$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d379f066-cb67-34d1-89fa-bbf46b7f3ff3.roa File: d379f066-cb67-34d1-89fa-bbf46b7f3ff3.roa (raw, json) Hash identifier: 2zq5ZJgUEqp6lKq/AK+5Xb0ZIHo8Q3wQfc1kRQZS+1M= Subject key identifier: 7A:E1:45:C9:6D:5B:3D:C7:EB:A7:F7:C1:B8:B6:57:28:DD:6A:80:38 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F225D22ED8EA42F96D6851728 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d379f066-cb67-34d1-89fa-bbf46b7f3ff3.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 129.145.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:22:ed:8e:a4:2f:96:d6:85:17:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=41ee4420-73ea-4af5-9b1f-7f4010976778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:8a:45:28:94:36:7c:45:4b:71:ac:b9:65: 7a:d5:e7:34:04:a7:8d:fe:24:b4:26:c9:71:26:35: a2:ee:b9:b5:c3:54:10:2f:9a:60:10:e4:b2:b5:03: 02:89:dd:64:b8:a3:86:07:52:b1:5c:3a:eb:e7:12: 69:a0:5e:6e:f2:93:3b:eb:f5:82:44:00:01:31:41: 78:37:ff:56:f9:3a:97:5a:5d:35:89:16:40:26:78: bd:79:c6:c2:89:3f:a3:f1:a6:7c:b0:0f:55:57:e9: 36:58:f6:e5:db:b9:37:72:52:e2:70:90:d3:5b:c3: 90:a1:77:ba:b2:7c:77:8f:b8:77:70:57:7b:88:d5: e1:d7:ed:fc:a5:94:07:0b:ff:cd:8b:55:ee:ee:8c: 84:f7:35:48:9a:b4:89:51:28:75:5d:9f:49:e1:21: 78:e4:d1:f8:8b:51:47:3b:5e:d3:13:2b:86:89:3c: 20:6e:11:17:8c:8d:22:db:d9:53:56:ff:50:d5:51: e4:4e:f8:4e:e3:d2:f8:c5:af:cd:6b:a9:4e:53:c7: d1:4f:60:d8:e3:04:57:2a:dd:87:db:76:bc:fe:d8: 0f:6d:36:db:b6:ed:78:dd:b7:47:1f:37:09:9a:79: c6:c7:03:75:b1:56:34:64:46:b7:aa:31:b8:56:b7: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E1:45:C9:6D:5B:3D:C7:EB:A7:F7:C1:B8:B6:57:28:DD:6A:80:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d379f066-cb67-34d1-89fa-bbf46b7f3ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c9:cf:7f:a4:a3:30:07:0a:ef:05:6a:3b:dd:9c:86:93:29: 19:21:40:c1:41:0f:3c:68:03:dc:ec:f0:7c:3f:8f:f6:2f:4e: 27:c5:7f:d7:b2:f2:57:92:4c:82:21:3c:a9:ef:d5:2d:89:93: 84:d6:69:c2:ec:29:ec:48:00:06:86:ab:a2:16:f8:95:d5:af: 1c:c1:fd:0d:5c:f9:e6:fb:30:ea:df:5d:d2:6f:1e:44:0f:26: 42:bd:f1:70:e1:78:bd:02:ff:64:b9:a0:96:9a:09:ee:f1:5e: f0:1d:18:e0:6d:0c:dd:51:a3:d1:0a:e1:bd:bf:49:19:8d:6a: 8e:3c:c5:a4:52:90:cd:09:1d:71:8f:67:12:68:e3:27:c2:bf: 8b:55:96:3c:c6:92:8f:31:f5:28:fb:a1:f1:52:db:12:a9:fa: 88:ec:2c:b9:36:f7:63:56:71:c2:19:7e:01:6c:9d:d6:3c:ac: cf:ab:ce:d2:a8:b2:a9:23:8c:ba:8a:64:c5:b4:e8:1a:ff:02: d3:66:c1:7b:25:9d:3b:3c:0f:0e:05:8e:95:71:ec:ed:89:96: bd:e9:55:e4:34:bb:28:e7:7c:52:f6:4f:c3:f7:86:74:f1:a5: 0a:fc:11:a4:e3:c7:db:5c:de:41:15:50:83:fd:15:90:cf:25: fb:72:18:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXSLtjqQvltaFFygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NDFlZTQ0MjAtNzNlYS00YWY1LTliMWYtN2Y0MDEwOTc2Nzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7mKRSiUNnxFS3GsuWV61ec0BKeN/iS0Jslx JjWi7rm1w1QQL5pgEOSytQMCid1kuKOGB1KxXDrr5xJpoF5u8pM76/WCRAABMUF4 N/9W+TqXWl01iRZAJni9ecbCiT+j8aZ8sA9VV+k2WPbl27k3clLicJDTW8OQoXe6 snx3j7h3cFd7iNXh1+38pZQHC//Ni1Xu7oyE9zVImrSJUSh1XZ9J4SF45NH4i1FH O17TEyuGiTwgbhEXjI0i29lTVv9Q1VHkTvhO49L4xa/Na6lOU8fRT2DY4wRXKt2H 23a8/tgPbTbbtu143bdHHzcJmnnGxwN1sVY0ZEa3qjG4VrdL+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrhRcltWz3H66f3wbi2VyjdaoA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDM3OWYwNjYtY2I2Ny0z NGQxLTg5ZmEtYmJmNDZiN2YzZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnJz3+kozAHCu8FajvdnIaTKRkhQMFBDzxoA9zs8Hw/j/YvTifFf9ey 8leSTIIhPKnv1S2Jk4TWacLsKexIAAaGq6IW+JXVrxzB/Q1c+eb7MOrfXdJvHkQP JkK98XDheL0C/2S5oJaaCe7xXvAdGOBtDN1Ro9EK4b2/SRmNao48xaRSkM0JHXGP ZxJo4yfCv4tVljzGko8x9Sj7ofFS2xKp+ojsLLk292NWccIZfgFsndY8rM+rztKo sqkjjLqKZMW06Br/AtNmwXslnTs8Dw4FjpVx7O2Jlr3pVeQ0uyjnfFL2T8P3hnTx pQr8EaTjx9tc3kEVUIP9FZDPJftyGI0= -----END CERTIFICATE-----Generated at Thu Sep 24 04:31:14 2026 by rpki-client