$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72dcbe5c-b93a-3d04-b0a4-00fe8e2d9fde.roa File: 72dcbe5c-b93a-3d04-b0a4-00fe8e2d9fde.roa (raw, json) Hash identifier: McLaLadQwF21J1VD+1/dDeIU1rYij8BvHA9gNwx9XlY= Subject key identifier: 66:C9:DE:DF:F0:02:8A:34:C7:A6:7E:56:7B:C3:7C:58:C9:C9:0D:1E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FBED12666C5315354830CD180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72dcbe5c-b93a-3d04-b0a4-00fe8e2d9fde.roa Signing time: Fri 06 Nov 2026 02:00:14 +0000 ROA not before: Fri 06 Nov 2026 02:00:14 +0000 ROA not after: Thu 04 Feb 2027 02:00:14 +0000 asID: 31898 IP address blocks: 129.148.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:be:d1:26:66:c5:31:53:54:83:0c:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 6 02:00:14 2026 GMT Not After : Feb 4 02:00:14 2027 GMT Subject: CN=754e7473-ca9f-4e5f-bae4-be2144adaf10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:89:1a:89:2e:e1:4f:6e:f6:86:bb:f6:29: 59:53:0e:49:da:83:be:cf:c4:64:34:13:38:ba:40: f5:a6:72:0e:31:96:70:69:4f:b6:5a:af:a7:d6:b7: 2a:04:1a:16:86:16:b6:ae:e0:93:1c:23:24:ff:d2: 05:ca:2d:81:2d:3c:4f:b1:af:f3:4f:db:f8:55:d9: 66:ef:95:1c:a7:c3:2c:e2:d4:ab:b5:ec:29:1b:97: 28:7e:1a:bf:1f:c0:7d:6c:e9:c8:14:61:36:27:88: 9b:f4:a0:f4:cf:75:7e:b9:20:dc:c7:77:86:5c:6b: 94:03:0c:13:82:97:92:5a:2a:66:ce:2d:f9:06:22: de:0c:85:7c:64:98:16:30:96:71:ac:2b:39:7e:d6: 19:f3:12:ef:29:6b:aa:67:a1:6f:25:25:71:67:77: f3:54:9d:47:8c:07:91:e7:8f:19:b8:9f:b0:64:4c: f9:08:b3:fa:9e:0d:90:e4:7e:57:9a:77:17:60:b5: 5d:75:dc:81:ba:9c:9b:4b:b4:49:e3:81:ff:73:f0: 2c:04:58:83:6a:c1:48:b2:6f:19:f2:ea:e1:23:e1: 35:ec:a5:20:85:dd:48:4e:b8:da:da:39:10:aa:0a: c7:7e:af:9d:e0:97:14:64:0a:b4:61:67:b7:1c:cd: ab:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C9:DE:DF:F0:02:8A:34:C7:A6:7E:56:7B:C3:7C:58:C9:C9:0D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72dcbe5c-b93a-3d04-b0a4-00fe8e2d9fde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:40:e4:43:dc:f4:a3:8f:c9:3a:b0:c9:7e:b4:44:56:43:c4: fa:a5:3f:5f:a9:25:17:96:4c:19:a1:1f:8b:3a:38:29:79:4d: 47:20:2a:3b:8a:53:a7:7c:3b:05:dd:48:58:a9:11:0f:1e:4c: e1:57:cf:46:76:e0:5a:ab:f3:88:7e:20:0c:34:3f:c4:62:7a: 5a:01:d5:e7:7b:99:14:21:58:f1:48:22:c5:30:e8:52:de:94: 78:d7:04:6a:38:c0:05:17:63:fe:4b:ae:e7:ea:b9:d0:8a:a0: dd:19:15:09:d6:68:d8:ed:5b:b6:dc:86:00:d1:91:33:cf:16: 23:6f:7a:8f:72:de:27:18:a0:f9:de:97:9e:69:01:39:5a:1b: ea:92:8d:fc:f1:e9:39:c2:37:ae:a0:7a:2c:13:7c:49:2e:8e: c9:30:d6:7a:15:90:d8:4d:10:8f:36:37:c6:68:9f:57:e2:d3: 15:bc:76:4a:e8:f0:9d:dc:cf:46:f2:be:96:fe:02:3c:f5:27: 27:b0:94:d8:09:e3:e1:64:75:f3:b4:e5:99:bb:e8:3b:6f:18: 55:01:98:76:24:97:16:21:3a:c2:ee:7d:ea:87:27:da:6a:dd: e6:db:9d:35:4d:37:38:75:92:1b:c5:f8:6a:94:12:19:84:d1: ad:0e:b4:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE++0SZmxTFTVIMM0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwNjAyMDAxNFoXDTI3MDIwNDAyMDAxNFowLzEtMCsGA1UEAxMk NzU0ZTc0NzMtY2E5Zi00ZTVmLWJhZTQtYmUyMTQ0YWRhZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZmJGoku4U9u9oa79ilZUw5J2oO+z8RkNBM4 ukD1pnIOMZZwaU+2Wq+n1rcqBBoWhha2ruCTHCMk/9IFyi2BLTxPsa/zT9v4Vdlm 75Ucp8Ms4tSrtewpG5cofhq/H8B9bOnIFGE2J4ib9KD0z3V+uSDcx3eGXGuUAwwT gpeSWipmzi35BiLeDIV8ZJgWMJZxrCs5ftYZ8xLvKWuqZ6FvJSVxZ3fzVJ1HjAeR 548ZuJ+wZEz5CLP6ng2Q5H5XmncXYLVdddyBupybS7RJ44H/c/AsBFiDasFIsm8Z 8urhI+E17KUghd1ITrja2jkQqgrHfq+d4JcUZAq0YWe3HM2rkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbJ3t/wAoo0x6Z+VnvDfFjJyQ0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzJkY2JlNWMtYjkzYS0z ZDA0LWIwYTQtMDBmZThlMmQ5ZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZA5EPc9KOPyTqwyX60RFZDxPqlP1+pJReWTBmhH4s6OCl5TUcgKjuK U6d8OwXdSFipEQ8eTOFXz0Z24Fqr84h+IAw0P8RieloB1ed7mRQhWPFIIsUw6FLe lHjXBGo4wAUXY/5LrufqudCKoN0ZFQnWaNjtW7bchgDRkTPPFiNveo9y3icYoPne l55pATlaG+qSjfzx6TnCN66geiwTfEkujskw1noVkNhNEI82N8Zon1fi0xW8dkro 8J3cz0byvpb+Ajz1JyewlNgJ4+FkdfO05Zm76DtvGFUBmHYklxYhOsLufeqHJ9pq 3ebbnTVNNzh1khvF+GqUEhmE0a0OtAs= -----END CERTIFICATE-----Generated at Sun Nov 15 20:44:46 2026 by rpki-client