$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa File: ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa (raw, json) Hash identifier: hdLkBRWVEy4YnqG199ilje5qly/VndVt3qas8AiLRuY= Subject key identifier: 1B:65:E2:A7:D4:85:CF:58:BD:49:15:89:54:01:56:C0:24:85:4C:BC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F10378F9651C78401CE334E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.148.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:8f:96:51:c7:84:01:ce:33:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=f2a08855-1591-4202-b7fa-c683e2a8d8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:91:f1:34:03:c1:b1:5b:f9:3c:49:3d:33:8b: 49:0c:c0:56:34:1a:c3:fc:a3:87:b2:dc:4a:b2:38: 86:4b:91:5d:83:90:7a:63:82:85:aa:fe:10:31:5f: 9a:45:c2:74:26:04:fd:19:32:73:6f:79:3e:05:ac: 77:61:69:e0:f1:7d:e7:10:d0:25:52:3f:30:0a:63: f9:08:d4:63:65:72:b8:8a:60:bd:ce:fe:23:02:3f: 07:c2:24:ea:8a:e6:77:7d:44:1e:87:e6:a1:8f:d3: 59:9f:2b:f0:0c:8c:93:99:b9:3e:22:9c:6f:79:52: bb:56:a4:cc:f8:e4:b6:f4:7f:d2:02:cd:a8:8c:10: c5:41:7b:41:62:41:1e:b1:ea:90:74:56:6f:f1:93: b5:7e:9b:07:23:98:b1:5a:60:4a:05:22:76:ec:b8: fd:84:84:f2:ab:fb:87:d1:bd:02:c9:35:04:f7:ef: 19:7f:00:e3:ec:0f:14:4f:e5:c8:17:d9:22:4b:88: fb:ea:f7:78:39:80:df:21:92:4d:e7:83:05:2a:04: cd:42:70:e9:a6:23:18:56:60:12:fb:10:48:29:ce: fa:ae:30:7b:66:4c:56:f0:bb:54:5c:2a:75:26:87: 92:65:eb:1a:fc:36:6a:11:43:5c:a2:fd:46:07:1d: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:65:E2:A7:D4:85:CF:58:BD:49:15:89:54:01:56:C0:24:85:4C:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a3:b1:81:99:b1:84:62:0b:85:58:c2:b7:5f:a5:6e:f7:1d: cc:4b:13:90:47:27:39:74:a2:10:f5:36:a2:70:de:d6:58:80: b6:e8:3e:88:d0:71:83:1b:3e:c9:d6:80:ce:bb:66:a7:a4:a2: 62:2a:78:48:cc:7b:ae:43:89:ee:50:94:44:21:09:0d:dc:58: fd:43:92:f5:87:35:ed:5f:76:9d:52:46:f2:ee:95:eb:67:bd: c0:06:33:7c:08:b1:ba:65:d9:e4:d3:a4:3b:7c:6a:63:c1:cf: 5b:ab:af:b8:d4:cd:98:0a:1b:83:84:fe:50:53:2f:19:58:1e: 30:b8:b0:06:65:90:56:1d:24:b5:9c:6e:98:3b:09:58:db:c2: 82:e5:df:34:47:3a:ff:19:21:86:32:ab:91:e6:87:7e:7d:a1: 6f:df:0b:47:d5:4d:cb:31:e7:9b:63:a8:b7:bf:de:2e:4f:85: eb:85:bf:bf:51:0b:ae:8c:d8:2a:bc:d2:c1:f3:35:5f:ca:04: db:cb:47:06:2b:21:05:4c:a0:bf:18:82:5a:b7:35:03:5c:5c: 5e:c2:69:10:22:3a:f3:73:89:d4:be:59:92:8f:bc:e7:9c:2c: 98:06:78:6b:eb:39:54:b6:b4:90:e3:6e:3e:3c:39:cd:ee:d1: d4:9f:92:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4+WUceEAc4zTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZjJhMDg4NTUtMTU5MS00MjAyLWI3ZmEtYzY4M2UyYThkOGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJHxNAPBsVv5PEk9M4tJDMBWNBrD/KOHstxK sjiGS5Fdg5B6Y4KFqv4QMV+aRcJ0JgT9GTJzb3k+Bax3YWng8X3nENAlUj8wCmP5 CNRjZXK4imC9zv4jAj8HwiTqiuZ3fUQeh+ahj9NZnyvwDIyTmbk+IpxveVK7VqTM +OS29H/SAs2ojBDFQXtBYkEeseqQdFZv8ZO1fpsHI5ixWmBKBSJ27Lj9hITyq/uH 0b0CyTUE9+8ZfwDj7A8UT+XIF9kiS4j76vd4OYDfIZJN54MFKgTNQnDppiMYVmAS +xBIKc76rjB7ZkxW8LtUXCp1JoeSZesa/DZqEUNcov1GBx0oZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtl4qfUhc9YvUkViVQBVsAkhUy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWY3YmQzZmMtZGFhNC0z Mjg0LTg3ZTctMGNiOGE5NDJjMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABajsYGZsYRiC4VYwrdfpW73HcxLE5BHJzl0ohD1NqJw3tZYgLboPojQ cYMbPsnWgM67ZqekomIqeEjMe65Die5QlEQhCQ3cWP1DkvWHNe1fdp1SRvLuletn vcAGM3wIsbpl2eTTpDt8amPBz1urr7jUzZgKG4OE/lBTLxlYHjC4sAZlkFYdJLWc bpg7CVjbwoLl3zRHOv8ZIYYyq5Hmh359oW/fC0fVTcsx55tjqLe/3i5PheuFv79R C66M2Cq80sHzNV/KBNvLRwYrIQVMoL8Yglq3NQNcXF7CaRAiOvNzidS+WZKPvOec LJgGeGvrOVS2tJDjbj48Oc3u0dSfkgw= -----END CERTIFICATE-----Generated at Sun Sep 20 21:59:16 2026 by rpki-client