$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd936073-b458-359b-b91b-92fbdddd40e0.roa File: fd936073-b458-359b-b91b-92fbdddd40e0.roa (raw, json) Hash identifier: au4XSdtzIvHnTVrxdqhu42+3ZFVxr+vzNKgLuGCME68= Subject key identifier: 24:12:CF:7F:B5:6B:05:40:AC:59:2C:C0:C2:B1:13:2C:4C:39:DA:3A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CE8CC95DCD6D275CBD5B8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd936073-b458-359b-b91b-92fbdddd40e0.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 129.213.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e8:cc:95:dc:d6:d2:75:cb:d5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=bdde2f2e-f030-4ae1-a700-0ea64a704958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4e:b3:4e:ab:3b:e6:6e:54:9f:b6:b0:69:c6: d6:db:94:04:69:4b:ae:44:e1:98:07:cb:67:b0:71: b9:1b:bf:2e:6d:70:ed:a1:b8:80:50:fd:cd:a4:27: 9b:ee:c7:fc:50:bd:79:08:f3:01:d7:0e:68:0d:e1: aa:ba:b0:1b:82:fc:3e:31:a1:74:d2:42:9c:f8:be: be:ed:cc:8b:60:18:a9:cc:2d:19:d3:e3:f6:e3:f9: da:df:8e:23:95:85:b5:7a:da:ed:ee:b6:3c:87:53: 56:ab:41:7c:8d:5c:54:d0:60:14:7e:5c:14:e1:10: 6b:06:c2:8a:f6:93:55:e3:cc:b3:a2:b8:a6:5d:79: bd:e7:d8:74:53:dc:9b:cc:ae:04:ff:7f:da:90:d2: 6b:b9:23:39:2e:78:e9:5f:d3:6e:62:64:2a:2c:4b: 78:b0:50:99:db:53:45:87:5d:78:cf:3e:c8:d7:97: b1:19:5b:c6:8e:b4:db:1c:80:bf:d9:ff:d3:a6:40: 43:22:84:5d:c4:a0:56:83:c5:56:67:f7:04:01:b1: da:53:26:0c:db:ee:d3:10:5c:0a:4c:65:01:1e:2b: af:4c:3c:d7:7e:68:65:37:f4:8c:2f:af:b6:f8:0b: 67:42:25:36:d9:7b:ac:25:98:a8:59:1b:7f:2e:7b: b0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:12:CF:7F:B5:6B:05:40:AC:59:2C:C0:C2:B1:13:2C:4C:39:DA:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd936073-b458-359b-b91b-92fbdddd40e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:34:96:5c:42:93:c8:7b:f1:85:ad:54:c6:4a:61:18:68:34: b2:3a:dd:d2:16:3d:72:c8:5c:64:8e:a8:f0:f4:47:9e:5c:8f: 02:22:1a:af:9e:14:0c:c5:a2:d6:7e:e8:16:1f:9b:74:5a:c6: d7:86:a1:86:47:7e:a6:26:b1:94:7a:3b:c7:69:15:41:f7:94: 61:fa:f0:de:d6:c4:e4:69:63:6f:2b:e7:7a:00:02:30:ac:a3: f9:61:6f:e4:d8:14:60:e5:76:ee:e4:f7:8e:74:12:61:c2:f3: 2b:98:74:b4:27:98:cd:b4:82:ff:6e:08:9e:f0:a2:ed:e0:5e: ef:61:d9:dc:2e:59:06:ec:5d:a1:d7:3c:3f:46:7d:bf:d9:af: b4:40:ae:ee:6d:e9:e5:96:6d:f2:d3:d3:2a:bc:e7:cf:0c:71: 69:0d:fb:fe:55:2b:98:3c:90:f6:c9:e5:76:bf:7c:34:1a:cd: 99:45:48:d3:50:97:d1:ae:2d:2a:31:0d:18:6f:00:df:fd:46: 7f:b1:8d:43:82:96:b8:51:60:45:56:0b:4f:9e:0b:50:23:0b: 73:d2:ba:37:0e:07:cb:41:3b:58:60:19:3a:b5:62:4c:2a:56: 4e:34:92:e9:30:7a:56:b3:35:37:b8:9a:e1:f3:f9:bb:4e:d9: 69:a4:68:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOjMldzW0nXL1bgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YmRkZTJmMmUtZjAzMC00YWUxLWE3MDAtMGVhNjRhNzA0OTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU6zTqs75m5Un7awacbW25QEaUuuROGYB8tn sHG5G78ubXDtobiAUP3NpCeb7sf8UL15CPMB1w5oDeGqurAbgvw+MaF00kKc+L6+ 7cyLYBipzC0Z0+P24/na344jlYW1etrt7rY8h1NWq0F8jVxU0GAUflwU4RBrBsKK 9pNV48yzorimXXm959h0U9ybzK4E/3/akNJruSM5LnjpX9NuYmQqLEt4sFCZ21NF h114zz7I15exGVvGjrTbHIC/2f/TpkBDIoRdxKBWg8VWZ/cEAbHaUyYM2+7TEFwK TGUBHiuvTDzXfmhlN/SML6+2+AtnQiU22XusJZioWRt/LnuwLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQSz3+1awVArFkswMKxEyxMOdo6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmQ5MzYwNzMtYjQ1OC0z NTliLWI5MWItOTJmYmRkZGQ0MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgdXrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG80llxCk8h78YWtVMZKYRhoNLI63dIWPXLIXGSOqPD0R55cjwIiGq+e FAzFotZ+6BYfm3RaxteGoYZHfqYmsZR6O8dpFUH3lGH68N7WxORpY28r53oAAjCs o/lhb+TYFGDldu7k9450EmHC8yuYdLQnmM20gv9uCJ7wou3gXu9h2dwuWQbsXaHX PD9Gfb/Zr7RAru5t6eWWbfLT0yq8588McWkN+/5VK5g8kPbJ5Xa/fDQazZlFSNNQ l9GuLSoxDRhvAN/9Rn+xjUOClrhRYEVWC0+eC1AjC3PSujcOB8tBO1hgGTq1Ykwq Vk40kukwelazNTe4muHz+btO2WmkaLo= -----END CERTIFICATE-----Generated at Tue Sep 22 06:24:17 2026 by rpki-client