$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa File: 23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa (raw, json) Hash identifier: +NmzlGwScSMt6aCnqqpU6iTO9bVlWewNrzRdYwwYMsc= Subject key identifier: 85:5C:75:77:97:90:0B:D5:91:34:0E:93:D1:EF:42:6F:E8:49:C0:1F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CFBAA1C8E3EBA7CC44800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.148.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fb:aa:1c:8e:3e:ba:7c:c4:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=ede09502-3c73-44f9-83ed-cd5ee9a9bfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:d1:40:cc:ae:76:b7:e5:7f:84:8b:d8:00: 30:a8:9e:2b:52:89:4d:d7:cb:ea:a4:c8:cb:11:13: d7:fa:a5:6d:5f:5f:a8:e0:eb:e6:f0:1a:ae:01:d0: 12:56:75:e0:a9:b8:a7:27:c0:d8:9b:53:e3:45:45: 03:fc:1f:3d:5a:10:e2:7c:87:15:18:70:2c:75:9b: 24:39:c3:cd:15:65:81:52:c5:27:49:f4:86:4d:cf: 2c:08:f4:ee:28:77:81:3d:df:e4:a2:6f:b7:1b:bc: 66:4b:ff:0e:89:35:79:e1:f1:d6:b9:74:66:6b:c6: 21:ad:ee:e4:38:89:06:a7:de:30:49:8b:1d:a6:31: eb:cf:3c:18:f0:e1:83:2d:fa:28:c6:9e:b9:8f:e5: 67:02:3f:70:12:4e:e8:c1:72:dd:8d:f4:41:c6:71: 92:b9:3b:a1:83:bf:d5:48:08:e3:b6:b6:7c:52:58: dc:f5:ca:28:58:9b:0a:87:ba:cc:b9:ed:55:93:31: 1d:76:e5:55:45:d9:12:43:d8:1c:88:57:2e:84:b9: 20:bf:8e:f7:25:20:76:b6:3d:e4:b0:d4:31:03:ea: 97:02:01:1f:f8:a1:6a:00:02:6a:59:47:76:f7:09: 32:fe:f2:bd:8d:b8:9e:a0:69:9d:20:99:b5:2a:f8: 74:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5C:75:77:97:90:0B:D5:91:34:0E:93:D1:EF:42:6F:E8:49:C0:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:dc:9f:fd:23:b2:2b:05:6a:f8:1c:7d:1a:78:23:1e:0b:94: dc:3c:76:4e:10:98:b8:76:85:4d:ed:cb:a8:0b:58:e0:1d:4b: c9:ba:48:81:98:d3:4a:a4:23:e1:53:60:a8:36:22:1b:2e:08: 5b:c4:0b:79:a0:63:76:66:90:e7:dc:1b:ee:c7:ce:cc:5e:79: 9f:c2:03:82:de:ba:73:01:d0:5f:5f:bf:5d:ea:c1:c2:8a:1e: 7e:0d:a6:9d:ad:aa:f7:ec:e8:2d:97:ac:98:cc:21:48:26:d3: 95:4c:c0:28:3d:a3:c4:58:89:d9:7f:bd:c2:2f:43:52:aa:8f: c4:75:ae:0f:fe:44:b3:68:90:9d:00:da:52:05:d3:0a:77:0b: 7e:0f:89:db:ee:67:f5:eb:2a:92:00:aa:04:32:b6:7f:a1:5c: cc:71:39:ac:1a:a4:91:6a:d2:74:40:3a:f2:63:8b:98:0b:1d: 18:9a:fc:36:2f:c2:ed:07:1a:4f:7e:63:77:d9:87:74:08:43: f9:69:5a:44:d7:a9:3b:50:d3:c0:fa:e7:0d:0d:c1:14:91:2c: ba:c8:e9:94:d9:f3:b8:e7:76:7a:80:25:d3:35:a0:2e:b1:df: 0a:11:4a:0d:50:df:02:33:2b:85:23:97:12:c7:2b:39:40:bc: b7:6e:f4:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPuqHI4+unzESAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZWRlMDk1MDItM2M3My00NGY5LTgzZWQtY2Q1ZWU5YTliZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz7RQMyudrflf4SL2AAwqJ4rUolN18vqpMjL ERPX+qVtX1+o4Ovm8BquAdASVnXgqbinJ8DYm1PjRUUD/B89WhDifIcVGHAsdZsk OcPNFWWBUsUnSfSGTc8sCPTuKHeBPd/kom+3G7xmS/8OiTV54fHWuXRma8Yhre7k OIkGp94wSYsdpjHrzzwY8OGDLfooxp65j+VnAj9wEk7owXLdjfRBxnGSuTuhg7/V SAjjtrZ8Uljc9cooWJsKh7rMue1VkzEdduVVRdkSQ9gciFcuhLkgv473JSB2tj3k sNQxA+qXAgEf+KFqAAJqWUd29wky/vK9jbieoGmdIJm1Kvh0ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVcdXeXkAvVkTQOk9HvQm/oScAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjNkMmQ0NTgtZWQ4OS0z YTdlLWJmNmQtNjYzNjA2MTJhN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrcn/0jsisFavgcfRp4Ix4LlNw8dk4QmLh2hU3ty6gLWOAdS8m6SIGY 00qkI+FTYKg2IhsuCFvEC3mgY3ZmkOfcG+7HzsxeeZ/CA4LeunMB0F9fv13qwcKK Hn4Npp2tqvfs6C2XrJjMIUgm05VMwCg9o8RYidl/vcIvQ1Kqj8R1rg/+RLNokJ0A 2lIF0wp3C34PidvuZ/XrKpIAqgQytn+hXMxxOawapJFq0nRAOvJji5gLHRia/DYv wu0HGk9+Y3fZh3QIQ/lpWkTXqTtQ08D65w0NwRSRLLrI6ZTZ87jndnqAJdM1oC6x 3woRSg1Q3wIzK4UjlxLHKzlAvLdu9JY= -----END CERTIFICATE-----Generated at Thu Sep 24 23:54:11 2026 by rpki-client