$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99434c7d-ca46-395a-b851-bd85057d30c4.roa File: 99434c7d-ca46-395a-b851-bd85057d30c4.roa (raw, json) Hash identifier: WvHQV+pmwLt3wClseAdgpQ9qdhb4Uu43Gskyfyyguk8= Subject key identifier: 25:A8:04:4E:D6:8F:C7:6A:38:DA:68:71:EA:C7:0F:78:48:4E:A3:C8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D464010CE2157F164FC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99434c7d-ca46-395a-b851-bd85057d30c4.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.157.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d4:64:01:0c:e2:15:7f:16:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=9607bdbc-1a5e-4b14-8bb0-500d0a6045d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:8d:4b:d0:ad:49:b8:70:a6:1e:5b:a7:29: d5:00:28:99:73:5c:89:b3:be:b5:ab:c3:62:b9:63: e0:3a:d6:9a:ed:35:1b:98:e5:ed:f2:7c:58:3e:61: ff:fe:75:b4:e7:10:e4:af:60:d9:af:57:cb:e7:1e: 4b:f5:50:25:ed:58:21:c3:2c:be:99:e5:f4:30:31: f6:a4:bf:c6:18:1a:06:54:9d:79:69:3e:52:69:67: a6:f0:99:68:e8:66:3b:49:90:80:e0:d9:9e:48:75: 15:d6:37:b4:4a:b0:be:ad:e0:23:d1:7e:42:44:58: 44:31:c9:4b:2d:43:cd:65:4b:6d:80:3f:16:0e:ae: 83:b8:f9:45:45:b0:2f:80:9e:f1:d1:64:65:cf:04: ca:b7:95:cf:50:0d:3c:8f:43:c8:68:25:4b:b2:d7: 5b:64:0f:27:ba:c7:d1:7a:fd:a3:73:41:7a:db:6a: 16:4d:ed:fe:91:67:49:05:e4:f6:10:d2:bc:b2:29: 24:4f:ab:26:fa:25:ab:e7:e5:de:7d:b6:eb:85:af: 30:0f:21:40:f3:18:a7:72:60:43:c6:0e:5e:dc:f3: 09:6d:41:d7:cc:72:4d:b5:37:cd:28:58:bc:11:31: 52:b9:50:20:47:1d:b7:f7:6b:11:bf:60:d1:1a:0b: 3e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A8:04:4E:D6:8F:C7:6A:38:DA:68:71:EA:C7:0F:78:48:4E:A3:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99434c7d-ca46-395a-b851-bd85057d30c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.157.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e4:94:b7:fc:17:4a:c2:0e:45:53:44:b8:b9:d7:08:c9:86: 9e:6b:5b:93:10:cb:21:3d:26:20:50:53:85:7e:7b:3d:30:a9: 86:65:5c:03:19:e6:3a:d8:c7:8b:63:b5:18:f6:0e:3b:91:0f: 3f:99:87:f3:1a:52:e0:cb:6a:96:67:e6:a9:ed:fc:c5:96:3c: 6e:54:76:8d:04:7d:74:dc:90:e7:e6:6e:b3:71:83:6f:0c:dc: fc:6c:85:18:dc:1c:69:ff:42:5d:2a:73:77:29:6e:24:cc:97: 36:ba:99:56:b7:cf:16:96:8c:dc:85:99:74:02:28:28:5d:8a: 47:c7:7c:79:81:c2:c1:73:34:4a:b1:2b:f1:92:4e:73:f0:4b: 4b:49:2b:6c:50:25:76:e0:fd:a5:3a:ff:8d:b1:e9:a8:b1:01: f1:fe:e4:7d:8c:eb:7b:3d:12:eb:6b:d6:28:d9:74:d5:af:c1: 69:38:56:55:d9:5d:f5:e4:63:d0:8c:87:d7:50:de:88:08:66: b9:e6:44:69:49:13:49:46:99:5f:3a:ae:55:07:ac:8f:d5:b5: e0:27:01:c0:41:20:ea:e0:da:b9:2f:77:ab:12:8e:16:1f:ee: 2c:bb:12:25:29:98:9a:64:8f:66:e9:a9:b5:77:6a:46:69:d9: 1d:12:ca:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99RkAQziFX8WT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OTYwN2JkYmMtMWE1ZS00YjE0LThiYjAtNTAwZDBhNjA0NWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5KNS9CtSbhwph5bpynVACiZc1yJs761q8Ni uWPgOtaa7TUbmOXt8nxYPmH//nW05xDkr2DZr1fL5x5L9VAl7Vghwyy+meX0MDH2 pL/GGBoGVJ15aT5SaWem8Jlo6GY7SZCA4NmeSHUV1je0SrC+reAj0X5CRFhEMclL LUPNZUttgD8WDq6DuPlFRbAvgJ7x0WRlzwTKt5XPUA08j0PIaCVLstdbZA8nusfR ev2jc0F622oWTe3+kWdJBeT2ENK8sikkT6sm+iWr5+Xefbbrha8wDyFA8xincmBD xg5e3PMJbUHXzHJNtTfNKFi8ETFSuVAgRx2392sRv2DRGgs+xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWoBE7Wj8dqONpocerHD3hITqPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTk0MzRjN2QtY2E0Ni0z OTVhLWI4NTEtYmQ4NTA1N2QzMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZ16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbklLf8F0rCDkVTRLi51wjJhp5rW5MQyyE9JiBQU4V+ez0wqYZlXAMZ 5jrYx4tjtRj2DjuRDz+Zh/MaUuDLapZn5qnt/MWWPG5Udo0EfXTckOfmbrNxg28M 3PxshRjcHGn/Ql0qc3cpbiTMlza6mVa3zxaWjNyFmXQCKChdikfHfHmBwsFzNEqx K/GSTnPwS0tJK2xQJXbg/aU6/42x6aixAfH+5H2M63s9Eutr1ijZdNWvwWk4VlXZ XfXkY9CMh9dQ3ogIZrnmRGlJE0lGmV86rlUHrI/VteAnAcBBIOrg2rkvd6sSjhYf 7iy7EiUpmJpkj2bpqbV3akZp2R0SypA= -----END CERTIFICATE-----Generated at Sun Sep 27 04:51:36 2026 by rpki-client