$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcbaa704-6b41-3300-9e4e-998736960c2a.roa File: fcbaa704-6b41-3300-9e4e-998736960c2a.roa (raw, json) Hash identifier: 2m4zdhwdRbMMggZKh3iwyCOy+tDPREljHf8d0t8sp8o= Subject key identifier: 9C:76:AA:8A:27:92:61:76:59:B0:A6:42:C4:47:B5:1F:A9:63:05:D0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1302438826478BCA937ABE80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcbaa704-6b41-3300-9e4e-998736960c2a.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.146.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:43:88:26:47:8b:ca:93:7a:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=2beacc44-1ba9-45ec-9115-725196181970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0b:71:d5:4d:ef:1c:45:dd:4b:4b:db:4e:24: f8:aa:14:a0:8a:41:bf:67:38:a1:e8:a7:0c:73:d9: 38:95:67:d0:12:41:c9:90:ab:a8:40:49:95:09:96: e7:d5:b4:22:db:7c:47:fa:f9:75:90:b4:62:95:26: 57:c5:4a:c3:21:e7:09:4a:c1:f3:c9:73:56:48:7d: 60:90:ea:af:ea:87:16:86:8c:99:e0:af:d1:3f:db: 39:bf:73:bd:b8:39:92:b1:4d:76:d6:c4:f1:45:c8: 61:52:6e:db:aa:7e:84:9d:5c:cc:d0:ce:c2:34:db: 4a:cd:ae:cb:ca:f0:f2:bd:80:a2:ee:5b:2c:5a:6f: 90:aa:8a:c9:fa:f7:bb:17:95:09:c3:8d:2a:1b:6a: 1e:1c:9a:a5:c9:21:b9:92:bd:61:49:c9:ca:60:27: 1f:74:95:32:5d:5d:cc:a7:9c:8e:a1:95:b1:3e:0c: 0a:a8:d2:18:ed:9c:eb:26:ed:9b:7f:f6:08:fa:46: fd:dc:60:ee:f7:59:fc:51:ea:92:61:59:7b:79:38: b2:f9:f7:21:1d:ad:09:9c:78:88:a5:8a:05:0e:ad: 85:6e:36:a8:3c:7d:28:17:27:15:20:3a:db:bd:a9: 43:02:e0:2b:e3:43:e2:a7:ef:c1:27:b0:ae:1d:34: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:76:AA:8A:27:92:61:76:59:B0:A6:42:C4:47:B5:1F:A9:63:05:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcbaa704-6b41-3300-9e4e-998736960c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:b5:a5:22:d5:c2:cc:26:3d:21:1f:5c:4d:d3:e5:f3:24:93: 33:a8:29:bf:59:29:7a:ca:f6:8c:ab:4a:a9:6c:03:f7:90:08: f3:87:37:6c:be:2c:0b:3b:a0:50:d8:4c:99:54:8a:36:f1:95: 5d:04:04:3b:43:3c:3d:af:a5:aa:0c:3b:74:5b:99:94:07:2e: 06:c2:b4:f8:dd:b5:35:43:5a:02:b3:d6:0b:de:26:a5:87:d1: 99:52:f3:e7:f5:ed:0c:54:c0:0a:da:cf:29:5c:ce:6d:28:93: e6:3f:2f:40:06:ec:de:15:69:17:79:08:5f:77:05:74:c0:ec: ad:78:59:d3:8b:89:fc:f1:7a:10:ca:12:9c:bb:4a:73:14:f5: c6:ea:47:30:67:bc:3b:e5:e5:d8:1a:35:87:27:2e:1c:96:29: ad:cf:39:2d:1b:1f:27:5e:5d:d0:ea:9a:66:53:28:98:bc:07: 52:12:e1:0d:12:a6:c3:0e:38:00:aa:6e:ff:0d:4b:04:f7:3e: e1:84:81:18:bc:c8:b4:73:6e:2d:ce:e9:00:a5:c8:f4:55:8a: a3:d2:bc:48:7d:3c:e7:71:a8:e3:72:3c:30:c4:f2:18:fb:03: 16:1d:7f:01:02:e2:4f:e8:96:dd:65:46:54:d4:b1:19:83:3c: 3c:9d:19:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkOIJkeLypN6voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MmJlYWNjNDQtMWJhOS00NWVjLTkxMTUtNzI1MTk2MTgxOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAtx1U3vHEXdS0vbTiT4qhSgikG/Zzih6KcM c9k4lWfQEkHJkKuoQEmVCZbn1bQi23xH+vl1kLRilSZXxUrDIecJSsHzyXNWSH1g kOqv6ocWhoyZ4K/RP9s5v3O9uDmSsU121sTxRchhUm7bqn6EnVzM0M7CNNtKza7L yvDyvYCi7lssWm+QqorJ+ve7F5UJw40qG2oeHJqlySG5kr1hScnKYCcfdJUyXV3M p5yOoZWxPgwKqNIY7ZzrJu2bf/YI+kb93GDu91n8UeqSYVl7eTiy+fchHa0JnHiI pYoFDq2FbjaoPH0oFycVIDrbvalDAuAr40Pip+/BJ7CuHTTgHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx2qoonkmF2WbCmQsRHtR+pYwXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmNiYWE3MDQtNmI0MS0z MzAwLTllNGUtOTk4NzM2OTYwYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgZIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+1pSLVwswmPSEfXE3T5fMkkzOoKb9ZKXrK9oyrSqlsA/eQCPOHN2y+ LAs7oFDYTJlUijbxlV0EBDtDPD2vpaoMO3RbmZQHLgbCtPjdtTVDWgKz1gveJqWH 0ZlS8+f17QxUwArazylczm0ok+Y/L0AG7N4VaRd5CF93BXTA7K14WdOLifzxehDK Epy7SnMU9cbqRzBnvDvl5dgaNYcnLhyWKa3POS0bHydeXdDqmmZTKJi8B1IS4Q0S psMOOACqbv8NSwT3PuGEgRi8yLRzbi3O6QClyPRViqPSvEh9POdxqONyPDDE8hj7 AxYdfwEC4k/olt1lRlTUsRmDPDydGdE= -----END CERTIFICATE-----Generated at Tue Sep 22 09:04:42 2026 by rpki-client