0:33:f2:ea:78:ac:a0:9f:10:4f:71:f1:62:0f: 9f:83:94:5b:1d:30:de:f8:c4:aa:de:34:6f:25:e1:68:eb:7e: 5f:02:c1:6a:ec:9e:9b:a5:1a:0a:20:c6:cb:1a:dc:48:9b:b5: 77:26:91:93:92:6e:58:7b:80:6f:0f:10:54:f9:e8:6d:66:92: 69:d9:da:4c:26:eb:74:cf:60:24:b1:71:8f:de:1b:54:dd:e9: a9:5f:b6:f9:b4:63:58:c6:53:7b:78:9c:35:7e:f7:fa:40:73: 62:8e:df:ad:ca:25:43:81:dd:c3:65:2f:0d:be:eb:78:5d:41: c7:cf:b8:86:ab:3a:52:03:6b:43:9a:72:66:91:b0:4e:78:58: 55:23:b6:36:20:31:a8:8d:e2:f5:dc:69:1c:46:69:74:67:ff: 2b:74:9b:be:ea:d1:e4:e6:19:32:c2:72:c7:c5:f3:32:19:79: 06:3c:f2:c7:7c:d7:51:ef:19:76:3f:c8:b0:5e:bd:e5:e5:50: 78:55:e2:8d:88:1e:3e:5c:4f:28:86:93:7e:6b:c4:fe:c3:0c: 45:5e:9c:b7:74:dc:83:29:69:06:e0:de:77:cc:16:be:c9:6f: 1b:5a:90:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNS+2RhjpZG9tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MTM1ZWQwYWItNzA4Ni00MGZkLWFhYmYtODI3NjZkMmZjNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM+/UyDdD5PGcaAt4mo4c/+kleHa25vw55/2 NzD1X48yUhmH19o3DDAsyJQL5TnXdb6EtSzyJpLLLxr6CbuQby7Tr1DuXLcm8cA7 DBGaIdczGmr+gaMpYkC3NkarrmuMEoWFlc0VGplPZOp3JttDRLUJB73F3iB5N4dj aYwINISze5nCibqvcqhZqxjLCLnx/YoxVeeo/OWA70anFBKt7hjQ6EsWN5dduxlk 9ochTimWrhTophOH6Fg+B15m0VBHQ6KiiZAzjYnOSWXguOLhCPF//L72ngqFWeKY mJOpun1zj+vxhbGVyovluxnxaHgasQnzRwWMKaMw8IXLPmYG0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH7oFE10c4pNTLANqYeTuDCbKclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWY5ZTEyZGUtMDBjMC0z ZmFhLWFhNWEtMWZjZGRhNmU2ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUzrt66p0YI12LbOnYuCK51/j34M6ygM/LqeKygnxBPcfFiD5+DlFsd MN74xKreNG8l4Wjrfl8CwWrsnpulGgogxssa3EibtXcmkZOSblh7gG8PEFT56G1m kmnZ2kwm63TPYCSxcY/eG1Td6alftvm0Y1jGU3t4nDV+9/pAc2KO363KJUOB3cNl Lw2+63hdQcfPuIarOlIDa0OacmaRsE54WFUjtjYgMaiN4vXcaRxGaXRn/yt0m77q 0eTmGTLCcsfF8zIZeQY88sd811HvGXY/yLBeveXlUHhV4o2IHj5cTyiGk35rxP7D DEVenLd03IMpaQbg3nfMFr7JbxtakCs= -----END CERTIFICATE-----Generated at Wed Sep 23 11:07:28 2026 by rpki-client