$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e99a1559-68f5-34c7-9a88-697d6e5fe21b.roa File: e99a1559-68f5-34c7-9a88-697d6e5fe21b.roa (raw, json) Hash identifier: gMcf2IyVE3e9MTH+wb5d/QP7C294vjXC9f7Ii1H3tCc= Subject key identifier: 4C:F8:C2:C9:23:69:11:E5:41:1A:A2:33:23:F4:EC:8E:1C:4D:FB:A7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B623F54C4C91CCA1FA0C980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e99a1559-68f5-34c7-9a88-697d6e5fe21b.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.213.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:3f:54:c4:c9:1c:ca:1f:a0:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=2e6099da-88f8-4b0e-8e77-8e69f75a3e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:b4:e1:38:d2:0e:b1:12:75:f1:53:84:7d: 2d:73:ca:c2:10:04:da:af:87:56:28:fa:52:f9:8a: e2:87:3b:62:58:d4:32:49:f6:a6:0f:d7:89:46:e7: 71:ec:a3:02:9f:3b:b5:73:2b:14:eb:58:7e:3a:08: ea:54:3c:27:b2:da:8a:22:26:a1:c7:c7:f9:3c:ed: ba:b4:0d:da:22:19:6a:fe:57:d7:7e:56:80:62:51: 5d:59:67:f5:87:0a:6a:8e:95:86:1c:78:28:6a:fe: da:4e:ed:c2:3e:db:a4:8f:d1:4c:12:f4:f8:c6:69: 69:d6:b2:bb:ce:21:47:be:e6:a8:d6:68:aa:11:0c: 71:0d:1a:7e:91:99:3b:d7:ee:ed:1a:00:58:40:e1: 31:68:f5:56:a1:b8:57:63:4a:1e:a4:78:3b:7d:53: 5f:f5:00:d8:f5:c7:6c:20:80:98:69:27:cd:91:a6: 3d:67:59:d5:78:62:0d:04:ac:e5:8c:22:40:2c:3c: e5:1f:c6:e4:c6:83:c6:2a:54:b8:1b:4c:97:b1:b5: 6e:cb:1d:93:a7:a0:1a:43:96:45:3e:dc:aa:02:78: 96:ed:e2:0d:a6:a2:00:56:7d:fb:2b:77:69:6d:bd: ca:ff:66:36:f3:f6:23:c6:a7:17:9f:82:ea:1c:f3: 1a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F8:C2:C9:23:69:11:E5:41:1A:A2:33:23:F4:EC:8E:1C:4D:FB:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e99a1559-68f5-34c7-9a88-697d6e5fe21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e0:8c:16:47:2c:ba:38:fc:1f:01:fa:f2:84:89:fb:cf:15: 54:8f:02:a9:5e:7f:11:96:d0:33:ef:55:6c:8d:4f:da:1c:f5: bb:ac:6c:89:73:e2:b2:f9:39:1c:ef:0c:96:3b:69:1d:6b:8f: bf:f9:be:dd:f2:da:4f:71:04:a6:50:3d:5e:7c:bc:bb:15:2b: 36:76:e3:f4:8f:6b:d7:1a:33:23:1a:99:44:cf:cd:d2:62:18: e6:db:62:33:92:56:04:c5:4e:f5:de:09:cd:53:2b:ad:ec:d2: 21:de:00:e2:e5:1d:de:9c:ef:bb:ec:9f:92:70:51:97:70:82: 61:dd:3b:9a:07:6e:e4:33:e6:bc:54:f9:a3:74:b8:28:90:7f: 26:50:82:a3:7b:d9:27:60:d3:08:38:38:bf:3d:3d:98:21:da: 11:98:81:10:04:0b:99:13:24:a0:0b:bd:7e:ed:d3:9f:93:61: a2:d8:60:76:06:c7:83:b9:86:4b:e5:73:f7:70:bc:63:48:c9: 5f:d9:cf:29:c7:c1:9e:6b:a1:50:3b:cd:ce:a9:4b:51:7a:ab: 0d:00:0f:4a:fd:d1:76:73:84:17:c2:2a:10:fd:40:f6:4b:56: 8e:6d:90:99:43:cf:26:e9:e8:b7:63:23:42:4d:db:68:d8:d2: c3:6e:25:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYj9UxMkcyh+gyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MmU2MDk5ZGEtODhmOC00YjBlLThlNzctOGU2OWY3NWEzZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBm04TjSDrESdfFThH0tc8rCEATar4dWKPpS +YrihztiWNQySfamD9eJRudx7KMCnzu1cysU61h+OgjqVDwnstqKIiahx8f5PO26 tA3aIhlq/lfXflaAYlFdWWf1hwpqjpWGHHgoav7aTu3CPtukj9FMEvT4xmlp1rK7 ziFHvuao1miqEQxxDRp+kZk71+7tGgBYQOExaPVWobhXY0oepHg7fVNf9QDY9cds IICYaSfNkaY9Z1nVeGINBKzljCJALDzlH8bkxoPGKlS4G0yXsbVuyx2Tp6AaQ5ZF PtyqAniW7eINpqIAVn37K3dpbb3K/2Y28/YjxqcXn4LqHPMa8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz4wskjaRHlQRqiMyP07I4cTfunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTk5YTE1NTktNjhmNS0z NGM3LTlhODgtNjk3ZDZlNWZlMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgdUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfgjBZHLLo4/B8B+vKEifvPFVSPAqlefxGW0DPvVWyNT9oc9busbIlz 4rL5ORzvDJY7aR1rj7/5vt3y2k9xBKZQPV58vLsVKzZ24/SPa9caMyMamUTPzdJi GObbYjOSVgTFTvXeCc1TK63s0iHeAOLlHd6c77vsn5JwUZdwgmHdO5oHbuQz5rxU +aN0uCiQfyZQgqN72Sdg0wg4OL89PZgh2hGYgRAEC5kTJKALvX7t05+TYaLYYHYG x4O5hkvlc/dwvGNIyV/ZzynHwZ5roVA7zc6pS1F6qw0AD0r90XZzhBfCKhD9QPZL Vo5tkJlDzybp6LdjI0JN22jY0sNuJec= -----END CERTIFICATE-----Generated at Tue Sep 22 06:25:18 2026 by rpki-client