$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97936a49-6697-3eb2-875e-4638d0032b55.roa File: 97936a49-6697-3eb2-875e-4638d0032b55.roa (raw, json) Hash identifier: yIxr3/vi9JV6x0TqgnIgNPz7sxvI8lES3rg3kN6Pyr0= Subject key identifier: EB:5B:02:CB:61:C8:1A:DD:11:D8:7E:02:EE:14:CA:BE:F7:0C:1E:17 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B6240482E3CE3B6B1F61E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97936a49-6697-3eb2-875e-4638d0032b55.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.213.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:40:48:2e:3c:e3:b6:b1:f6:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=ff1160fa-42a1-45d0-b4a5-1aebb1095f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:dc:36:83:bb:fd:8d:87:d1:46:f2:3d:ea: e2:0a:f1:21:3c:0f:4b:e1:b0:b8:0e:60:89:96:61: 3c:d1:1e:f1:67:98:cb:03:37:0d:11:07:03:fd:e9: 8f:16:d4:39:0c:21:66:fb:3e:4a:e0:fd:13:a6:0e: 01:e7:c6:0c:92:41:a1:24:9c:3e:fe:6a:1f:83:98: 22:00:1a:9f:f9:d8:f8:f6:58:29:2b:6c:ce:44:5a: d5:b3:46:d0:0e:a5:3c:6f:a5:fd:2a:52:9f:1d:a8: be:72:ca:dd:e8:ab:cd:5e:a3:63:8f:93:1a:63:f5: dd:4b:6b:b6:d2:5e:b0:4d:ac:c8:1e:43:17:c4:2b: a5:b1:41:5f:23:62:f7:41:7b:4f:4c:6f:72:87:b3: e3:a4:10:74:9b:0e:e5:59:00:80:db:56:53:ae:ec: f5:f6:61:8a:a3:a0:1f:86:50:8e:12:38:b9:84:f3: bb:06:53:f9:f4:02:4e:24:89:6a:f6:55:04:68:b6: d6:12:91:76:fb:05:02:01:0f:0f:02:a1:0f:99:b1: db:28:8e:24:53:aa:b3:42:68:ba:1b:ea:c5:51:af: c4:86:d7:ff:06:4b:10:71:64:b8:1b:53:51:8f:99: 4d:7e:19:43:40:ee:06:c7:2e:2e:69:27:2a:b1:46: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5B:02:CB:61:C8:1A:DD:11:D8:7E:02:EE:14:CA:BE:F7:0C:1E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97936a49-6697-3eb2-875e-4638d0032b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0d:f0:43:40:43:92:47:70:6c:87:64:a9:77:be:79:64:71: 86:7e:83:be:cb:95:13:80:8a:82:60:38:5e:1c:39:83:67:57: 3e:45:39:16:72:00:e4:a7:ff:93:e9:2d:d7:b2:a4:2f:2a:89: 9c:67:55:e6:fe:3c:cf:95:af:ec:40:e1:ed:3f:4a:98:e2:26: 43:d0:84:00:bf:3b:c0:29:3d:52:7a:d3:6a:34:ae:a2:cc:35: 09:c0:b2:e7:a8:04:13:ca:9c:26:9e:7e:12:dc:f4:48:f5:63: c5:5c:c8:57:b6:f9:ae:8d:74:66:70:48:5f:58:b7:32:99:2d: 5c:54:53:3c:80:69:d0:e9:b1:ad:75:d6:e8:8e:33:af:c4:63: 6c:b6:60:99:e5:e5:6e:72:e2:18:35:1b:1f:7e:d3:b6:33:8c: 59:56:0f:79:7f:59:c1:72:16:1a:d1:74:7d:74:75:28:67:7c: 21:1d:0f:f7:09:c2:13:6e:1a:8d:4c:52:13:72:98:8c:c5:fa: 40:e1:1a:f2:45:8d:29:b2:39:0e:9a:e7:c1:53:84:96:08:38: e6:89:34:96:22:98:93:34:3b:93:39:41:c8:92:c5:c8:34:7c: 31:fc:db:e4:ee:c4:15:4a:26:d8:8b:49:80:76:22:0d:51:6b: 53:97:f7:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkBILjzjtrH2HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZmYxMTYwZmEtNDJhMS00NWQwLWI0YTUtMWFlYmIxMDk1ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPjcNoO7/Y2H0UbyPeriCvEhPA9L4bC4DmCJ lmE80R7xZ5jLAzcNEQcD/emPFtQ5DCFm+z5K4P0Tpg4B58YMkkGhJJw+/mofg5gi ABqf+dj49lgpK2zORFrVs0bQDqU8b6X9KlKfHai+csrd6KvNXqNjj5MaY/XdS2u2 0l6wTazIHkMXxCulsUFfI2L3QXtPTG9yh7PjpBB0mw7lWQCA21ZTruz19mGKo6Af hlCOEji5hPO7BlP59AJOJIlq9lUEaLbWEpF2+wUCAQ8PAqEPmbHbKI4kU6qzQmi6 G+rFUa/Ehtf/BksQcWS4G1NRj5lNfhlDQO4Gxy4uaScqsUYm4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtbAsthyBrdEdh+Au4Uyr73DB4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTc5MzZhNDktNjY5Ny0z ZWIyLTg3NWUtNDYzOGQwMDMyYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgdUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYN8ENAQ5JHcGyHZKl3vnlkcYZ+g77LlROAioJgOF4cOYNnVz5FORZy AOSn/5PpLdeypC8qiZxnVeb+PM+Vr+xA4e0/SpjiJkPQhAC/O8ApPVJ602o0rqLM NQnAsueoBBPKnCaefhLc9Ej1Y8VcyFe2+a6NdGZwSF9YtzKZLVxUUzyAadDpsa11 1uiOM6/EY2y2YJnl5W5y4hg1Gx9+07YzjFlWD3l/WcFyFhrRdH10dShnfCEdD/cJ whNuGo1MUhNymIzF+kDhGvJFjSmyOQ6a58FThJYIOOaJNJYimJM0O5M5QciSxcg0 fDH82+TuxBVKJtiLSYB2Ig1Ra1OX9yE= -----END CERTIFICATE-----Generated at Sat Sep 26 03:55:59 2026 by rpki-client