$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15edd498-834c-38f4-b20d-fc8a14e023d3.roa File: 15edd498-834c-38f4-b20d-fc8a14e023d3.roa (raw, json) Hash identifier: dF8LMZEnGExvSWxH53wTrmmLcTDmYvSQGOHP49q8mbg= Subject key identifier: DB:D9:77:FB:6A:6A:B0:D3:B3:7E:9C:82:56:9F:68:AD:38:47:C9:74 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0242179F67C7F3164DF25280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15edd498-834c-38f4-b20d-fc8a14e023d3.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 129.148.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:17:9f:67:c7:f3:16:4d:f2:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=694aeaff-6949-43d5-ba91-36840f499d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:36:84:d8:24:17:2c:d5:9d:18:a1:47:cc:41: 4d:38:f8:86:8f:f4:78:68:a0:f6:f6:25:9c:12:6a: 28:54:c1:72:f5:47:65:22:29:a5:89:30:29:07:41: 54:67:eb:5d:67:a5:57:96:05:b2:02:72:23:f5:01: 4d:3e:a6:13:dd:4f:7b:d2:b6:17:4a:0f:09:79:05: 05:e7:d9:2c:fa:2c:80:24:65:32:04:56:43:0b:79: 59:87:97:ac:74:89:ff:55:e1:20:5b:19:70:31:e5: e0:ae:03:92:8d:0f:89:0c:f9:37:d4:03:e0:9e:04: 4b:e0:e7:82:d3:cd:21:1d:93:66:52:dc:86:d4:8a: d3:da:13:ae:2c:b6:77:61:b2:36:b7:6e:0e:e6:7b: 6f:12:58:5b:a5:97:2f:a3:e4:b9:7e:42:17:a0:10: 80:79:4c:d4:74:8c:a3:38:a1:0d:41:52:d3:5b:92: f2:48:c1:f4:cc:9f:0e:8d:fa:1f:29:46:22:f8:96: 1d:fb:5a:c8:99:c9:a8:97:29:6d:3b:7c:f9:ed:1b: f8:fa:85:b1:7a:29:27:33:7b:1f:f1:9d:68:be:42: d7:f0:65:ef:3c:59:cb:98:23:4e:85:b0:d9:b4:a2: bb:6a:27:a8:8c:f3:39:24:c9:2c:73:6e:6e:e9:7e: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D9:77:FB:6A:6A:B0:D3:B3:7E:9C:82:56:9F:68:AD:38:47:C9:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15edd498-834c-38f4-b20d-fc8a14e023d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:6e:cb:af:a3:15:35:68:b0:44:0a:cf:51:03:35:dd:5b:82: e0:01:96:88:c0:d9:8a:dd:94:5f:49:a4:49:7c:32:43:7b:f0: 92:29:49:e6:ac:d1:2e:12:35:21:26:63:75:0e:6f:65:d9:fd: 1a:e1:25:0d:37:c8:95:6d:80:fb:54:09:3f:6c:33:47:1e:b3: 05:7f:26:ce:2e:3c:b3:4e:95:1c:e7:1c:e1:a2:02:5c:c1:a0: df:cf:34:56:5d:da:08:a9:ef:5e:71:4c:7a:ef:87:8d:78:bd: 92:50:c3:23:86:0e:d6:39:d9:85:8d:ca:03:3a:9c:ad:76:2b: ae:74:9d:0f:42:83:f6:9f:b7:25:e5:db:07:7f:fd:e5:9e:67: db:93:11:d3:7e:c7:3d:c5:86:6b:3b:6d:9c:d7:a7:85:51:57: 58:34:4c:c1:8a:05:f2:f6:0d:6d:07:a0:8c:85:ac:5b:1b:e1: 42:0d:40:76:75:3a:19:2d:7a:ae:15:33:3b:66:3f:ad:a3:ff: 0e:e6:b6:98:85:82:34:19:26:82:4e:93:49:37:7c:4a:05:e2: ca:f5:8b:ba:92:e0:3f:73:95:7e:1e:87:46:e3:72:1f:da:ee: 2c:77:df:f8:8a:4d:07:f5:88:63:32:d1:bc:cd:27:be:e5:49: 3c:43:55:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhefZ8fzFk3yUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk Njk0YWVhZmYtNjk0OS00M2Q1LWJhOTEtMzY4NDBmNDk5ZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDaE2CQXLNWdGKFHzEFNOPiGj/R4aKD29iWc EmooVMFy9UdlIimliTApB0FUZ+tdZ6VXlgWyAnIj9QFNPqYT3U970rYXSg8JeQUF 59ks+iyAJGUyBFZDC3lZh5esdIn/VeEgWxlwMeXgrgOSjQ+JDPk31APgngRL4OeC 080hHZNmUtyG1IrT2hOuLLZ3YbI2t24O5ntvElhbpZcvo+S5fkIXoBCAeUzUdIyj OKENQVLTW5LySMH0zJ8OjfofKUYi+JYd+1rImcmolyltO3z57Rv4+oWxeiknM3sf 8Z1ovkLX8GXvPFnLmCNOhbDZtKK7aieojPM5JMksc25u6X4q/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvZd/tqarDTs36cglafaK04R8l0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTVlZGQ0OTgtODM0Yy0z OGY0LWIyMGQtZmM4YTE0ZTAyM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFuy6+jFTVosEQKz1EDNd1bguABlojA2YrdlF9JpEl8MkN78JIpSeas 0S4SNSEmY3UOb2XZ/RrhJQ03yJVtgPtUCT9sM0ceswV/Js4uPLNOlRznHOGiAlzB oN/PNFZd2gip715xTHrvh414vZJQwyOGDtY52YWNygM6nK12K650nQ9Cg/aftyXl 2wd//eWeZ9uTEdN+xz3Fhms7bZzXp4VRV1g0TMGKBfL2DW0HoIyFrFsb4UINQHZ1 Ohkteq4VMztmP62j/w7mtpiFgjQZJoJOk0k3fEoF4sr1i7qS4D9zlX4eh0bjch/a 7ix33/iKTQf1iGMy0bzNJ77lSTxDVWw= -----END CERTIFICATE-----Generated at Sun Oct 4 13:30:44 2026 by rpki-client