$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6d986a30-d093-316c-866a-30f3472f45bc.roa File: 6d986a30-d093-316c-866a-30f3472f45bc.roa (raw, json) Hash identifier: KloyprgHClrUVj1X21V7aCJx3w/xjIXAZdgOJCQ32YY= Subject key identifier: C0:91:E4:2F:F3:1C:01:EA:0E:18:33:10:B7:19:22:1B:E0:47:85:D1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CE35457B4528FF620AF20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6d986a30-d093-316c-866a-30f3472f45bc.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 129.149.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e3:54:57:b4:52:8f:f6:20:af:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=1801fa79-ae72-4069-8dd5-67ec385473b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:03:6e:42:f0:8e:64:f3:c5:a7:b5:aa:89:4a: de:99:df:f2:83:61:c9:44:4a:68:7b:ea:fb:0a:d5: e5:d2:f5:40:34:ae:6f:24:be:9f:1d:b4:92:97:2b: 3b:ce:ab:fa:c8:21:9b:f5:cc:d3:73:57:73:85:4d: b2:d5:bf:6f:d2:b0:1c:ee:b8:81:27:9a:af:51:07: 59:f5:af:8c:07:d9:56:af:dc:2c:59:17:1a:59:ac: 0b:ab:ce:66:60:ad:f6:19:6a:69:f9:9c:04:04:ad: c5:d6:94:40:03:4b:7a:cb:ea:20:50:b2:26:70:27: 85:7a:4c:16:85:79:37:17:87:4d:0f:97:80:18:a3: 52:24:02:b0:a4:28:b6:85:20:78:66:53:e0:16:fb: 65:88:38:92:82:f1:85:33:c0:89:02:df:83:9d:c8: 71:07:f8:e0:1f:11:fe:3c:28:be:0d:aa:c5:52:c9: 91:84:89:74:65:c9:ae:ae:70:98:36:e7:35:1f:8c: 5a:13:ab:0c:03:41:a3:f7:31:44:6b:b9:fb:a9:c1: be:cc:21:59:9e:e4:92:e4:ee:8a:f9:87:f8:15:7c: 18:6e:c5:d8:0e:52:a5:95:02:88:54:e7:47:81:c5: f0:07:1f:10:60:55:fb:61:41:81:11:f2:21:fa:44: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:91:E4:2F:F3:1C:01:EA:0E:18:33:10:B7:19:22:1B:E0:47:85:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6d986a30-d093-316c-866a-30f3472f45bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:55:f5:c0:d5:78:d2:9a:52:b9:fa:4f:da:b6:7a:3c:0b:52: 21:85:8d:bc:96:33:74:c2:84:f7:3c:a7:be:56:9a:27:bf:a4: 62:ea:e7:bf:1d:9b:9a:ff:d4:70:d9:8f:db:95:da:0c:0f:bf: 67:06:a0:ee:0a:2e:d9:a9:35:92:d9:96:03:9b:b3:a1:3c:a8: 02:51:97:9b:b2:b2:8f:05:b8:16:07:b6:79:b6:f7:b7:8d:44: 8f:31:f0:9b:79:92:f6:f0:e0:47:c8:f3:7b:f7:4a:ed:3c:68: ba:aa:79:0a:17:7e:ae:fe:92:c3:5d:a7:db:fa:cb:9a:5b:3e: 88:89:8d:dc:f3:a9:e3:e2:c6:2e:16:81:87:24:77:b8:52:d8: 2d:0b:0a:56:a3:65:9d:2a:3c:06:a6:78:a0:42:28:e8:33:7b: 2d:b5:47:e0:22:30:bf:fe:8a:9e:66:a1:1a:c1:ed:19:2a:f7: 43:67:a1:e1:36:58:a4:d5:61:12:d2:95:7b:3a:d3:f4:3c:68: b8:24:1d:99:60:a3:8a:69:1a:f4:b0:97:7c:3a:d2:c3:64:d6: 67:fd:65:b9:70:be:7e:67:ce:87:c0:eb:78:b0:2a:fe:f7:e5: 45:b4:53:83:c6:c1:55:87:5f:0e:5f:33:06:8d:63:0b:28:41: f7:70:ef:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnONUV7RSj/YgryAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MTgwMWZhNzktYWU3Mi00MDY5LThkZDUtNjdlYzM4NTQ3M2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwNuQvCOZPPFp7WqiUremd/yg2HJREpoe+r7 CtXl0vVANK5vJL6fHbSSlys7zqv6yCGb9czTc1dzhU2y1b9v0rAc7riBJ5qvUQdZ 9a+MB9lWr9wsWRcaWawLq85mYK32GWpp+ZwEBK3F1pRAA0t6y+ogULImcCeFekwW hXk3F4dND5eAGKNSJAKwpCi2hSB4ZlPgFvtliDiSgvGFM8CJAt+DnchxB/jgHxH+ PCi+DarFUsmRhIl0ZcmurnCYNuc1H4xaE6sMA0Gj9zFEa7n7qcG+zCFZnuSS5O6K +Yf4FXwYbsXYDlKllQKIVOdHgcXwBx8QYFX7YUGBEfIh+kTkjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCR5C/zHAHqDhgzELcZIhvgR4XRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmQ5ODZhMzAtZDA5My0z MTZjLTg2NmEtMzBmMzQ3MmY0NWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxV9cDVeNKaUrn6T9q2ejwLUiGFjbyWM3TChPc8p75Wmie/pGLq578d m5r/1HDZj9uV2gwPv2cGoO4KLtmpNZLZlgObs6E8qAJRl5uyso8FuBYHtnm297eN RI8x8Jt5kvbw4EfI83v3Su08aLqqeQoXfq7+ksNdp9v6y5pbPoiJjdzzqePixi4W gYckd7hS2C0LClajZZ0qPAameKBCKOgzey21R+AiML/+ip5moRrB7Rkq90NnoeE2 WKTVYRLSlXs60/Q8aLgkHZlgo4ppGvSwl3w60sNk1mf9Zblwvn5nzofA63iwKv73 5UW0U4PGwVWHXw5fMwaNYwsoQfdw77A= -----END CERTIFICATE-----Generated at Wed Sep 23 00:15:44 2026 by rpki-client