$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb8982ef-d66f-39ea-b5a6-ba28882be242.roa File: cb8982ef-d66f-39ea-b5a6-ba28882be242.roa (raw, json) Hash identifier: rAM02mkusyaDKC1o4d/zOXGvYYXZYerywT+b3YkisyQ= Subject key identifier: 6E:F0:3A:6E:42:21:4B:05:17:59:2C:6C:43:33:DE:3D:92:58:02:11 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CFFCBCF81F12F6F366B20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb8982ef-d66f-39ea-b5a6-ba28882be242.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 129.159.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ff:cb:cf:81:f1:2f:6f:36:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=132f55c7-12bd-4ac9-a536-a51ffc1b5257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:c6:83:96:a2:3c:3c:c7:c1:bd:38:40:4d: 76:65:d7:11:8a:07:5b:33:ba:73:b1:36:e0:d1:4d: 57:fc:2a:4a:31:83:ab:f4:1f:81:79:e5:92:d9:20: 01:2e:05:e7:6d:8d:60:3b:ef:76:b9:86:ba:e8:63: 4f:1d:ce:aa:9c:17:0e:d1:40:90:a2:5c:b5:2e:bf: 0a:60:f6:06:d1:49:eb:ac:5d:50:13:d4:17:c4:cd: 56:7e:32:e8:0a:ec:5e:87:07:6e:a1:ee:af:83:26: 3c:44:e0:75:be:37:83:b7:76:bf:1c:0a:fe:06:9b: 92:04:14:05:a5:aa:8f:ff:84:58:d1:8b:38:b7:11: df:ec:87:5d:8f:00:da:11:93:fa:26:0d:8f:42:c0: f3:69:d5:6d:82:05:e3:ad:f0:3c:d2:4e:6c:91:9f: ca:8d:60:b3:24:03:53:77:d6:bc:76:e6:82:6d:0c: b0:a8:d5:bd:03:f6:a8:d6:e7:37:ab:cc:72:76:8c: d2:b6:71:d2:bc:82:a3:ed:78:b6:a9:d6:75:e0:12: 37:8d:19:55:66:40:33:6d:6d:93:40:76:57:f6:c0: f7:fe:65:a9:93:fd:2e:f5:1f:82:11:76:73:0b:52: 65:a0:ad:7d:00:fa:a1:2e:14:f4:78:66:35:7b:18: a8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F0:3A:6E:42:21:4B:05:17:59:2C:6C:43:33:DE:3D:92:58:02:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb8982ef-d66f-39ea-b5a6-ba28882be242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:37:6a:68:ad:6e:72:b0:6b:a7:af:99:34:7f:6d:ec:6a:df: 39:a4:de:32:bb:14:d0:e5:63:89:29:56:b5:fd:43:3d:e2:ce: 91:71:7a:4d:12:2f:1e:e2:19:22:d6:88:04:4d:5c:2e:49:f9: e0:53:d0:6a:5a:05:ba:0d:f1:89:58:fa:2b:5c:15:5f:e8:9a: 18:f0:3c:6f:01:bf:0b:85:0c:3e:ca:38:79:9f:5f:90:e7:71: e4:da:69:eb:96:36:16:76:49:aa:21:d7:86:d2:5e:cc:d4:ed: 59:4d:4b:99:b1:99:07:32:77:ed:ae:b9:14:8a:1c:9c:35:c8: aa:92:f8:4f:e9:d1:e2:dd:fb:fc:de:ef:d7:f6:c1:97:29:f6: e5:05:08:e1:53:dd:f1:da:01:c5:a0:0c:5d:78:c4:42:ed:fb: b8:de:fd:f3:79:56:49:03:29:d3:d7:f0:1f:24:48:59:b9:da: 41:ff:32:a5:49:87:f3:82:db:76:e0:a2:97:75:31:49:57:7c: f4:da:61:b7:54:14:11:ab:51:f7:42:c6:9f:d4:49:44:31:70: 28:f8:ca:6a:64:7e:d0:d4:fa:a4:68:fb:15:74:9e:fd:1e:bb: 89:ba:f3:04:89:1a:0f:13:97:bf:90:ab:12:d7:d6:88:e3:7e: d2:e9:e2:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnP/Lz4HxL282ayAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MTMyZjU1YzctMTJiZC00YWM5LWE1MzYtYTUxZmZjMWI1MjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf7Gg5aiPDzHwb04QE12ZdcRigdbM7pzsTbg 0U1X/CpKMYOr9B+BeeWS2SABLgXnbY1gO+92uYa66GNPHc6qnBcO0UCQoly1Lr8K YPYG0UnrrF1QE9QXxM1WfjLoCuxehwduoe6vgyY8ROB1vjeDt3a/HAr+BpuSBBQF paqP/4RY0Ys4txHf7IddjwDaEZP6Jg2PQsDzadVtggXjrfA80k5skZ/KjWCzJANT d9a8duaCbQywqNW9A/ao1uc3q8xydozStnHSvIKj7Xi2qdZ14BI3jRlVZkAzbW2T QHZX9sD3/mWpk/0u9R+CEXZzC1JloK19APqhLhT0eGY1exio1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7wOm5CIUsFF1ksbEMz3j2SWAIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2I4OTgyZWYtZDY2Zi0z OWVhLWI1YTYtYmEyODg4MmJlMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZ8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA3amitbnKwa6evmTR/bexq3zmk3jK7FNDlY4kpVrX9Qz3izpFxek0S Lx7iGSLWiARNXC5J+eBT0GpaBboN8YlY+itcFV/omhjwPG8BvwuFDD7KOHmfX5Dn ceTaaeuWNhZ2Saoh14bSXszU7VlNS5mxmQcyd+2uuRSKHJw1yKqS+E/p0eLd+/ze 79f2wZcp9uUFCOFT3fHaAcWgDF14xELt+7je/fN5VkkDKdPX8B8kSFm52kH/MqVJ h/OC23bgopd1MUlXfPTaYbdUFBGrUfdCxp/USUQxcCj4ympkftDU+qRo+xV0nv0e u4m68wSJGg8Tl7+QqxLX1ojjftLp4jc= -----END CERTIFICATE-----Generated at Wed Sep 23 18:38:53 2026 by rpki-client