$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa File: bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa (raw, json) Hash identifier: bWPghzqWmXFnB18XTGszftpj1IcBJgWrDWH61g+Eb9Q= Subject key identifier: AD:8C:67:B0:B3:32:4A:08:AC:F5:EE:88:11:06:96:7D:75:C9:36:37 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1CC7C68F786C188EB34DF6C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 129.149.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:c6:8f:78:6c:18:8e:b3:4d:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=612f7f7d-c449-4329-8532-609d2b926046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:87:c3:aa:6e:53:b3:32:6a:e4:60:40:8e:38: 28:e8:d6:ec:cc:08:49:ee:3d:ce:22:d6:db:6c:05: a3:71:48:24:30:2b:57:2f:cc:10:0f:cf:08:d3:35: 36:cf:03:0c:3c:a5:2e:57:e6:2b:0e:2b:24:b2:cf: 6a:96:03:78:31:94:52:49:42:01:1d:2a:8d:2b:74: f1:aa:d1:24:06:47:3c:d5:ee:b9:b8:03:32:d1:8a: b2:3a:c7:5d:30:be:dd:9c:3d:40:75:22:3c:73:df: 2d:15:02:67:af:61:a9:d0:08:3f:f9:f0:b9:7b:8d: 98:74:38:cd:f2:18:5e:91:84:4a:a8:4d:0d:b3:d9: 8d:f9:70:1d:4a:3b:5b:e8:c1:02:39:6c:d5:c3:12: f7:61:5e:52:8c:28:36:53:45:87:15:b0:87:a5:a1: c6:15:af:4c:d1:0d:b6:64:06:5b:cb:80:58:9f:ac: c1:ee:d9:27:ca:80:ae:aa:37:d4:b8:c4:4c:7e:02: 28:13:e4:db:8b:f0:11:a3:7b:39:86:fe:19:5a:a7: ee:0f:62:a9:a3:e2:0f:f5:2e:21:e1:07:35:a5:a4: 3a:e6:1e:b7:d9:1d:48:fa:76:5e:82:6b:1d:f8:b4: b2:4f:ea:87:2d:88:db:e4:d5:8d:b8:4b:3d:37:d7: 06:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8C:67:B0:B3:32:4A:08:AC:F5:EE:88:11:06:96:7D:75:C9:36:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:af:85:7b:d9:a3:7f:b8:9c:1b:8b:3f:0b:38:b5:01:cf:31: 1e:83:0e:e7:e7:24:0f:af:ac:ce:dd:d7:69:d3:24:99:d5:c4: 6c:18:70:1a:82:09:7b:4a:03:16:1a:fa:0b:5d:81:26:a7:4a: 41:ed:b9:97:f8:81:a0:ed:e4:c5:c9:c2:e3:29:7e:73:5c:bb: b9:d5:57:72:f1:c1:8f:eb:70:61:c7:ee:60:7b:81:d3:9f:10: 80:0f:3f:aa:8b:9f:e4:bd:00:a6:cb:bb:b7:50:c3:b8:a2:23: f9:47:33:96:f5:66:37:f7:cb:32:2b:ae:ea:0f:52:66:16:7d: 57:96:1a:4e:0e:a1:a3:ec:ea:a9:c7:ad:9e:c4:fa:03:6f:0d: 38:ea:ed:8d:6f:22:c5:3e:20:70:bd:6e:f8:69:af:2d:28:0b: f4:92:67:d8:3b:74:36:52:d6:05:ad:6a:8c:60:c7:5c:95:70: 4c:aa:36:06:14:23:ec:1b:8d:a6:69:30:fb:25:fb:ce:b6:d8: 32:76:ab:37:67:5a:24:09:46:ed:25:a8:4e:4c:81:16:f7:52: 38:05:0b:45:7f:e5:e3:00:5c:6a:16:c5:b7:90:e1:e2:13:46: 41:77:67:5c:34:a5:00:c3:1a:2a:9a:44:7f:88:1c:11:eb:85: 3c:87:7f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx8aPeGwYjrNN9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NjEyZjdmN2QtYzQ0OS00MzI5LTg1MzItNjA5ZDJiOTI2MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYfDqm5TszJq5GBAjjgo6NbszAhJ7j3OItbb bAWjcUgkMCtXL8wQD88I0zU2zwMMPKUuV+YrDiskss9qlgN4MZRSSUIBHSqNK3Tx qtEkBkc81e65uAMy0YqyOsddML7dnD1AdSI8c98tFQJnr2Gp0Ag/+fC5e42YdDjN 8hhekYRKqE0Ns9mN+XAdSjtb6MECOWzVwxL3YV5SjCg2U0WHFbCHpaHGFa9M0Q22 ZAZby4BYn6zB7tknyoCuqjfUuMRMfgIoE+Tbi/ARo3s5hv4ZWqfuD2Kpo+IP9S4h 4Qc1paQ65h632R1I+nZegmsd+LSyT+qHLYjb5NWNuEs9N9cGfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2MZ7CzMkoIrPXuiBEGln11yTY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmZhNDUzYzgtN2Y5YS0z ZTU2LTg0OWYtZDdjYmVmNGQwMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGvhXvZo3+4nBuLPws4tQHPMR6DDufnJA+vrM7d12nTJJnVxGwYcBqC CXtKAxYa+gtdgSanSkHtuZf4gaDt5MXJwuMpfnNcu7nVV3LxwY/rcGHH7mB7gdOf EIAPP6qLn+S9AKbLu7dQw7iiI/lHM5b1Zjf3yzIrruoPUmYWfVeWGk4OoaPs6qnH rZ7E+gNvDTjq7Y1vIsU+IHC9bvhpry0oC/SSZ9g7dDZS1gWtaoxgx1yVcEyqNgYU I+wbjaZpMPsl+8622DJ2qzdnWiQJRu0lqE5MgRb3UjgFC0V/5eMAXGoWxbeQ4eIT RkF3Z1w0pQDDGiqaRH+IHBHrhTyHf6k= -----END CERTIFICATE-----Generated at Sun Sep 20 21:54:20 2026 by rpki-client