$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa File: ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa (raw, json) Hash identifier: 0VxSdjQVLO05vFT0p7MIlZ/4rs8x4uEa3Tkgpp4HlWg= Subject key identifier: 96:C3:86:3D:47:20:DF:B8:A9:3F:CC:28:DA:1F:95:C3:B4:88:3C:61 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A144C23FBAFDC24D869C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 129.159.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:44:c2:3f:ba:fd:c2:4d:86:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=8fcd2818-2dcc-44b7-95de-b81d93082634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:a0:ce:ef:d1:7f:b3:13:0e:96:3b:dd:5a: fc:0f:07:d9:95:48:17:93:2e:87:a9:bb:c5:93:3e: 56:22:6b:2c:8f:91:47:45:66:be:06:39:57:aa:ba: 86:b0:61:de:69:39:2d:66:da:1f:3a:6a:98:1a:3d: 11:bd:f7:ea:8c:46:a0:11:a0:b0:a6:cc:62:a9:38: 15:50:ff:4b:49:d9:be:db:38:22:5c:81:16:93:e3: fd:f0:ce:fe:aa:03:ed:74:0a:cd:96:c6:52:57:52: 08:25:ea:0e:8f:f8:d4:03:b9:b9:4d:96:5b:de:fd: 77:a3:74:0e:a0:25:ab:20:69:0a:dc:1a:c2:f5:5c: 94:76:e3:9f:b4:87:1e:3a:82:f1:a8:ba:27:5d:10: f0:9b:df:05:ad:2f:68:86:ea:09:67:bc:75:e5:b6: 91:62:dc:48:27:48:d2:e7:1d:ea:8e:80:8f:40:e4: 11:5c:04:a9:3c:85:b8:27:32:a9:3f:80:f9:3b:1c: 4f:b9:36:d9:c2:11:a5:a5:40:0a:a7:5b:0b:7e:2f: 67:ba:54:44:a0:3f:01:42:b5:13:46:11:67:07:5d: f9:76:b7:43:72:44:e3:f8:18:92:af:1e:bf:20:ea: a4:96:6b:80:c8:af:34:33:67:b6:a8:46:fe:78:fd: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C3:86:3D:47:20:DF:B8:A9:3F:CC:28:DA:1F:95:C3:B4:88:3C:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d9:5b:cf:51:19:c7:ac:06:99:b9:92:f7:96:f3:d8:dc:92: 87:be:37:2d:10:09:b3:e1:a0:9a:8d:19:16:09:c5:b4:69:37: 2a:94:85:17:a4:6b:ca:48:95:0c:34:d7:76:31:a1:35:98:58: 28:87:61:6e:fe:6c:a5:9d:a9:47:ef:d9:e4:d9:a1:ff:da:49: 82:07:e3:47:79:ee:72:d1:49:ca:8d:21:45:a6:c9:f2:05:9e: 83:da:78:47:50:60:d5:f5:ac:a1:8c:38:64:dc:ff:a7:3d:fa: 33:08:79:8b:cf:c7:a4:f5:5e:f4:aa:89:a3:1a:c4:b8:13:79: 4a:aa:ea:3f:cb:90:ac:ad:82:d9:ae:3c:09:94:d0:e0:12:57: c4:f6:38:97:b2:9f:5d:62:ba:1c:c6:99:10:b4:9e:6e:dd:09: e2:7c:a8:99:28:04:ea:41:dd:fa:c9:f4:6d:ab:cd:70:a7:90: 71:e7:c6:b3:cc:ad:a1:ba:b8:61:27:a2:32:06:79:73:4f:5c: 64:03:f4:e7:ba:b8:f8:42:fb:91:1f:8a:72:b7:a6:d8:fc:fa: 61:c0:17:4f:26:e7:99:d1:ae:f0:7a:7f:52:f0:d7:cd:34:3f: 97:69:cb:62:41:20:a2:03:c8:91:dc:aa:35:39:2a:b3:34:94: 85:9d:4a:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUTCP7r9wk2GnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OGZjZDI4MTgtMmRjYy00NGI3LTk1ZGUtYjgxZDkzMDgyNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoagzu/Rf7MTDpY73Vr8DwfZlUgXky6HqbvF kz5WImssj5FHRWa+BjlXqrqGsGHeaTktZtofOmqYGj0RvffqjEagEaCwpsxiqTgV UP9LSdm+2zgiXIEWk+P98M7+qgPtdArNlsZSV1IIJeoOj/jUA7m5TZZb3v13o3QO oCWrIGkK3BrC9VyUduOftIceOoLxqLonXRDwm98FrS9ohuoJZ7x15baRYtxIJ0jS 5x3qjoCPQOQRXASpPIW4JzKpP4D5OxxPuTbZwhGlpUAKp1sLfi9nulREoD8BQrUT RhFnB135drdDckTj+BiSrx6/IOqklmuAyK80M2e2qEb+eP3PJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbDhj1HIN+4qT/MKNoflcO0iDxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE4M2Y5YjEtNzA2Yi0z NGFkLThhZjYtYzZmYjRhNTIyYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZ8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLZW89RGcesBpm5kveW89jckoe+Ny0QCbPhoJqNGRYJxbRpNyqUhRek a8pIlQw013YxoTWYWCiHYW7+bKWdqUfv2eTZof/aSYIH40d57nLRScqNIUWmyfIF noPaeEdQYNX1rKGMOGTc/6c9+jMIeYvPx6T1XvSqiaMaxLgTeUqq6j/LkKytgtmu PAmU0OASV8T2OJeyn11iuhzGmRC0nm7dCeJ8qJkoBOpB3frJ9G2rzXCnkHHnxrPM raG6uGEnojIGeXNPXGQD9Oe6uPhC+5EfinK3ptj8+mHAF08m55nRrvB6f1Lw1800 P5dpy2JBIKIDyJHcqjU5KrM0lIWdSmU= -----END CERTIFICATE-----Generated at Tue Sep 22 12:26:47 2026 by rpki-client