$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ff31159-10d7-3002-bb66-88de9c0b2368.roa File: 1ff31159-10d7-3002-bb66-88de9c0b2368.roa (raw, json) Hash identifier: oDm92+V9DiViJguMfKgN2N8dW/P0Lt2zjy0Ze1WT8+U= Subject key identifier: 76:D6:ED:CF:9B:19:6F:81:38:F8:B7:32:AC:AD:3D:8D:DA:FD:27:C5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F130247342AD4788017D63F80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ff31159-10d7-3002-bb66-88de9c0b2368.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.152.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:47:34:2a:d4:78:80:17:d6:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=85151a24-5802-41dd-959d-15103226e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5b:b1:81:d6:59:a3:19:17:af:22:34:21:4e: a2:a6:d6:85:83:7f:db:95:c1:19:56:ae:8b:48:8c: e3:c9:9f:2d:18:ce:cb:96:a5:d3:ca:45:9e:be:c9: 81:97:57:fd:21:f2:53:c3:1d:e7:b4:5b:4a:70:0e: dc:8f:43:3f:a6:80:28:7b:4b:07:6e:d5:de:b8:df: 77:79:e8:e4:19:f3:96:e6:7b:71:dd:10:c1:c1:aa: 0f:89:f8:41:af:a5:e8:d1:38:c3:9e:dc:a2:84:81: 12:59:c8:7a:2e:0c:6f:7e:1e:e1:03:a0:ff:ae:2a: 81:28:6d:4e:bc:8f:06:e5:c4:a3:0b:16:82:60:23: 27:28:72:cd:11:3c:09:27:21:47:d2:28:f5:3b:ad: 34:22:77:1b:40:de:cd:51:52:d3:42:89:e7:bf:1c: dc:f7:3a:ef:20:aa:ae:da:d3:82:7b:99:a0:c8:b5: bf:49:0d:28:a0:5d:16:62:8f:1f:13:e1:4c:d6:65: 92:1d:59:0a:4b:c2:31:c3:2d:67:2a:fc:c5:88:14: 05:c1:3d:25:a2:5b:fc:1b:10:8d:e0:04:42:a5:16: 91:77:fb:8c:c9:ff:13:f4:e6:2a:67:9d:9a:07:b8: 4d:e6:15:87:96:ea:96:ca:4b:5d:10:18:ac:03:a3: 63:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D6:ED:CF:9B:19:6F:81:38:F8:B7:32:AC:AD:3D:8D:DA:FD:27:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ff31159-10d7-3002-bb66-88de9c0b2368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.152.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:dc:2f:2d:2f:a5:52:8c:90:0e:be:d3:69:d8:da:d7:d0:4d: a4:e4:de:37:8f:da:7f:b0:1f:a9:ea:0c:85:f9:27:cf:d6:d7: a6:97:27:91:8c:c3:c2:e5:fd:7a:c7:66:c6:44:d5:a3:fe:54: 88:cc:64:70:c7:d4:e2:56:09:28:6e:0d:71:6e:47:bf:6f:08: 0f:8b:19:03:a6:41:51:7f:47:b7:fd:95:2d:f1:ab:7f:a1:81: b5:9b:95:6b:77:95:ab:eb:7d:7e:df:10:ee:35:ec:19:66:da: ec:2b:03:58:70:e6:78:13:0c:b5:87:64:27:7b:e5:3b:8c:d4: aa:0f:b5:59:b0:db:69:3f:9b:6a:99:3c:86:83:d2:74:28:57: 49:99:6b:9f:8a:a2:3d:87:a1:c2:e5:c8:5c:02:dd:59:b8:ee: e2:b4:f2:31:7b:49:2b:f2:79:8e:f8:71:80:ea:09:cd:bb:b7: 59:35:f1:76:cb:dd:64:be:6f:97:00:32:d4:8e:40:3a:66:37: 0e:8d:ff:7b:73:92:4a:64:20:ea:c5:91:d5:b8:b9:4d:2f:e9: 82:69:8d:b3:62:4f:85:4f:a1:ae:70:5a:bb:ce:f0:62:bf:ac: e3:a9:c2:ca:6a:5d:93:5b:58:6a:02:92:2a:90:6f:d0:76:b7: 1e:03:cc:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkc0KtR4gBfWP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ODUxNTFhMjQtNTgwMi00MWRkLTk1OWQtMTUxMDMyMjZlMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVuxgdZZoxkXryI0IU6iptaFg3/blcEZVq6L SIzjyZ8tGM7LlqXTykWevsmBl1f9IfJTwx3ntFtKcA7cj0M/poAoe0sHbtXeuN93 eejkGfOW5ntx3RDBwaoPifhBr6Xo0TjDntyihIESWch6Lgxvfh7hA6D/riqBKG1O vI8G5cSjCxaCYCMnKHLNETwJJyFH0ij1O600IncbQN7NUVLTQonnvxzc9zrvIKqu 2tOCe5mgyLW/SQ0ooF0WYo8fE+FM1mWSHVkKS8Ixwy1nKvzFiBQFwT0lolv8GxCN 4ARCpRaRd/uMyf8T9OYqZ52aB7hN5hWHluqWyktdEBisA6NjQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbW7c+bGW+BOPi3MqytPY3a/SfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWZmMzExNTktMTBkNy0z MDAyLWJiNjYtODhkZTljMGIyMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHcLy0vpVKMkA6+02nY2tfQTaTk3jeP2n+wH6nqDIX5J8/W16aXJ5GM w8Ll/XrHZsZE1aP+VIjMZHDH1OJWCShuDXFuR79vCA+LGQOmQVF/R7f9lS3xq3+h gbWblWt3lavrfX7fEO417Blm2uwrA1hw5ngTDLWHZCd75TuM1KoPtVmw22k/m2qZ PIaD0nQoV0mZa5+Koj2HocLlyFwC3Vm47uK08jF7SSvyeY74cYDqCc27t1k18XbL 3WS+b5cAMtSOQDpmNw6N/3tzkkpkIOrFkdW4uU0v6YJpjbNiT4VPoa5wWrvO8GK/ rOOpwspqXZNbWGoCkiqQb9B2tx4DzOw= -----END CERTIFICATE-----Generated at Sun Sep 27 23:54:03 2026 by rpki-client