$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6cc5fc8-2797-3f3e-a828-20d4d3a9fb7d.roa File: c6cc5fc8-2797-3f3e-a828-20d4d3a9fb7d.roa (raw, json) Hash identifier: q8jkRuD/qtCHavZOyNGMLpdpBt25C8RgCzjvDDBrT0Y= Subject key identifier: 18:63:16:AB:90:05:C0:06:31:13:D5:40:F3:B4:9E:95:7A:30:5E:FE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CD5020CFF431FDEBFE680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6cc5fc8-2797-3f3e-a828-20d4d3a9fb7d.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.151.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d5:02:0c:ff:43:1f:de:bf:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=c6bb30f2-56b8-4097-bc34-85b88e82ec24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:81:73:79:ee:3c:12:53:85:78:cf:f8:60:41: d2:3d:12:26:6a:19:cf:3f:cf:fe:e8:9e:c9:2d:d8: 66:58:14:34:09:83:76:99:85:99:60:d3:04:71:92: e7:1f:bb:4e:a1:b4:44:08:c6:f9:81:7c:3f:e9:f0: 63:33:55:e8:38:41:0a:ec:99:30:78:89:47:7b:a6: 1c:33:88:86:18:04:d5:b8:e7:3f:e2:3c:a7:4c:0e: c0:21:81:d3:0d:b9:2b:2a:70:9c:81:83:df:1f:39: 0f:94:1d:14:47:0f:8d:47:0c:22:aa:19:e6:ec:09: 82:6a:4b:62:e3:f2:04:7a:81:d6:49:59:88:75:d1: e8:7c:0b:48:2b:8d:15:34:e4:2d:c5:b8:6c:86:9d: 71:1c:3c:4b:30:f6:79:a6:89:b9:de:8f:63:e6:64: 4c:d8:ae:4f:68:a8:41:a6:c6:0e:07:58:ff:31:51: e1:b2:5e:c3:9c:41:81:8d:90:b0:6f:51:d7:86:9c: 6c:71:df:3c:7e:2a:dd:9a:44:a4:3c:55:00:c7:5d: 25:a4:c7:d0:8e:74:6b:ad:e0:a6:90:75:cd:90:03: b8:dd:b9:aa:25:c0:0a:ee:b8:4f:2b:cb:68:94:63: 14:72:d2:ec:78:0d:55:3d:6a:99:36:1b:a1:10:86: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:63:16:AB:90:05:C0:06:31:13:D5:40:F3:B4:9E:95:7A:30:5E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6cc5fc8-2797-3f3e-a828-20d4d3a9fb7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.151.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e1:58:6e:77:dc:82:43:17:28:98:95:ad:a7:be:14:f0:3f: 42:15:fa:5c:6a:0c:15:64:e3:f4:22:94:66:5d:0b:42:d2:92: d7:34:35:40:de:db:6d:a4:0b:fd:31:c2:4b:8f:bc:be:8c:f2: 0a:65:42:6c:db:ac:6e:56:fe:c3:d0:f5:b7:ab:a9:89:4d:82: 43:d4:fa:09:3b:9f:98:5c:6d:92:6b:44:45:7a:ac:51:14:91: 2a:9d:27:e7:38:8d:7c:26:6e:bb:b4:98:62:77:7a:a9:5b:4b: d6:c8:ff:e5:fb:b4:23:75:6d:08:7a:e2:2e:c3:7a:3d:40:16: a2:1d:84:6d:14:0d:c2:4c:9a:b2:1e:6f:b8:7c:4b:8e:6b:b8: 2e:18:67:e2:58:b6:23:ed:d7:52:48:2c:c5:da:81:34:15:09: a4:05:aa:33:8f:7f:23:28:59:04:83:a9:65:74:32:19:56:92: 88:36:3b:d4:d6:9a:93:f0:2d:53:85:78:bf:0d:d9:33:cb:df: c5:86:4b:f5:47:23:77:31:e3:cc:78:1d:63:cb:dc:ac:5e:99: c7:bc:87:c4:8b:8d:79:8f:c7:34:f5:a1:51:cc:ff:22:09:dd: 17:a2:02:0f:c3:8c:03:f9:ff:17:39:9e:03:c8:86:0d:b9:de: df:a5:52:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNUCDP9DH96/5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YzZiYjMwZjItNTZiOC00MDk3LWJjMzQtODViODhlODJlYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YFzee48ElOFeM/4YEHSPRImahnPP8/+6J7J LdhmWBQ0CYN2mYWZYNMEcZLnH7tOobRECMb5gXw/6fBjM1XoOEEK7JkweIlHe6Yc M4iGGATVuOc/4jynTA7AIYHTDbkrKnCcgYPfHzkPlB0URw+NRwwiqhnm7AmCakti 4/IEeoHWSVmIddHofAtIK40VNOQtxbhshp1xHDxLMPZ5pom53o9j5mRM2K5PaKhB psYOB1j/MVHhsl7DnEGBjZCwb1HXhpxscd88firdmkSkPFUAx10lpMfQjnRrreCm kHXNkAO43bmqJcAK7rhPK8tolGMUctLseA1VPWqZNhuhEIZzxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhjFquQBcAGMRPVQPO0npV6MF7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzZjYzVmYzgtMjc5Ny0z ZjNlLWE4MjgtMjBkNGQzYTlmYjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvhWG533IJDFyiYla2nvhTwP0IV+lxqDBVk4/QilGZdC0LSktc0NUDe 222kC/0xwkuPvL6M8gplQmzbrG5W/sPQ9berqYlNgkPU+gk7n5hcbZJrREV6rFEU kSqdJ+c4jXwmbru0mGJ3eqlbS9bI/+X7tCN1bQh64i7Dej1AFqIdhG0UDcJMmrIe b7h8S45ruC4YZ+JYtiPt11JILMXagTQVCaQFqjOPfyMoWQSDqWV0MhlWkog2O9TW mpPwLVOFeL8N2TPL38WGS/VHI3cx48x4HWPL3Kxemce8h8SLjXmPxzT1oVHM/yIJ 3ReiAg/DjAP5/xc5ngPIhg253t+lUno= -----END CERTIFICATE-----Generated at Tue Sep 22 08:57:57 2026 by rpki-client