$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccd69f46-197d-3c19-bd89-d7a9c65a6fd6.roa File: ccd69f46-197d-3c19-bd89-d7a9c65a6fd6.roa (raw, json) Hash identifier: 3a9/qCLRq0GrDU922dPBLZPsTJfFE8DHvwoT+8wi1fo= Subject key identifier: 73:9A:23:D0:A9:84:29:D0:A5:DE:47:F2:12:61:7B:66:97:46:D2:39 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B625615146FB30EB9504300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccd69f46-197d-3c19-bd89-d7a9c65a6fd6.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.144.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:56:15:14:6f:b3:0e:b9:50:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=bab54c01-6172-4edb-903a-6a0af25186d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:62:e0:bb:e4:53:a4:0e:76:7f:45:41:9b: 2a:2b:92:63:db:4c:ed:16:50:74:38:b6:80:46:4b: fa:91:4f:08:28:84:28:ca:b2:64:29:98:73:4b:ba: 3c:06:43:ff:0b:4f:7c:17:d7:40:56:5f:48:1b:11: 2c:d8:36:a2:8c:99:25:e9:b0:67:9d:b1:7e:19:08: 7e:bb:9f:f9:df:2e:70:1f:71:18:3f:a9:b2:f2:89: bf:b7:fc:e5:03:d9:aa:99:b1:64:7f:33:44:cc:ca: fe:eb:7a:2b:d3:c8:85:9a:41:49:c0:bc:85:7e:92: 8d:6a:3a:63:e9:cc:96:46:fe:1b:01:7d:46:1e:e8: b7:ca:62:25:b5:8b:45:77:ba:29:72:99:a4:79:a8: 17:aa:8d:82:01:fd:ae:0d:2d:08:a9:77:50:11:7e: a9:93:75:e1:42:bf:e6:bc:e5:52:9e:d9:c9:83:02: 36:90:07:3f:bd:2f:79:19:8e:e3:90:a2:a7:c3:c0: 73:72:db:45:82:09:0a:98:99:7c:e8:5f:6e:f1:64: 15:37:34:f2:0a:59:80:7e:36:de:50:93:65:2a:d6: ec:70:12:c2:5b:fc:ab:5f:01:90:54:89:8c:93:01: 24:cf:18:72:12:a5:d2:68:2d:d4:72:6d:db:2a:fd: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9A:23:D0:A9:84:29:D0:A5:DE:47:F2:12:61:7B:66:97:46:D2:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccd69f46-197d-3c19-bd89-d7a9c65a6fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.144.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:77:8c:20:13:21:ad:26:d4:10:1c:10:f7:4d:07:1c:b5:ec: 58:3b:a2:08:d2:01:a4:de:55:ad:93:b7:f7:2f:d9:18:46:b3: b8:19:8f:23:5c:c9:10:91:89:ab:03:60:37:22:b7:5e:60:56: 7c:77:86:7a:55:ed:47:ed:f0:f1:69:96:be:66:5d:3e:d9:94: 44:a0:2e:f5:f2:62:89:6f:54:cf:78:6c:8e:a8:41:3b:d2:99: b5:29:dc:57:7e:0b:a8:51:0f:3c:0c:fa:87:54:a7:64:fd:7b: 26:46:72:af:35:3d:a1:ef:ab:4f:b5:8a:0c:44:ef:aa:67:30: 29:45:cd:2a:a1:d2:f4:62:c0:3d:a3:66:7c:47:63:78:46:c9: 4a:ad:d0:4e:86:c9:f7:14:24:82:6a:ac:5f:9e:7e:f4:3d:ca: 25:39:22:fd:26:03:95:e0:8f:d2:2c:49:4b:ca:d0:a1:04:a1: f4:e3:af:8f:56:81:5c:df:78:07:04:fb:54:4f:d9:76:93:a6: 62:b4:0d:07:86:9e:29:ad:ef:cf:f9:e4:00:8e:9e:8e:04:cd: 79:07:45:74:6f:a0:8f:3a:73:6d:38:97:54:ce:17:46:8d:f6: 46:b5:cf:44:68:47:a8:31:80:fb:4b:2e:20:8c:c2:b5:e1:0e: d3:ad:ee:39 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8bYlYVFG+zDrlQQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YmFiNTRjMDEtNjE3Mi00ZWRiLTkwM2EtNmEwYWYyNTE4NmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0pi4LvkU6QOdn9FQZsqK5Jj20ztFlB0OLaA Rkv6kU8IKIQoyrJkKZhzS7o8BkP/C098F9dAVl9IGxEs2DaijJkl6bBnnbF+GQh+ u5/53y5wH3EYP6my8om/t/zlA9mqmbFkfzNEzMr+63or08iFmkFJwLyFfpKNajpj 6cyWRv4bAX1GHui3ymIltYtFd7opcpmkeagXqo2CAf2uDS0IqXdQEX6pk3XhQr/m vOVSntnJgwI2kAc/vS95GY7jkKKnw8BzcttFggkKmJl86F9u8WQVNzTyClmAfjbe UJNlKtbscBLCW/yrXwGQVImMkwEkzxhyEqXSaC3Ucm3bKv2YhwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHOaI9CphCnQpd5H8hJhe2aXRtI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2NkNjlmNDYtMTk3ZC0z YzE5LWJkODktZDdhOWM2NWE2ZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgZAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgneMIBMhrSbUEBwQ900HHLXsWDuiCNIBpN5VrZO39y/ZGEazuBmPI1zJ EJGJqwNgNyK3XmBWfHeGelXtR+3w8WmWvmZdPtmURKAu9fJiiW9Uz3hsjqhBO9KZ tSncV34LqFEPPAz6h1SnZP17JkZyrzU9oe+rT7WKDETvqmcwKUXNKqHS9GLAPaNm fEdjeEbJSq3QTobJ9xQkgmqsX55+9D3KJTki/SYDleCP0ixJS8rQoQSh9OOvj1aB XN94BwT7VE/ZdpOmYrQNB4aeKa3vz/nkAI6ejgTNeQdFdG+gjzpzbTiXVM4XRo32 RrXPRGhHqDGA+0suIIzCteEO063uOQ== -----END CERTIFICATE-----Generated at Sun Sep 20 21:54:26 2026 by rpki-client